last executing test programs: 1.312441104s ago: executing program 1 (id=271): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a00", @ANYRES32], 0x58}}, 0x8000) 1.23941321s ago: executing program 1 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x2, 0xfffffffd, @mcast2}}}, &(0x7f0000000180)=0x84) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='F', 0x1}], 0x1}}], 0x1, 0xc841) 1.206619873s ago: executing program 1 (id=276): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 1.141573288s ago: executing program 1 (id=290): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") 1.035767176s ago: executing program 1 (id=282): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 667.711386ms ago: executing program 1 (id=288): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 550.279656ms ago: executing program 2 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x2c, r1, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 489.94952ms ago: executing program 2 (id=306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x4c) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) 455.454383ms ago: executing program 2 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 377.194309ms ago: executing program 2 (id=315): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x4020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 346.052652ms ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) 335.020543ms ago: executing program 0 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 289.722236ms ago: executing program 2 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r1, @ANYBLOB="140001"], 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 288.516007ms ago: executing program 0 (id=323): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 243.09495ms ago: executing program 4 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 232.864831ms ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 224.135752ms ago: executing program 2 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 202.383913ms ago: executing program 3 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 200.716694ms ago: executing program 0 (id=329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r1, 0x0, 0x2) 193.915964ms ago: executing program 4 (id=330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000004600)=[{{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x2, 0x48800) 183.505415ms ago: executing program 3 (id=331): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x1}, 0x5c) 148.324238ms ago: executing program 3 (id=332): open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 136.288529ms ago: executing program 0 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$TCXONC(r2, 0x5453, 0x0) 112.343901ms ago: executing program 4 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r1) 102.528991ms ago: executing program 3 (id=335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 87.695923ms ago: executing program 0 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x30, r2, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 54.873366ms ago: executing program 4 (id=337): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 36.029447ms ago: executing program 0 (id=338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@sysvgroups}, {@dioread_nolock}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x5e0, &(0x7f0000000bc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0x0, 0x0) 5.47095ms ago: executing program 4 (id=339): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x800, 0x23456}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0xd, {0x7, 0x3}, 0x3}, 0x1) 0s ago: executing program 3 (id=340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x6ed, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 27.226571][ T29] audit: type=1400 audit(1753870581.444:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.227735][ T3287] cgroup: Unknown subsys name 'net' [ 27.249328][ T29] audit: type=1400 audit(1753870581.444:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.276817][ T29] audit: type=1400 audit(1753870581.484:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.408974][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.415182][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.556354][ T29] audit: type=1400 audit(1753870581.774:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.579846][ T29] audit: type=1400 audit(1753870581.774:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.600377][ T29] audit: type=1400 audit(1753870581.774:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.620859][ T29] audit: type=1400 audit(1753870581.774:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.641240][ T29] audit: type=1400 audit(1753870581.814:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.650753][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.666132][ T29] audit: type=1400 audit(1753870581.814:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.698092][ T29] audit: type=1400 audit(1753870581.904:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.770025][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.440081][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.499224][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.506326][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.513533][ T3302] bridge_slave_0: entered allmulticast mode [ 29.519912][ T3302] bridge_slave_0: entered promiscuous mode [ 29.535146][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.542342][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.549613][ T3302] bridge_slave_1: entered allmulticast mode [ 29.556141][ T3302] bridge_slave_1: entered promiscuous mode [ 29.590313][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.601205][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.630266][ T3302] team0: Port device team_slave_0 added [ 29.638840][ T3302] team0: Port device team_slave_1 added [ 29.659784][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.682953][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.690036][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.715989][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.740094][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.747072][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.773018][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.800155][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.833642][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.877219][ T3302] hsr_slave_0: entered promiscuous mode [ 29.883413][ T3302] hsr_slave_1: entered promiscuous mode [ 29.891696][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.900544][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.907665][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.914879][ T3301] bridge_slave_0: entered allmulticast mode [ 29.921547][ T3301] bridge_slave_0: entered promiscuous mode [ 29.948477][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.955653][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.962871][ T3301] bridge_slave_1: entered allmulticast mode [ 29.969386][ T3301] bridge_slave_1: entered promiscuous mode [ 30.001633][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.008817][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.015951][ T3300] bridge_slave_0: entered allmulticast mode [ 30.022463][ T3300] bridge_slave_0: entered promiscuous mode [ 30.037200][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.046493][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.053602][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.060830][ T3300] bridge_slave_1: entered allmulticast mode [ 30.067204][ T3300] bridge_slave_1: entered promiscuous mode [ 30.083598][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.103760][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.130180][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.159422][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.166508][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.173780][ T3307] bridge_slave_0: entered allmulticast mode [ 30.180448][ T3307] bridge_slave_0: entered promiscuous mode [ 30.192680][ T3301] team0: Port device team_slave_0 added [ 30.199346][ T3301] team0: Port device team_slave_1 added [ 30.205077][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.212228][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.219444][ T3308] bridge_slave_0: entered allmulticast mode [ 30.225910][ T3308] bridge_slave_0: entered promiscuous mode [ 30.240308][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.247441][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.254668][ T3307] bridge_slave_1: entered allmulticast mode [ 30.261142][ T3307] bridge_slave_1: entered promiscuous mode [ 30.272592][ T3300] team0: Port device team_slave_0 added [ 30.283637][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.290760][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.297940][ T3308] bridge_slave_1: entered allmulticast mode [ 30.304546][ T3308] bridge_slave_1: entered promiscuous mode [ 30.319700][ T3300] team0: Port device team_slave_1 added [ 30.347050][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.354031][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.380042][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.398419][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.408729][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.419009][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.433328][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.440365][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.466307][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.484871][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.499620][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.506591][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.532662][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.544045][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.551075][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.577178][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.626050][ T3301] hsr_slave_0: entered promiscuous mode [ 30.632078][ T3301] hsr_slave_1: entered promiscuous mode [ 30.637946][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.643741][ T3301] Cannot create hsr debugfs directory [ 30.649997][ T3307] team0: Port device team_slave_0 added [ 30.656594][ T3308] team0: Port device team_slave_0 added [ 30.675478][ T3307] team0: Port device team_slave_1 added [ 30.687204][ T3308] team0: Port device team_slave_1 added [ 30.725917][ T3300] hsr_slave_0: entered promiscuous mode [ 30.732130][ T3300] hsr_slave_1: entered promiscuous mode [ 30.737986][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.743774][ T3300] Cannot create hsr debugfs directory [ 30.752232][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.759249][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.785269][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.799455][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.806509][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.832476][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.843655][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.850668][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.876652][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.890381][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.897454][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.923442][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.934158][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.945894][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.968566][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.993732][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.015015][ T3308] hsr_slave_0: entered promiscuous mode [ 31.021664][ T3308] hsr_slave_1: entered promiscuous mode [ 31.027533][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.033311][ T3308] Cannot create hsr debugfs directory [ 31.066199][ T3307] hsr_slave_0: entered promiscuous mode [ 31.072519][ T3307] hsr_slave_1: entered promiscuous mode [ 31.078320][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.084068][ T3307] Cannot create hsr debugfs directory [ 31.183635][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.196775][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.205662][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.216783][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.270948][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.286334][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.308002][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.317366][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.346574][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.372435][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.387484][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.396810][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.408866][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.415999][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.442326][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.452216][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.462727][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.472987][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.485296][ T1921] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.492440][ T1921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.503127][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.510337][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.525261][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.532438][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.549546][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.556713][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.587609][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.594780][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.641040][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.661885][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.684830][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.705213][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.718537][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.725659][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.735218][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.742378][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.758734][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.770390][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.781789][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.788913][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.818362][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.829354][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.836475][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.855664][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.870615][ T1921] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.877737][ T1921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.889735][ T1921] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.896845][ T1921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.911686][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.943216][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.953756][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.015187][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.068597][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.091169][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.159594][ T3301] veth0_vlan: entered promiscuous mode [ 32.179462][ T3301] veth1_vlan: entered promiscuous mode [ 32.204592][ T3302] veth0_vlan: entered promiscuous mode [ 32.213462][ T3302] veth1_vlan: entered promiscuous mode [ 32.244179][ T3301] veth0_macvtap: entered promiscuous mode [ 32.259762][ T3302] veth0_macvtap: entered promiscuous mode [ 32.269635][ T3301] veth1_macvtap: entered promiscuous mode [ 32.287152][ T3302] veth1_macvtap: entered promiscuous mode [ 32.294629][ T3300] veth0_vlan: entered promiscuous mode [ 32.302171][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.314004][ T3307] veth0_vlan: entered promiscuous mode [ 32.324797][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.335346][ T3307] veth1_vlan: entered promiscuous mode [ 32.344107][ T3300] veth1_vlan: entered promiscuous mode [ 32.353488][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362327][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.371132][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.379997][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.395473][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.414865][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.425602][ T3308] veth0_vlan: entered promiscuous mode [ 32.432687][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.441629][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.450486][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459375][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480535][ T3308] veth1_vlan: entered promiscuous mode [ 32.491140][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.491157][ T29] audit: type=1400 audit(1753870586.704:81): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.pd5Fa8/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.496194][ T3307] veth0_macvtap: entered promiscuous mode [ 32.497229][ T29] audit: type=1400 audit(1753870586.714:82): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.508618][ T29] audit: type=1400 audit(1753870586.714:83): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.pd5Fa8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.574813][ T29] audit: type=1400 audit(1753870586.714:84): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.596648][ T29] audit: type=1400 audit(1753870586.714:85): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.pd5Fa8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.623422][ T29] audit: type=1400 audit(1753870586.714:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.pd5Fa8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.650934][ T29] audit: type=1400 audit(1753870586.714:87): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.671649][ T29] audit: type=1400 audit(1753870586.754:88): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.694522][ T29] audit: type=1400 audit(1753870586.754:89): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.697829][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.734260][ T3300] veth0_macvtap: entered promiscuous mode [ 32.737679][ T29] audit: type=1400 audit(1753870586.954:90): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.742244][ T3300] veth1_macvtap: entered promiscuous mode [ 32.777907][ T3307] veth1_macvtap: entered promiscuous mode [ 32.802506][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.821451][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.835821][ T3308] veth0_macvtap: entered promiscuous mode [ 32.851344][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.860155][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.868908][ T3300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877716][ T3300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.900938][ T3308] veth1_macvtap: entered promiscuous mode [ 32.902563][ T3473] loop0: detected capacity change from 0 to 256 [ 32.911153][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.937508][ T3473] FAT-fs (loop0): codepage cp869 not found [ 32.949322][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.961241][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.990119][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.003188][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012175][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020999][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.029938][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.045470][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054357][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063230][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.072232][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.132105][ T3479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.168481][ T3481] loop0: detected capacity change from 0 to 1024 [ 33.175182][ T3481] ======================================================= [ 33.175182][ T3481] WARNING: The mand mount option has been deprecated and [ 33.175182][ T3481] and is ignored by this kernel. Remove the mand [ 33.175182][ T3481] option from the mount to silence this warning. [ 33.175182][ T3481] ======================================================= [ 33.300473][ T3488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.352676][ T3488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.372261][ C0] hrtimer: interrupt took 28125 ns [ 33.379214][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.407080][ T3481] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.6: Allocating blocks 385-513 which overlap fs metadata [ 33.407775][ T3491] infiniband syz!: set active [ 33.425624][ T3491] infiniband syz!: added team_slave_0 [ 33.429813][ T3481] EXT4-fs (loop0): pa ffff888106dab000: logic 16, phys. 129, len 24 [ 33.439172][ T3481] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 33.484340][ T3491] RDS/IB: syz!: added [ 33.511204][ T3491] smc: adding ib device syz! with port count 1 [ 33.517436][ T3491] smc: ib device syz! port 1 has pnetid [ 33.530589][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.723496][ T3510] loop0: detected capacity change from 0 to 512 [ 33.828884][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.880390][ T3510] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.019426][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.053855][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.068507][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.262461][ T3491] syz.3.8 (3491) used greatest stack depth: 10616 bytes left [ 34.364998][ T3562] loop4: detected capacity change from 0 to 512 [ 34.393089][ T3562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.407125][ T3571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.418100][ T3562] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.471428][ T3577] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 34.493502][ T3571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.511780][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.535274][ T3581] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 34.543000][ T3581] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 34.575888][ T3584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 34.595271][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 34.720030][ T3597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 34.728982][ T3597] netlink: 108 bytes leftover after parsing attributes in process `syz.4.50'. [ 34.799467][ T3611] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.823055][ T3611] netlink: 'syz.3.57': attribute type 2 has an invalid length. [ 34.864415][ T3615] program syz.0.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.951459][ T3629] loop3: detected capacity change from 0 to 128 [ 35.046676][ T3640] netlink: 'syz.4.71': attribute type 3 has an invalid length. [ 35.483596][ T3695] loop0: detected capacity change from 0 to 512 [ 35.513775][ T3695] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.530124][ T3695] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.538321][ T3695] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.578280][ T3695] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 35.593132][ T3695] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.97: bg 0: block 40: padding at end of block bitmap is not set [ 35.616385][ T3695] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 35.637808][ T3695] EXT4-fs (loop0): 1 truncate cleaned up [ 35.644322][ T3695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.663952][ T3695] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.690354][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.774046][ T3718] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 35.781966][ T3719] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 35.793458][ T3719] SELinux: failed to load policy [ 35.905853][ T3734] capability: warning: `syz.4.115' uses 32-bit capabilities (legacy support in use) [ 36.033106][ T3744] hub 6-0:1.0: USB hub found [ 36.041934][ T3750] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 36.048511][ T3750] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 36.056792][ T3750] vhci_hcd vhci_hcd.0: Device attached [ 36.065601][ T3744] hub 6-0:1.0: 8 ports detected [ 36.098059][ T3750] vhci_hcd vhci_hcd.0: port 0 already used [ 36.126860][ T3754] vhci_hcd: connection closed [ 36.127041][ T125] vhci_hcd: stop threads [ 36.136344][ T125] vhci_hcd: release socket [ 36.140825][ T125] vhci_hcd: disconnect device [ 36.165399][ T3770] loop3: detected capacity change from 0 to 1024 [ 36.237511][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.272407][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.468809][ T3801] loop2: detected capacity change from 0 to 128 [ 36.487689][ T3801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.511480][ T3801] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.647809][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.723980][ T2991] udevd[2991]: worker [3486] terminated by signal 33 (Unknown signal 33) [ 36.732924][ T2991] udevd[2991]: worker [3486] failed while handling '/devices/virtual/block/loop2' [ 36.824897][ T3831] loop4: detected capacity change from 0 to 7 [ 36.851925][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.861181][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.880797][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.890040][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.897918][ T3831] loop4: unable to read partition table [ 36.908790][ T3831] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 36.931350][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.940579][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.948758][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.957967][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.970271][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.979499][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.996642][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.005874][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 37.013997][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.023196][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 37.079804][ T3854] loop3: detected capacity change from 0 to 512 [ 37.086893][ T3854] EXT4-fs: Ignoring removed oldalloc option [ 37.097319][ T3854] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.160: Parent and EA inode have the same ino 15 [ 37.135422][ T3854] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.148889][ T3854] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.160: Parent and EA inode have the same ino 15 [ 37.165774][ T3854] EXT4-fs (loop3): 1 orphan inode deleted [ 37.173109][ T3854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.212887][ T3870] Zero length message leads to an empty skb [ 37.271741][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.554613][ T3921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3921 comm=syz.0.186 [ 37.585665][ T3919] bridge_slave_0: left allmulticast mode [ 37.591495][ T3919] bridge_slave_0: left promiscuous mode [ 37.597394][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.616734][ T3919] bridge_slave_1: left allmulticast mode [ 37.622517][ T3919] bridge_slave_1: left promiscuous mode [ 37.628532][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.638568][ T3919] bond0: (slave bond_slave_0): Releasing backup interface [ 37.648567][ T3919] bond0: (slave bond_slave_1): Releasing backup interface [ 37.662459][ T3919] team0: Port device team_slave_0 removed [ 37.671658][ T3919] team0: Port device team_slave_1 removed [ 37.679322][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.686746][ T3919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.695950][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.703418][ T3919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.730989][ T10] syz!: Port: 1 Link DOWN [ 37.808527][ T3933] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 37.808519][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 37.808574][ T29] audit: type=1400 audit(1753870848.037:335): avc: denied { relabelfrom } for pid=3931 comm="+}[@" name="NETLINK" dev="sockfs" ino=6187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 37.854896][ T29] audit: type=1400 audit(1753870848.037:336): avc: denied { relabelto } for pid=3931 comm="+}[@" name="NETLINK" dev="sockfs" ino=6187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:cpu_online_t:s0" [ 37.895797][ T3939] netlink: 'syz.3.194': attribute type 22 has an invalid length. [ 37.957936][ T29] audit: type=1326 audit(1753870848.177:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 37.992161][ T29] audit: type=1326 audit(1753870848.217:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.015576][ T29] audit: type=1326 audit(1753870848.217:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.038922][ T29] audit: type=1326 audit(1753870848.217:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.062562][ T29] audit: type=1326 audit(1753870848.217:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.086162][ T29] audit: type=1326 audit(1753870848.217:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.109701][ T29] audit: type=1326 audit(1753870848.217:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.116368][ T3955] gtp1: entered promiscuous mode [ 38.133380][ T29] audit: type=1326 audit(1753870848.217:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc263f5e9a9 code=0x7ffc0000 [ 38.138640][ T3955] gtp1: entered allmulticast mode [ 38.349288][ T3980] process 'syz.3.213' launched '/dev/fd/5' with NULL argv: empty string added [ 38.391776][ T3982] loop4: detected capacity change from 0 to 7 [ 38.398696][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.407869][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.416061][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.425230][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.433265][ T3982] loop4: unable to read partition table [ 38.439359][ T3982] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 38.455113][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.464334][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.473884][ T2991] loop4: unable to read partition table [ 38.487537][ T3986] loop3: detected capacity change from 0 to 128 [ 38.536521][ T3986] syz.3.217: attempt to access beyond end of device [ 38.536521][ T3986] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 38.550352][ T3986] syz.3.217: attempt to access beyond end of device [ 38.550352][ T3986] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 38.564095][ T3986] syz.3.217: attempt to access beyond end of device [ 38.564095][ T3986] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 38.609710][ T3986] syz.3.217: attempt to access beyond end of device [ 38.609710][ T3986] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 38.629519][ T3986] syz.3.217: attempt to access beyond end of device [ 38.629519][ T3986] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 38.643240][ T3986] syz.3.217: attempt to access beyond end of device [ 38.643240][ T3986] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 38.664912][ T3986] syz.3.217: attempt to access beyond end of device [ 38.664912][ T3986] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 38.687694][ T3986] syz.3.217: attempt to access beyond end of device [ 38.687694][ T3986] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 38.701828][ T3986] syz.3.217: attempt to access beyond end of device [ 38.701828][ T3986] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 38.715991][ T3986] syz.3.217: attempt to access beyond end of device [ 38.715991][ T3986] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 39.191666][ T4037] __nla_validate_parse: 20 callbacks suppressed [ 39.191681][ T4037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 39.231268][ T4039] loop0: detected capacity change from 0 to 128 [ 39.355683][ T4042] bridge_slave_0: left allmulticast mode [ 39.361548][ T4042] bridge_slave_0: left promiscuous mode [ 39.367283][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.388716][ T4042] bridge_slave_1: left allmulticast mode [ 39.394444][ T4042] bridge_slave_1: left promiscuous mode [ 39.400528][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.419230][ T4042] bond0: (slave bond_slave_0): Releasing backup interface [ 39.429533][ T4042] bond0: (slave bond_slave_1): Releasing backup interface [ 39.472314][ T4042] team0: Port device team_slave_0 removed [ 39.487023][ T4042] team0: Port device team_slave_1 removed [ 39.496012][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.503633][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.537127][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.544863][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.581805][ T4059] netlink: 116 bytes leftover after parsing attributes in process `syz.2.243'. [ 39.659899][ T4003] syz.1.226 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 39.670976][ T4003] CPU: 0 UID: 0 PID: 4003 Comm: syz.1.226 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 39.671078][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.671095][ T4003] Call Trace: [ 39.671103][ T4003] [ 39.671112][ T4003] __dump_stack+0x1d/0x30 [ 39.671144][ T4003] dump_stack_lvl+0xe8/0x140 [ 39.671163][ T4003] dump_stack+0x15/0x1b [ 39.671179][ T4003] dump_header+0x81/0x220 [ 39.671237][ T4003] oom_kill_process+0x342/0x400 [ 39.671271][ T4003] out_of_memory+0x979/0xb80 [ 39.671313][ T4003] try_charge_memcg+0x5e6/0x9e0 [ 39.671379][ T4003] charge_memcg+0x51/0xc0 [ 39.671465][ T4003] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 39.671565][ T4003] __read_swap_cache_async+0x1df/0x350 [ 39.671615][ T4003] swap_cluster_readahead+0x277/0x3e0 [ 39.671668][ T4003] swapin_readahead+0xde/0x6f0 [ 39.671771][ T4003] ? __filemap_get_folio+0x4f7/0x6b0 [ 39.671815][ T4003] ? folio_add_file_rmap_ptes+0x173/0x1a0 [ 39.671848][ T4003] ? swap_cache_get_folio+0x77/0x200 [ 39.671883][ T4003] do_swap_page+0x301/0x2430 [ 39.671967][ T4003] ? finish_fault+0x8be/0x9d0 [ 39.672003][ T4003] ? _raw_spin_unlock+0x26/0x50 [ 39.672028][ T4003] ? css_rstat_updated+0xcd/0x5b0 [ 39.672150][ T4003] ? block_dirty_folio+0xc1/0x110 [ 39.672240][ T4003] ? inode_to_bdi+0x47/0xa0 [ 39.672266][ T4003] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 39.672305][ T4003] ? __pfx_default_wake_function+0x10/0x10 [ 39.672341][ T4003] handle_mm_fault+0x9a5/0x2be0 [ 39.672523][ T4003] ? mas_walk+0xf2/0x120 [ 39.672566][ T4003] do_user_addr_fault+0x636/0x1090 [ 39.672615][ T4003] exc_page_fault+0x62/0xa0 [ 39.672644][ T4003] asm_exc_page_fault+0x26/0x30 [ 39.672719][ T4003] RIP: 0033:0x7efc336dec10 [ 39.672800][ T4003] Code: 29 f1 4c 8b 54 24 10 4c 8b 44 24 28 a8 06 48 89 4b 38 c6 01 00 0f 84 f0 fe ff ff b8 01 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 38 c6 04 01 00 48 83 c0 01 48 39 f0 72 ef e9 cb fe ff ff [ 39.672821][ T4003] RSP: 002b:00007fff8575b780 EFLAGS: 00010293 [ 39.672836][ T4003] RAX: 0000000000000002 RBX: 00007efc34555720 RCX: 0000001b3221b558 [ 39.672883][ T4003] RDX: 0000001b31c2021c RSI: 0000000000000004 RDI: 00007efc34555720 [ 39.672899][ T4003] RBP: ffffffff84460c0f R08: 00007efc33a26038 R09: 00007efc33a12000 [ 39.672955][ T4003] R10: 00007efc32e67008 R11: 0000000000000004 R12: 0000000000000004 [ 39.672968][ T4003] R13: 0000000000000000 R14: ffffffff84460565 R15: 0000000000000000 [ 39.672991][ T4003] ? __x64_sys_sendmsg+0x25/0x160 [ 39.673022][ T4003] ? __ia32_sys_sendmmsg+0x5f/0x70 [ 39.673067][ T4003] [ 39.673138][ T4003] memory: usage 307200kB, limit 307200kB, failcnt 250 [ 39.931688][ T4003] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 39.939722][ T4003] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 39.947054][ T4003] Memory cgroup stats for /syz1: [ 39.947406][ T4003] cache 0 [ 39.955435][ T4003] rss 0 [ 39.958312][ T4003] shmem 0 [ 39.961349][ T4003] mapped_file 0 [ 39.964906][ T4003] dirty 0 [ 39.967928][ T4003] writeback 0 [ 39.971266][ T4003] workingset_refault_anon 34 [ 39.975880][ T4003] workingset_refault_file 42 [ 39.980508][ T4003] swap 266240 [ 39.983823][ T4003] swapcached 4096 [ 39.987476][ T4003] pgpgin 4893 [ 39.990815][ T4003] pgpgout 4892 [ 39.994277][ T4003] pgfault 7805 [ 39.997725][ T4003] pgmajfault 30 [ 40.001226][ T4003] inactive_anon 0 [ 40.004876][ T4003] active_anon 4096 [ 40.008706][ T4003] inactive_file 0 [ 40.012354][ T4003] active_file 0 [ 40.015830][ T4003] unevictable 0 [ 40.019479][ T4003] hierarchical_memory_limit 314572800 [ 40.024866][ T4003] hierarchical_memsw_limit 9223372036854771712 [ 40.031054][ T4003] total_cache 0 [ 40.034542][ T4003] total_rss 0 [ 40.037846][ T4003] total_shmem 0 [ 40.041413][ T4003] total_mapped_file 0 [ 40.045413][ T4003] total_dirty 0 [ 40.049003][ T4003] total_writeback 0 [ 40.052895][ T4003] total_workingset_refault_anon 34 [ 40.058039][ T4003] total_workingset_refault_file 42 [ 40.063266][ T4003] total_swap 266240 [ 40.067099][ T4003] total_swapcached 4096 [ 40.071299][ T4003] total_pgpgin 4893 [ 40.075219][ T4003] total_pgpgout 4892 [ 40.079157][ T4003] total_pgfault 7805 [ 40.083069][ T4003] total_pgmajfault 30 [ 40.087064][ T4003] total_inactive_anon 0 [ 40.091267][ T4003] total_active_anon 4096 [ 40.095590][ T4003] total_inactive_file 0 [ 40.099790][ T4003] total_active_file 0 [ 40.101577][ T4068] loop0: detected capacity change from 0 to 512 [ 40.103786][ T4003] total_unevictable 0 [ 40.103798][ T4003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 40.113198][ T4068] EXT4-fs: Ignoring removed oldalloc option [ 40.114110][ T4003] ,cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.226,pid=4003,uid=0 [ 40.137016][ T4003] Memory cgroup out of memory: Killed process 4003 (syz.1.226) total-vm:95604kB, anon-rss:1068kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 40.180367][ T4068] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.247: Parent and EA inode have the same ino 15 [ 40.206158][ T4068] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.247: Parent and EA inode have the same ino 15 [ 40.220168][ T4068] EXT4-fs (loop0): 1 orphan inode deleted [ 40.227180][ T4068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.237476][ T4003] syz.1.226 (4003) used greatest stack depth: 9688 bytes left [ 40.361876][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.426124][ T4086] loop3: detected capacity change from 0 to 128 [ 40.455289][ T4091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 40.461861][ T4091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 40.470205][ T4091] vhci_hcd vhci_hcd.0: Device attached [ 40.483825][ T4086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.496315][ T4086] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.497863][ T4091] vhci_hcd vhci_hcd.0: port 0 already used [ 40.506912][ T4004] syz.1.226 (4004) used greatest stack depth: 6640 bytes left [ 40.524193][ T4093] vhci_hcd: connection closed [ 40.524566][ T12] vhci_hcd: stop threads [ 40.534745][ T12] vhci_hcd: release socket [ 40.539234][ T12] vhci_hcd: disconnect device [ 40.576786][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.610020][ T4105] loop4: detected capacity change from 0 to 1024 [ 40.637874][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.674080][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.745933][ T4116] loop4: detected capacity change from 0 to 512 [ 40.773852][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.795879][ T4116] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.831212][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.894105][ T4128] hub 6-0:1.0: USB hub found [ 40.902688][ T4128] hub 6-0:1.0: 8 ports detected [ 41.004944][ T4144] loop4: detected capacity change from 0 to 512 [ 41.030094][ T4144] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.053576][ T4144] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.063657][ T4144] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.120268][ T4144] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 41.139714][ T4144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.273: bg 0: block 40: padding at end of block bitmap is not set [ 41.157924][ T4161] loop3: detected capacity change from 0 to 512 [ 41.170576][ T4144] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.185739][ T4144] EXT4-fs (loop4): 1 truncate cleaned up [ 41.191988][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.231657][ T4161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.251834][ T4144] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.268076][ T4161] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.306299][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.353471][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.377793][ T4179] loop4: detected capacity change from 0 to 128 [ 41.403807][ T4179] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.442857][ T4179] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.462086][ T4182] hub 6-0:1.0: USB hub found [ 41.468268][ T4182] hub 6-0:1.0: 8 ports detected [ 41.517032][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 41.543396][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 41.545828][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.569924][ T4188] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 41.765288][ T4220] unsupported nla_type 52263 [ 41.885617][ T4244] netlink: 'syz.4.316': attribute type 2 has an invalid length. [ 41.977068][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 41.988007][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 42.094828][ T4276] raw_sendmsg: syz.4.330 forgot to set AF_INET. Fix it! [ 42.176229][ T4284] mmap: syz.3.335 (4284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.262805][ T4293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.284940][ T4296] ================================================================== [ 42.293156][ T4296] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 42.299866][ T4296] [ 42.302199][ T4296] write to 0xffff888106d156d0 of 8 bytes by task 4297 on cpu 0: [ 42.309844][ T4296] __dentry_kill+0x142/0x4b0 [ 42.314458][ T4296] dput+0x5e/0xd0 [ 42.318110][ T4296] step_into+0x5b2/0x820 [ 42.322375][ T4296] path_openat+0x13e8/0x2170 [ 42.327021][ T4296] do_filp_open+0x109/0x230 [ 42.331551][ T4296] io_openat2+0x272/0x390 [ 42.335905][ T4296] io_openat+0x1b/0x30 [ 42.339995][ T4296] __io_issue_sqe+0xfb/0x2e0 [ 42.344616][ T4296] io_issue_sqe+0x53/0x970 [ 42.349060][ T4296] io_wq_submit_work+0x3f7/0x5f0 [ 42.354033][ T4296] io_worker_handle_work+0x44e/0x9b0 [ 42.359343][ T4296] io_wq_worker+0x22e/0x870 [ 42.363874][ T4296] ret_from_fork+0xdd/0x150 [ 42.368397][ T4296] ret_from_fork_asm+0x1a/0x30 [ 42.373180][ T4296] [ 42.375512][ T4296] read to 0xffff888106d156d0 of 8 bytes by task 4296 on cpu 1: [ 42.383077][ T4296] fast_dput+0x5f/0x2c0 [ 42.387255][ T4296] dput+0x24/0xd0 [ 42.390908][ T4296] step_into+0x5b2/0x820 [ 42.395175][ T4296] path_openat+0x13e8/0x2170 [ 42.399802][ T4296] do_filp_open+0x109/0x230 [ 42.404351][ T4296] io_openat2+0x272/0x390 [ 42.408713][ T4296] io_openat+0x1b/0x30 [ 42.412798][ T4296] __io_issue_sqe+0xfb/0x2e0 [ 42.417412][ T4296] io_issue_sqe+0x53/0x970 [ 42.421906][ T4296] io_wq_submit_work+0x3f7/0x5f0 [ 42.426887][ T4296] io_worker_handle_work+0x44e/0x9b0 [ 42.432403][ T4296] io_wq_worker+0x22e/0x870 [ 42.436939][ T4296] ret_from_fork+0xdd/0x150 [ 42.441530][ T4296] ret_from_fork_asm+0x1a/0x30 [ 42.446328][ T4296] [ 42.448669][ T4296] value changed: 0xffff888237586060 -> 0x0000000000000000 [ 42.455796][ T4296] [ 42.458128][ T4296] Reported by Kernel Concurrency Sanitizer on: [ 42.464296][ T4296] CPU: 1 UID: 0 PID: 4296 Comm: iou-wrk-4295 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 42.476551][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.486633][ T4296] ==================================================================