last executing test programs: 2.189613208s ago: executing program 0 (id=300): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x20) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.166716851s ago: executing program 4 (id=301): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, r3, 0x1c, {0x7, 0xa42}, 0x80}, 0x1) 1.993719003s ago: executing program 2 (id=302): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x32}, 0x1}}, 0x80, 0x0}, 0x0) 1.967062147s ago: executing program 1 (id=303): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) getresgid(0x0, 0x0, 0x0) getgid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.961206097s ago: executing program 2 (id=304): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000200)=""/210, 0xd2, 0x8) pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 1.937286051s ago: executing program 1 (id=305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.921496963s ago: executing program 2 (id=306): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x4, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.765631183s ago: executing program 1 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x808e}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r1, 0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b030000000000000000260000001f0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc96}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004090) 1.765255583s ago: executing program 4 (id=308): preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0x80000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.744753635s ago: executing program 1 (id=309): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1.663714406s ago: executing program 1 (id=310): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.55551045s ago: executing program 4 (id=311): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0xb5c4f23a2d064472, 0x0, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 1.362509275s ago: executing program 3 (id=313): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000100)=0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) 1.280650075s ago: executing program 0 (id=314): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.252803388s ago: executing program 0 (id=315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x7, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.129239255s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@dioread_nolock}, {@noinit_itable}], [{@obj_user={'obj_user', 0x3d, 'kmem_cache_free\x00'}}, {@smackfshat}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'max_batch_time'}}, {@pcr={'pcr', 0x3d, 0x29}}, {@uid_lt}]}, 0x3, 0x590, &(0x7f0000001100)="$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") r0 = eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) fallocate(0xffffffffffffffff, 0x80, 0x5d, 0x1000000005) 1.018537199s ago: executing program 2 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x2, 0x80, 0x3a, 0x2, 0x0, 0x0, 0x0, 0x9, 0x500, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x81, 0x40, 0x1, 0x9, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 948.187188ms ago: executing program 3 (id=318): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319aed44) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 930.30886ms ago: executing program 0 (id=319): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 866.000058ms ago: executing program 2 (id=320): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, 0x5, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 842.308592ms ago: executing program 2 (id=321): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2240, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 786.551159ms ago: executing program 3 (id=322): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000380)=')', 0x1, 0x11, 0x0, 0x0) close(r1) 761.904402ms ago: executing program 3 (id=323): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 653.340716ms ago: executing program 4 (id=324): socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 561.628968ms ago: executing program 3 (id=325): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4}, 0x94) syz_read_part_table(0x5a5, &(0x7f0000001000)="$eJzs0r9L61cUAPCTtJLX8krk8eANr8ODF1waFeLQDglFJIYsKmKlg7PgoIPg4CApUeim9h+o+KNFXMTOjmIEsSVOklH8B1pcMqW0fsHarS1RpJ/P9L33nPM993Ju8Kyl48cP7746mX9e/dVBebT6bmJ4cioiFTMRUf705Z+RVDz861GyHk/W1UyhuX0+8ttB78X7y0ZuN53Ej9MR30TE/PVe9j9djP+Fw9JpdnVtsbK+XJq7qqzcDM32l99ulBe++3ynWJt+U/w6eVjH6W71fxER9/1zzW+/vIsM9DSa7cJZkpdPdac/T+vv72/rdb1Vb4/17S8N5l+1TmqbydxvzR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyw9JpdnVtsfJiuTR3VVm5GZrtL7/dKC+0OzvF2vSb4i9J3nG6u/3Xk/655hc//NwZ//X7TwZ6Gs124SzJy6ce1n0QET9150g8os/i4fy3Xtdb9fZY3/7SYP5V66S2mcz9NvXUJwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnovyaPXdxPDkVEQqZl5GRLp374/9TuY+5+OIOEq+x5P9aqbQ3D4f6TnovXh/2cjtTmQi/lIS89d72Y8e8yL8K78HAAD//9xXfTA=") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYBLOB='\x00', @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 523.098313ms ago: executing program 3 (id=326): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x82, 0x0) write$bt_hci(r4, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 522.584732ms ago: executing program 4 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) 28.901006ms ago: executing program 1 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x30) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x4007) 3.214979ms ago: executing program 0 (id=329): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x44885}, 0x480c5) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/45, 0x2d}], 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 0s ago: executing program 4 (id=330): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000"], 0x48) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, 0x0, &(0x7f0000000540)=0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000150}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 34.310514][ T29] audit: type=1400 audit(1768657018.390:62): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.333987][ T29] audit: type=1400 audit(1768657018.410:63): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.337064][ T3309] cgroup: Unknown subsys name 'net' [ 34.361913][ T29] audit: type=1400 audit(1768657018.440:64): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.477208][ T3309] cgroup: Unknown subsys name 'cpuset' [ 34.483508][ T3309] cgroup: Unknown subsys name 'rlimit' [ 34.615776][ T29] audit: type=1400 audit(1768657018.690:65): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.655064][ T29] audit: type=1400 audit(1768657018.700:66): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.675593][ T29] audit: type=1400 audit(1768657018.700:67): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.677393][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.696103][ T29] audit: type=1400 audit(1768657018.700:68): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.724829][ T29] audit: type=1400 audit(1768657018.710:69): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.749632][ T29] audit: type=1400 audit(1768657018.710:70): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.765059][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.772926][ T29] audit: type=1400 audit(1768657018.720:71): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.983995][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.037597][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.094292][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.101600][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.109031][ T3322] bridge_slave_0: entered allmulticast mode [ 36.115546][ T3322] bridge_slave_0: entered promiscuous mode [ 36.124491][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.135822][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.142995][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.150481][ T3322] bridge_slave_1: entered allmulticast mode [ 36.157093][ T3322] bridge_slave_1: entered promiscuous mode [ 36.165879][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 36.207983][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.232568][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.239808][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.247172][ T3323] bridge_slave_0: entered allmulticast mode [ 36.253947][ T3323] bridge_slave_0: entered promiscuous mode [ 36.268811][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.280598][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.287953][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.295408][ T3323] bridge_slave_1: entered allmulticast mode [ 36.302260][ T3323] bridge_slave_1: entered promiscuous mode [ 36.323385][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.360969][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.387780][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.403387][ T3322] team0: Port device team_slave_0 added [ 36.421296][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.428437][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.435602][ T3321] bridge_slave_0: entered allmulticast mode [ 36.442222][ T3321] bridge_slave_0: entered promiscuous mode [ 36.449420][ T3322] team0: Port device team_slave_1 added [ 36.455117][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.462497][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.469717][ T3328] bridge_slave_0: entered allmulticast mode [ 36.476245][ T3328] bridge_slave_0: entered promiscuous mode [ 36.496773][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.504416][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.511889][ T3321] bridge_slave_1: entered allmulticast mode [ 36.518437][ T3321] bridge_slave_1: entered promiscuous mode [ 36.530345][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.537491][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.544698][ T3328] bridge_slave_1: entered allmulticast mode [ 36.551439][ T3328] bridge_slave_1: entered promiscuous mode [ 36.558472][ T3323] team0: Port device team_slave_0 added [ 36.564190][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.571366][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.578548][ T3324] bridge_slave_0: entered allmulticast mode [ 36.585150][ T3324] bridge_slave_0: entered promiscuous mode [ 36.606706][ T3323] team0: Port device team_slave_1 added [ 36.612475][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.619659][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.626980][ T3324] bridge_slave_1: entered allmulticast mode [ 36.633410][ T3324] bridge_slave_1: entered promiscuous mode [ 36.644568][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.651583][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.677553][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.704440][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.714562][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.721634][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.747690][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.759801][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.774837][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.790260][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.802913][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.809942][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.836124][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.852907][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.872957][ T3321] team0: Port device team_slave_0 added [ 36.878842][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.885801][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.911837][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.928887][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.944608][ T3321] team0: Port device team_slave_1 added [ 36.954003][ T3328] team0: Port device team_slave_0 added [ 36.972228][ T3322] hsr_slave_0: entered promiscuous mode [ 36.978351][ T3322] hsr_slave_1: entered promiscuous mode [ 36.990154][ T3328] team0: Port device team_slave_1 added [ 37.011646][ T3324] team0: Port device team_slave_0 added [ 37.022234][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.029578][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.055603][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.071901][ T3324] team0: Port device team_slave_1 added [ 37.101242][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.108264][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.134327][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.145705][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.152765][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.178834][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.197418][ T3323] hsr_slave_0: entered promiscuous mode [ 37.203582][ T3323] hsr_slave_1: entered promiscuous mode [ 37.209767][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.215542][ T3323] Cannot create hsr debugfs directory [ 37.224453][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.231489][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.257542][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.278552][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.285524][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.311751][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.326933][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.334120][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.360275][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.415270][ T3324] hsr_slave_0: entered promiscuous mode [ 37.421479][ T3324] hsr_slave_1: entered promiscuous mode [ 37.427478][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.433308][ T3324] Cannot create hsr debugfs directory [ 37.448407][ T3321] hsr_slave_0: entered promiscuous mode [ 37.454460][ T3321] hsr_slave_1: entered promiscuous mode [ 37.460454][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.466215][ T3321] Cannot create hsr debugfs directory [ 37.489085][ T3328] hsr_slave_0: entered promiscuous mode [ 37.495146][ T3328] hsr_slave_1: entered promiscuous mode [ 37.501160][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 37.507022][ T3328] Cannot create hsr debugfs directory [ 37.689184][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.698444][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.712055][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.727374][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.751779][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.762139][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.774073][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.783299][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.813624][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.824066][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.833846][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.858902][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.883300][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.895540][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.908889][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.919278][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.959729][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.967186][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.977204][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.990083][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.005711][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.028146][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.041878][ T1786] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.049096][ T1786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.062136][ T1786] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.069306][ T1786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.113715][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.129375][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.158795][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.169950][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.186572][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.201180][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.208319][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.218146][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.225358][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.247251][ T1786] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.254365][ T1786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.268090][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.277974][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.285181][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.307879][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.321566][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.328766][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.351097][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.358298][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.372258][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.400632][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.434848][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.453892][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.461076][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.477066][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.484265][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.531570][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.581331][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.652784][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.697387][ T3322] veth0_vlan: entered promiscuous mode [ 38.716170][ T3322] veth1_vlan: entered promiscuous mode [ 38.759479][ T3322] veth0_macvtap: entered promiscuous mode [ 38.770823][ T3322] veth1_macvtap: entered promiscuous mode [ 38.782010][ T3323] veth0_vlan: entered promiscuous mode [ 38.796657][ T3324] veth0_vlan: entered promiscuous mode [ 38.804720][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.817378][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.827208][ T3324] veth1_vlan: entered promiscuous mode [ 38.838864][ T3323] veth1_vlan: entered promiscuous mode [ 38.851290][ T1586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.866830][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.883636][ T1786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.898158][ T1786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907280][ T1786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.935221][ T3324] veth0_macvtap: entered promiscuous mode [ 38.968862][ T3323] veth0_macvtap: entered promiscuous mode [ 38.992098][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.993575][ T3324] veth1_macvtap: entered promiscuous mode [ 39.014472][ T3323] veth1_macvtap: entered promiscuous mode [ 39.043786][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.071020][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.082149][ T3328] veth0_vlan: entered promiscuous mode [ 39.104183][ T2688] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113649][ T3321] veth0_vlan: entered promiscuous mode [ 39.128045][ T3328] veth1_vlan: entered promiscuous mode [ 39.135778][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.148123][ T2688] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.168764][ T2688] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179447][ T3321] veth1_vlan: entered promiscuous mode [ 39.187166][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.195770][ T2688] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.215246][ T1786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.226977][ T1786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.243123][ T1786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.254906][ T1786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.269034][ T3328] veth0_macvtap: entered promiscuous mode [ 39.283821][ T3328] veth1_macvtap: entered promiscuous mode [ 39.314578][ T3321] veth0_macvtap: entered promiscuous mode [ 39.329183][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.340347][ T3321] veth1_macvtap: entered promiscuous mode [ 39.360217][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.378368][ T3498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.387480][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 39.387514][ T29] audit: type=1400 audit(1768657023.450:110): avc: denied { create } for pid=3497 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.413816][ T29] audit: type=1400 audit(1768657023.450:111): avc: denied { write } for pid=3497 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.435389][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.437673][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.444664][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.465041][ T3498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.465625][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.482665][ T1586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.492444][ T1586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.501961][ T29] audit: type=1400 audit(1768657023.560:112): avc: denied { tracepoint } for pid=3499 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.521511][ T29] audit: type=1400 audit(1768657023.560:113): avc: denied { map_create } for pid=3499 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.540358][ T29] audit: type=1400 audit(1768657023.560:114): avc: denied { map_read map_write } for pid=3499 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.560498][ T29] audit: type=1400 audit(1768657023.600:115): avc: denied { mount } for pid=3499 comm="syz.3.4" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.583017][ T1586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.599881][ T1586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.612728][ T1586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.626741][ T1586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.645833][ T29] audit: type=1400 audit(1768657023.720:116): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.678911][ T1586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.689598][ T1586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.717069][ T3498] syz.2.7 (3498) used greatest stack depth: 10472 bytes left [ 39.743773][ T29] audit: type=1400 audit(1768657023.820:117): avc: denied { create } for pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.774210][ T3514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.818491][ T29] audit: type=1400 audit(1768657023.850:118): avc: denied { setopt } for pid=3513 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.837653][ T29] audit: type=1400 audit(1768657023.880:119): avc: denied { create } for pid=3517 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.167149][ T3539] loop3: detected capacity change from 0 to 1024 [ 40.175433][ T3539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.307728][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.357000][ T3546] syz.3.18 (3546) used greatest stack depth: 10120 bytes left [ 41.403622][ T3539] syz.3.18 (3539) used greatest stack depth: 7224 bytes left [ 41.431353][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.814837][ T3602] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 41.814837][ T3602] The task syz.2.34 (3602) triggered the difference, watch for misbehavior. [ 42.024071][ T3610] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 42.040373][ T3612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.074726][ T3612] Zero length message leads to an empty skb [ 42.324060][ T3622] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 42.383162][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 42.535971][ T3634] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 42.544528][ T3634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 42.554913][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.630938][ T3641] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 42.639374][ T3641] wg0: entered promiscuous mode [ 42.644350][ T3641] wg0: entered allmulticast mode [ 42.842929][ C0] hrtimer: interrupt took 38300 ns [ 42.874940][ T3650] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 43.450352][ T3678] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.466576][ T3680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 43.676329][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 43.837209][ T3692] syz_tun: entered promiscuous mode [ 43.843672][ T3692] vlan2: entered promiscuous mode [ 44.246705][ T3701] syzkaller0: entered allmulticast mode [ 44.261247][ T3701] syzkaller0: entered promiscuous mode [ 44.268770][ T3703] tipc: Failed to remove unknown binding: 66,0,0/0:2718616241/2718616242 [ 44.281175][ T3701] syzkaller0 (unregistering): left allmulticast mode [ 44.288109][ T3701] syzkaller0 (unregistering): left promiscuous mode [ 44.296294][ T3703] tipc: Failed to remove unknown binding: 66,0,0/0:2718616241/2718616242 [ 44.320459][ T3705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 44.343683][ T3707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 44.455272][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 44.455290][ T29] audit: type=1400 audit(1768657028.530:183): avc: denied { setopt } for pid=3710 comm="syz.1.80" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.486437][ T29] audit: type=1400 audit(1768657028.570:184): avc: denied { nlmsg_write } for pid=3716 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 44.510704][ T29] audit: type=1400 audit(1768657028.570:185): avc: denied { audit_write } for pid=3716 comm="syz.2.83" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.523200][ T3712] syz_tun: entered allmulticast mode [ 44.531678][ T29] audit: type=1107 audit(1768657028.570:186): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 44.550948][ T29] audit: type=1400 audit(1768657028.590:187): avc: denied { create } for pid=3710 comm="syz.1.80" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.572450][ T29] audit: type=1400 audit(1768657028.590:188): avc: denied { read write } for pid=3710 comm="syz.1.80" name="file2" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.595387][ T29] audit: type=1400 audit(1768657028.590:189): avc: denied { ioctl open } for pid=3710 comm="syz.1.80" path="/23/file2" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.619966][ T3712] syz_tun: left allmulticast mode [ 44.658061][ T3722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 44.671473][ T29] audit: type=1400 audit(1768657028.750:190): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file2" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.706927][ T3722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3722 comm=syz.4.85 [ 44.742615][ T29] audit: type=1400 audit(1768657028.810:191): avc: denied { mount } for pid=3724 comm="syz.1.86" name="/" dev="hugetlbfs" ino=5397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 44.842312][ T29] audit: type=1400 audit(1768657028.920:192): avc: denied { create } for pid=3731 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.894628][ T3730] loop0: detected capacity change from 0 to 8192 [ 44.907588][ T3736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.91'. [ 44.926450][ T3736] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.970801][ T3736] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 45.065204][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.072757][ T3736] bridge0: port 1(bridge_slave_0) entered listening state [ 45.138060][ T3736] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.157818][ T3745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 45.184872][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 45.398509][ T3759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 45.552383][ T3770] loop3: detected capacity change from 0 to 164 [ 45.961845][ T3755] loop2: detected capacity change from 0 to 32768 [ 46.020285][ T3757] Set syz1 is full, maxelem 65536 reached [ 46.138427][ T3780] loop0: detected capacity change from 0 to 1024 [ 46.145358][ T3780] ======================================================= [ 46.145358][ T3780] WARNING: The mand mount option has been deprecated and [ 46.145358][ T3780] and is ignored by this kernel. Remove the mand [ 46.145358][ T3780] option from the mount to silence this warning. [ 46.145358][ T3780] ======================================================= [ 46.180484][ T3780] EXT4-fs: Ignoring removed bh option [ 46.186028][ T3780] EXT4-fs: inline encryption not supported [ 46.199199][ T3780] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.266263][ T3780] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.274483][ T3780] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.282292][ T3780] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.105: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.296613][ T3780] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.105: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.312771][ T3780] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.105: Failed to acquire dquot type 0 [ 46.326505][ T3780] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 46.336352][ T3780] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.105: mark_inode_dirty error [ 46.348224][ T3780] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 46.358531][ T3780] EXT4-fs (loop0): 1 orphan inode deleted [ 46.364515][ T1745] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.628632][ T1745] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 46.808903][ T3780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.126575][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.253992][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.112'. [ 48.290706][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 48.389758][ T3807] loop4: detected capacity change from 0 to 128 [ 48.406609][ T3807] vfat: Unknown parameter 'shortn±ô½¥ame' [ 48.558665][ T3814] loop4: detected capacity change from 0 to 512 [ 48.623627][ T3814] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 48.644990][ T3814] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 49.151631][ T3840] loop3: detected capacity change from 0 to 512 [ 49.432320][ T3840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.445504][ T3840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.844840][ T3840] EXT4-fs (loop3): 1 truncate cleaned up [ 49.851177][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 49.851196][ T29] audit: type=1400 audit(1768657033.930:216): avc: denied { bind } for pid=3849 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.903210][ T3840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.046372][ T29] audit: type=1400 audit(1768657033.930:217): avc: denied { setopt } for pid=3849 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.067004][ T29] audit: type=1400 audit(1768657034.100:218): avc: denied { create } for pid=3839 comm="syz.3.127" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.087739][ T29] audit: type=1400 audit(1768657034.120:219): avc: denied { read write } for pid=3839 comm="syz.3.127" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.110402][ T29] audit: type=1400 audit(1768657034.120:220): avc: denied { open } for pid=3839 comm="syz.3.127" path="/21/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.288679][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.308451][ T29] audit: type=1400 audit(1768657034.340:221): avc: denied { setopt } for pid=3854 comm="syz.1.133" lport=45555 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.415256][ T29] audit: type=1400 audit(1768657034.490:222): avc: denied { create } for pid=3862 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.469313][ T29] audit: type=1400 audit(1768657034.530:223): avc: denied { bind } for pid=3866 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.476331][ T3865] netlink: 'syz.3.135': attribute type 9 has an invalid length. [ 50.488644][ T29] audit: type=1400 audit(1768657034.530:224): avc: denied { node_bind } for pid=3866 comm="syz.4.138" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.496305][ T3865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.135'. [ 50.526064][ T29] audit: type=1400 audit(1768657034.530:225): avc: denied { listen } for pid=3866 comm="syz.4.138" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.657096][ T3875] loop4: detected capacity change from 0 to 512 [ 50.664015][ T3875] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 50.679837][ T3875] bond0: (slave bridge0): Releasing backup interface [ 50.687557][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.713350][ T3875] bridge_slave_0: left allmulticast mode [ 50.719239][ T3875] bridge_slave_0: left promiscuous mode [ 50.725026][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.758144][ T3875] bridge_slave_1: left promiscuous mode [ 50.764046][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.778084][ T3875] bond0: (slave bond_slave_0): Releasing backup interface [ 50.810016][ T3875] bond0: (slave bond_slave_1): Releasing backup interface [ 50.826370][ T3875] team0: Port device team_slave_0 removed [ 50.836376][ T3875] team0: Port device team_slave_1 removed [ 50.843430][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.850896][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.867511][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.874980][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.896687][ T3875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.011512][ T3885] loop4: detected capacity change from 0 to 128 [ 51.037314][ T3885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.066365][ T3885] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.133108][ T3888] loop3: detected capacity change from 0 to 1024 [ 51.161046][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.177847][ T3890] loop0: detected capacity change from 0 to 128 [ 51.207213][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.210176][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 51.283955][ T3893] netlink: 'syz.1.149': attribute type 5 has an invalid length. [ 51.292075][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 51.386767][ T3901] loop4: detected capacity change from 0 to 1024 [ 51.424896][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.447762][ T3901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.484760][ T3901] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.496487][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.503682][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.525732][ T3901] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.546847][ T3901] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.150: inode #1: comm syz.4.150: iget: illegal inode # [ 51.588683][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.600270][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.636576][ T3901] EXT4-fs (loop4): no journal found [ 51.641948][ T3901] EXT4-fs (loop4): can't get journal size [ 51.660177][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.669468][ T3901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 51.677651][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.696393][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.705428][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.736106][ T3901] EXT4-fs (loop4): failed to initialize system zone (-22) [ 51.743301][ T3901] EXT4-fs (loop4): mount failed [ 51.889966][ T3924] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 51.897719][ T3924] netlink: 199776 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.974634][ T3925] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.150'. [ 52.125723][ T3931] loop1: detected capacity change from 0 to 128 [ 52.178697][ T3933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 52.246542][ T3939] kernel profiling enabled (shift: 63) [ 52.252191][ T3939] profiling shift: 63 too large [ 52.257734][ T3941] Trying to write to read-only block-device loop1 [ 52.265408][ T3941] syz.1.160: attempt to access beyond end of device [ 52.265408][ T3941] loop1: rw=2049, sector=145, nr_sectors = 680 limit=128 [ 52.469198][ T3950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 52.512153][ T3950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3950 comm=syz.3.167 [ 53.148396][ T3971] tipc: Started in network mode [ 53.153497][ T3971] tipc: Node identity 84e, cluster identity 4711 [ 53.159939][ T3971] tipc: Node number set to 2126 [ 53.263105][ T3976] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1 [ 53.271914][ T3976] ref_ctr increment failed for inode: 0x97 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eeca40 [ 53.301480][ T3984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 53.364880][ T3984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3984 comm=syz.1.180 [ 53.469899][ T3994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 53.536503][ T3998] loop1: detected capacity change from 0 to 512 [ 53.548625][ T4003] loop3: detected capacity change from 0 to 128 [ 53.555629][ T4003] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.590606][ T4003] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.634439][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 54.324676][ T4024] bridge0: port 3(syz_tun) entered blocking state [ 54.331356][ T4024] bridge0: port 3(syz_tun) entered disabled state [ 54.353003][ T4024] syz_tun: entered allmulticast mode [ 54.360703][ T4024] syz_tun: entered promiscuous mode [ 54.368211][ T4024] bridge0: port 3(syz_tun) entered blocking state [ 54.374731][ T4024] bridge0: port 3(syz_tun) entered forwarding state [ 54.669888][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.175491][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 55.175570][ T29] audit: type=1326 audit(1768657039.250:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.229678][ T29] audit: type=1326 audit(1768657039.250:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.253292][ T29] audit: type=1326 audit(1768657039.290:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.276740][ T29] audit: type=1326 audit(1768657039.290:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.300117][ T29] audit: type=1326 audit(1768657039.290:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.396048][ T29] audit: type=1326 audit(1768657039.410:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c20cacb9 code=0x7ffc0000 [ 55.419503][ T29] audit: type=1326 audit(1768657039.410:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4c20caa22 code=0x7ffc0000 [ 55.709978][ T29] audit: type=1400 audit(1768657039.790:298): avc: denied { map } for pid=4047 comm="syz.1.206" path="socket:[7205]" dev="sockfs" ino=7205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.732942][ T29] audit: type=1400 audit(1768657039.790:299): avc: denied { read accept } for pid=4047 comm="syz.1.206" path="socket:[7205]" dev="sockfs" ino=7205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.878804][ T29] audit: type=1326 audit(1768657039.860:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe4c20caab7 code=0x7ffc0000 [ 55.886228][ T4061] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 55.982199][ T4061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.998864][ T4065] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 56.009388][ T4065] bond1: entered allmulticast mode [ 56.015600][ T4051] __nla_validate_parse: 2 callbacks suppressed [ 56.015742][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 56.084168][ T4061] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 56.114707][ T4051] hsr_slave_1 (unregistering): left promiscuous mode [ 56.206613][ T4072] netlink: 'syz.1.213': attribute type 83 has an invalid length. [ 56.597451][ T4103] loop1: detected capacity change from 0 to 128 [ 56.895107][ T4111] netlink: 277 bytes leftover after parsing attributes in process `syz.4.225'. [ 57.320969][ T4123] Illegal XDP return value 453183521 on prog (id 45) dev syz_tun, expect packet loss! [ 57.350627][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 57.367459][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 57.453685][ T4129] loop2: detected capacity change from 0 to 512 [ 57.501432][ T4129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.741749][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.042876][ T4144] loop1: detected capacity change from 0 to 1024 [ 58.049805][ T4144] EXT4-fs: Ignoring removed orlov option [ 58.558795][ T4155] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 58.573324][ T4155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.802830][ T4154] veth5: entered promiscuous mode [ 58.848643][ T4154] bond1: (slave veth5): Enslaving as an active interface with a down link [ 58.926256][ T4155] bond1: entered allmulticast mode [ 59.087400][ T4162] loop1: detected capacity change from 0 to 512 [ 59.129667][ T4162] syz_tun: entered allmulticast mode [ 60.112201][ T4190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 60.488197][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 60.513815][ T4203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4203 comm=syz.1.260 [ 60.567371][ T4207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 60.599362][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 60.682362][ T4160] syz.4.243 (4160) used greatest stack depth: 6080 bytes left [ 60.747428][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 60.747528][ T29] audit: type=1400 audit(1768657044.830:436): avc: denied { setopt } for pid=4208 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.836570][ T4221] loop3: detected capacity change from 0 to 512 [ 60.864412][ T4221] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.268: bg 0: block 248: padding at end of block bitmap is not set [ 60.881797][ T4224] pim6reg9: entered allmulticast mode [ 60.890805][ T4221] Quota error (device loop3): write_blk: dquota write failed [ 60.898370][ T4221] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 60.909260][ T4221] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.268: Failed to acquire dquot type 1 [ 60.947863][ T4221] EXT4-fs (loop3): 1 truncate cleaned up [ 60.954208][ T4221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.967881][ T4221] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.996445][ T29] audit: type=1400 audit(1768657045.070:437): avc: denied { create } for pid=4231 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.051406][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 61.071871][ T29] audit: type=1400 audit(1768657045.150:438): avc: denied { write } for pid=4235 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.126925][ T29] audit: type=1400 audit(1768657045.210:439): avc: denied { read } for pid=4240 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.147087][ T29] audit: type=1400 audit(1768657045.210:440): avc: denied { write } for pid=4240 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.166485][ T29] audit: type=1400 audit(1768657045.210:441): avc: denied { name_connect } for pid=4240 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 61.214752][ T4244] loop2: detected capacity change from 0 to 2048 [ 61.242367][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.276584][ T29] audit: type=1326 audit(1768657045.360:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c894acb9 code=0x7ffc0000 [ 61.279915][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.309968][ T29] audit: type=1326 audit(1768657045.360:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c894acb9 code=0x7ffc0000 [ 61.390874][ T4257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'. [ 61.452276][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.462001][ T4257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4257 comm=syz.3.279 [ 61.679140][ T4275] lo speed is unknown, defaulting to 1000 [ 61.706091][ T4275] lo speed is unknown, defaulting to 1000 [ 61.728702][ T4275] lo speed is unknown, defaulting to 1000 [ 61.758230][ T4275] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.863012][ T4275] lo speed is unknown, defaulting to 1000 [ 61.999358][ T4275] lo speed is unknown, defaulting to 1000 [ 62.026980][ T4294] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 62.047919][ T4275] lo speed is unknown, defaulting to 1000 [ 62.054368][ T4275] lo speed is unknown, defaulting to 1000 [ 62.063255][ T4275] lo speed is unknown, defaulting to 1000 [ 62.474013][ T4311] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 62.486400][ T4311] team0: Failed to send options change via netlink (err -105) [ 62.493914][ T4311] team0: Port device dummy0 added [ 62.510003][ T4311] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 62.518390][ T4311] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.529928][ T4311] team0: Failed to send options change via netlink (err -105) [ 62.537577][ T4311] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.546620][ T4311] team0: Port device dummy0 removed [ 62.554627][ T4311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.843257][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 62.866088][ T4335] bridge_slave_1: left allmulticast mode [ 62.871784][ T4335] bridge_slave_1: left promiscuous mode [ 62.877500][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.904641][ T4335] bridge_slave_0: left allmulticast mode [ 62.910472][ T4335] bridge_slave_0: left promiscuous mode [ 62.916447][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.938547][ T4340] mmap: syz.2.306 (4340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.079494][ T4346] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 63.523069][ T4362] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 63.549221][ T4362] team0: Port device dummy0 added [ 63.571800][ T4362] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 63.591925][ T4362] team0: Port device dummy0 removed [ 63.608453][ T4362] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.933849][ T4376] loop2: detected capacity change from 0 to 1024 [ 63.941634][ T4376] EXT4-fs: Ignoring removed orlov option [ 64.010956][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.018351][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.026300][ T4382] bridge0: entered allmulticast mode [ 64.039614][ T4382] bridge_slave_1: left allmulticast mode [ 64.045367][ T4382] bridge_slave_1: left promiscuous mode [ 64.051447][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.059539][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.073422][ T4382] bridge_slave_0: left allmulticast mode [ 64.079338][ T4382] bridge_slave_0: left promiscuous mode [ 64.085088][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.788979][ T4376] ================================================================== [ 64.797139][ T4376] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 64.804309][ T4376] [ 64.806679][ T4376] write to 0xffff88811aca5cfc of 4 bytes by task 4386 on cpu 0: [ 64.814348][ T4376] xas_set_mark+0x12b/0x140 [ 64.819010][ T4376] __folio_start_writeback+0x17b/0x370 [ 64.824543][ T4376] ext4_bio_write_folio+0x5ad/0x9f0 [ 64.829868][ T4376] mpage_process_page_bufs+0x4a1/0x620 [ 64.835377][ T4376] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 64.841241][ T4376] ext4_do_writepages+0x9f6/0x2800 [ 64.846502][ T4376] ext4_writepages+0x18f/0x320 [ 64.851321][ T4376] do_writepages+0x1c6/0x310 [ 64.855975][ T4376] file_write_and_wait_range+0x178/0x2f0 [ 64.861663][ T4376] generic_buffers_fsync_noflush+0x45/0x130 [ 64.867624][ T4376] ext4_sync_file+0x1aa/0x680 [ 64.872396][ T4376] vfs_fsync_range+0x10d/0x130 [ 64.877221][ T4376] ext4_buffered_write_iter+0x34f/0x3c0 [ 64.882840][ T4376] ext4_file_write_iter+0x380/0xf70 [ 64.888102][ T4376] iter_file_splice_write+0x6bc/0xa80 [ 64.893523][ T4376] direct_splice_actor+0x156/0x2a0 [ 64.898678][ T4376] splice_direct_to_actor+0x311/0x670 [ 64.904115][ T4376] do_splice_direct+0x119/0x1a0 [ 64.909465][ T4376] do_sendfile+0x380/0x650 [ 64.914028][ T4376] __x64_sys_sendfile64+0x105/0x150 [ 64.919713][ T4376] x64_sys_call+0x2db1/0x3000 [ 64.924470][ T4376] do_syscall_64+0xc0/0x2a0 [ 64.929031][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.934973][ T4376] [ 64.937337][ T4376] read to 0xffff88811aca5cfc of 4 bytes by task 4376 on cpu 1: [ 64.944923][ T4376] xas_find_marked+0x5d7/0x620 [ 64.949730][ T4376] find_get_entry+0x5d/0x380 [ 64.954357][ T4376] filemap_get_folios_tag+0xb6/0x230 [ 64.959700][ T4376] mpage_prepare_extent_to_map+0x328/0xc50 [ 64.965568][ T4376] ext4_do_writepages+0x6fe/0x2800 [ 64.970740][ T4376] ext4_writepages+0x18f/0x320 [ 64.975554][ T4376] do_writepages+0x1c6/0x310 [ 64.980206][ T4376] file_write_and_wait_range+0x178/0x2f0 [ 64.985886][ T4376] generic_buffers_fsync_noflush+0x45/0x130 [ 64.991827][ T4376] ext4_sync_file+0x1aa/0x680 [ 64.996556][ T4376] vfs_fsync_range+0x10d/0x130 [ 65.001364][ T4376] ext4_buffered_write_iter+0x34f/0x3c0 [ 65.006980][ T4376] ext4_file_write_iter+0x380/0xf70 [ 65.012240][ T4376] iter_file_splice_write+0x6bc/0xa80 [ 65.018300][ T4376] direct_splice_actor+0x156/0x2a0 [ 65.023569][ T4376] splice_direct_to_actor+0x311/0x670 [ 65.029083][ T4376] do_splice_direct+0x119/0x1a0 [ 65.033984][ T4376] do_sendfile+0x380/0x650 [ 65.038485][ T4376] __x64_sys_sendfile64+0x105/0x150 [ 65.043921][ T4376] x64_sys_call+0x2db1/0x3000 [ 65.048832][ T4376] do_syscall_64+0xc0/0x2a0 [ 65.053652][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.059711][ T4376] [ 65.062082][ T4376] value changed: 0x0a000021 -> 0x00000021 [ 65.067847][ T4376] [ 65.070226][ T4376] Reported by Kernel Concurrency Sanitizer on: [ 65.076641][ T4376] CPU: 1 UID: 0 PID: 4376 Comm: syz.2.321 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.086328][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.096419][ T4376] ================================================================== [ 65.199405][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.