last executing test programs: 2.400211087s ago: executing program 4 (id=252): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 2.383753258s ago: executing program 4 (id=254): io_setup(0x2, &(0x7f0000002400)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.300815525s ago: executing program 4 (id=264): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$peeksig(0x4209, r0, &(0x7f0000000700)={0x8, 0x0, 0x1}, &(0x7f0000001980)=[{}]) 1.61078351s ago: executing program 1 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x2f) 1.586166203s ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) 1.568221804s ago: executing program 1 (id=305): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.471629942s ago: executing program 1 (id=307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1.444471644s ago: executing program 4 (id=308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r0, 0x1) 1.423466486s ago: executing program 1 (id=309): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1, 0xfffffffffffffa6f, 0xfffffffc}) 1.393220198s ago: executing program 2 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 1.3756363s ago: executing program 4 (id=313): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 519.939529ms ago: executing program 1 (id=319): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$peeksig(0x4209, r0, &(0x7f0000000700)={0x8, 0x0, 0x1}, &(0x7f0000001980)=[{}]) 509.235329ms ago: executing program 3 (id=320): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 442.261845ms ago: executing program 4 (id=321): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 441.472975ms ago: executing program 3 (id=322): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) ptrace$cont(0x7, 0x0, 0x0, 0xffffffffffff8025) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 414.585457ms ago: executing program 3 (id=323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xa, @empty, 0x5}}, 0x9, 0x5}, 0x90) 329.215204ms ago: executing program 2 (id=324): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) rmdir(&(0x7f0000000100)='./control\x00') 289.297837ms ago: executing program 2 (id=325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 258.670489ms ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 166.965187ms ago: executing program 0 (id=327): r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 166.772617ms ago: executing program 2 (id=328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) 150.126298ms ago: executing program 2 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) 139.727119ms ago: executing program 3 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 94.200363ms ago: executing program 0 (id=331): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 93.971173ms ago: executing program 2 (id=332): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 93.854423ms ago: executing program 3 (id=333): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 71.342665ms ago: executing program 0 (id=334): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) ptrace$cont(0x7, 0x0, 0x0, 0xffffffffffff8025) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 56.295096ms ago: executing program 0 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 12.007999ms ago: executing program 0 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) close(r1) 0s ago: executing program 0 (id=337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xa, @empty, 0x5}}, 0x9, 0x5}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 20.455264][ T29] audit: type=1400 audit(1754771467.508:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.455831][ T3287] cgroup: Unknown subsys name 'net' [ 20.478084][ T29] audit: type=1400 audit(1754771467.508:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.505553][ T29] audit: type=1400 audit(1754771467.538:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.680374][ T3287] cgroup: Unknown subsys name 'cpuset' [ 20.686395][ T3287] cgroup: Unknown subsys name 'rlimit' [ 20.793984][ T29] audit: type=1400 audit(1754771467.848:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.823816][ T29] audit: type=1400 audit(1754771467.848:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.830525][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.844242][ T29] audit: type=1400 audit(1754771467.848:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.873446][ T29] audit: type=1400 audit(1754771467.848:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.887914][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.893949][ T29] audit: type=1400 audit(1754771467.848:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.927805][ T29] audit: type=1400 audit(1754771467.858:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.951078][ T29] audit: type=1400 audit(1754771467.908:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.832167][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 21.849328][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 21.907378][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.914706][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.921879][ T3300] bridge_slave_0: entered allmulticast mode [ 21.928245][ T3300] bridge_slave_0: entered promiscuous mode [ 21.935939][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.943014][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.950234][ T3300] bridge_slave_1: entered allmulticast mode [ 21.956518][ T3300] bridge_slave_1: entered promiscuous mode [ 21.983597][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.990748][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.998486][ T3304] bridge_slave_0: entered allmulticast mode [ 22.004715][ T3304] bridge_slave_0: entered promiscuous mode [ 22.022648][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.029785][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.037763][ T3304] bridge_slave_1: entered allmulticast mode [ 22.044789][ T3304] bridge_slave_1: entered promiscuous mode [ 22.052016][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.076608][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.087961][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.099447][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.131514][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 22.144185][ T3304] team0: Port device team_slave_0 added [ 22.150702][ T3300] team0: Port device team_slave_0 added [ 22.158731][ T3300] team0: Port device team_slave_1 added [ 22.167180][ T3304] team0: Port device team_slave_1 added [ 22.203611][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.210589][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.236687][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.247770][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.254836][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.280733][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.291527][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 22.303694][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.310785][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.336706][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.357611][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.365031][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.391239][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.433097][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440191][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.447429][ T3299] bridge_slave_0: entered allmulticast mode [ 22.455350][ T3299] bridge_slave_0: entered promiscuous mode [ 22.464873][ T3300] hsr_slave_0: entered promiscuous mode [ 22.470911][ T3300] hsr_slave_1: entered promiscuous mode [ 22.477098][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 22.489668][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.496795][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.503952][ T3299] bridge_slave_1: entered allmulticast mode [ 22.510234][ T3299] bridge_slave_1: entered promiscuous mode [ 22.546415][ T3304] hsr_slave_0: entered promiscuous mode [ 22.552402][ T3304] hsr_slave_1: entered promiscuous mode [ 22.558347][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 22.564648][ T3304] Cannot create hsr debugfs directory [ 22.571607][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.597841][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.610394][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.617768][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.625057][ T3306] bridge_slave_0: entered allmulticast mode [ 22.631553][ T3306] bridge_slave_0: entered promiscuous mode [ 22.651466][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.658926][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.666523][ T3306] bridge_slave_1: entered allmulticast mode [ 22.673079][ T3306] bridge_slave_1: entered promiscuous mode [ 22.685760][ T3299] team0: Port device team_slave_0 added [ 22.711610][ T3299] team0: Port device team_slave_1 added [ 22.720044][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.732030][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.739076][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.746337][ T3308] bridge_slave_0: entered allmulticast mode [ 22.752894][ T3308] bridge_slave_0: entered promiscuous mode [ 22.770814][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.784337][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.791426][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.798681][ T3308] bridge_slave_1: entered allmulticast mode [ 22.805140][ T3308] bridge_slave_1: entered promiscuous mode [ 22.811322][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.818254][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.844253][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.866003][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.873005][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.898961][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.915740][ T3306] team0: Port device team_slave_0 added [ 22.928354][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.947649][ T3306] team0: Port device team_slave_1 added [ 22.959000][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.004061][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.013649][ T3299] hsr_slave_0: entered promiscuous mode [ 23.019531][ T3299] hsr_slave_1: entered promiscuous mode [ 23.025529][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 23.031375][ T3299] Cannot create hsr debugfs directory [ 23.037151][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.044153][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.070208][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.082727][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.089840][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.115775][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.127010][ T3308] team0: Port device team_slave_0 added [ 23.132828][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.141234][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.153995][ T3308] team0: Port device team_slave_1 added [ 23.163717][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.193821][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.200825][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.226800][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.240030][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.246987][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.272990][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.289100][ T3306] hsr_slave_0: entered promiscuous mode [ 23.295394][ T3306] hsr_slave_1: entered promiscuous mode [ 23.301146][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 23.306849][ T3306] Cannot create hsr debugfs directory [ 23.345163][ T3308] hsr_slave_0: entered promiscuous mode [ 23.351350][ T3308] hsr_slave_1: entered promiscuous mode [ 23.357092][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 23.362913][ T3308] Cannot create hsr debugfs directory [ 23.384293][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.401077][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.415581][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.437699][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.496148][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.505575][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.514448][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.530044][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.548425][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.567937][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.575151][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.585115][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.597189][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.607978][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.617092][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.628630][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.635696][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.650216][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.657293][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.673128][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.685303][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.695191][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.702602][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.716052][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.724614][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.733998][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.745065][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.752139][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.785505][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.819174][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.847883][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.859633][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.875568][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.884858][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.892011][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.903289][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.910376][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.920697][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.927827][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.938750][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.952840][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.959901][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.971971][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.979969][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.988023][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.009576][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.020658][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.042962][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.050025][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.071588][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.078635][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.122316][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.152879][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.188760][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.220752][ T3304] veth0_vlan: entered promiscuous mode [ 24.233618][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.254054][ T3304] veth1_vlan: entered promiscuous mode [ 24.275400][ T3306] veth0_vlan: entered promiscuous mode [ 24.283440][ T3304] veth0_macvtap: entered promiscuous mode [ 24.291523][ T3304] veth1_macvtap: entered promiscuous mode [ 24.303992][ T3300] veth0_vlan: entered promiscuous mode [ 24.317567][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.326622][ T3306] veth1_vlan: entered promiscuous mode [ 24.336800][ T3300] veth1_vlan: entered promiscuous mode [ 24.344998][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.368250][ T3300] veth0_macvtap: entered promiscuous mode [ 24.377882][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.387751][ T3299] veth0_vlan: entered promiscuous mode [ 24.395749][ T3299] veth1_vlan: entered promiscuous mode [ 24.404076][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.413279][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.424736][ T3308] veth0_vlan: entered promiscuous mode [ 24.431491][ T3300] veth1_macvtap: entered promiscuous mode [ 24.439269][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.450954][ T3308] veth1_vlan: entered promiscuous mode [ 24.463725][ T3306] veth0_macvtap: entered promiscuous mode [ 24.472204][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.486471][ T3306] veth1_macvtap: entered promiscuous mode [ 24.495907][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.507108][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.508081][ T3308] veth0_macvtap: entered promiscuous mode [ 24.530357][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.539282][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.553777][ T3308] veth1_macvtap: entered promiscuous mode [ 24.563136][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.573882][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.581289][ T3299] veth0_macvtap: entered promiscuous mode [ 24.594436][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.601888][ T3443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.611633][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.620493][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.628693][ T3299] veth1_macvtap: entered promiscuous mode [ 24.642656][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.658663][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.666222][ T166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.686541][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.701786][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.709046][ T166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.736983][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.769845][ T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.809541][ T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.814178][ T3484] openvswitch: netlink: Message has 6 unknown bytes. [ 24.841539][ T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.850633][ T3485] loop3: detected capacity change from 0 to 512 [ 24.866716][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.884072][ T3485] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 24.910675][ T3499] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12'. [ 24.919723][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.923077][ T3485] EXT4-fs (loop3): mount failed [ 24.938058][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.954049][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.085800][ T3527] netlink: 508 bytes leftover after parsing attributes in process `syz.2.25'. [ 25.102817][ T3527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 25.113691][ T3529] loop0: detected capacity change from 0 to 1024 [ 25.140200][ T3529] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 25.151453][ T3529] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 25.173377][ T3533] IPv6: Can't replace route, no match found [ 25.244587][ T3515] loop3: detected capacity change from 0 to 32768 [ 25.265003][ T3529] JBD2: no valid journal superblock found [ 25.270835][ T3529] EXT4-fs (loop0): Could not load journal inode [ 25.319221][ T3529] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 25.333031][ T3515] loop3: p1 p3 < > [ 25.345828][ T2991] loop3: p1 p3 < > [ 25.395686][ T3536] loop1: detected capacity change from 0 to 1024 [ 25.419640][ T3538] loop2: detected capacity change from 0 to 164 [ 25.445820][ T3536] EXT4-fs: Ignoring removed orlov option [ 25.467930][ T3538] ======================================================= [ 25.467930][ T3538] WARNING: The mand mount option has been deprecated and [ 25.467930][ T3538] and is ignored by this kernel. Remove the mand [ 25.467930][ T3538] option from the mount to silence this warning. [ 25.467930][ T3538] ======================================================= [ 25.560364][ T3536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.575295][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 25.575309][ T29] audit: type=1400 audit(1754771472.628:130): avc: denied { mount } for pid=3535 comm="syz.1.29" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.582366][ T29] audit: type=1400 audit(1754771472.638:131): avc: denied { add_name } for pid=3535 comm="syz.1.29" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.623165][ T29] audit: type=1400 audit(1754771472.638:132): avc: denied { create } for pid=3535 comm="syz.1.29" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.644821][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 25.647368][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 25.686981][ T29] audit: type=1400 audit(1754771472.738:133): avc: denied { read open } for pid=3535 comm="syz.1.29" path="/3/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.709428][ T29] audit: type=1400 audit(1754771472.738:134): avc: denied { write } for pid=3535 comm="syz.1.29" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.726649][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 25.743301][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 25.770640][ T3551] netlink: 112 bytes leftover after parsing attributes in process `syz.0.34'. [ 25.780616][ T3553] Illegal XDP return value 27398200 on prog (id 27) dev N/A, expect packet loss! [ 25.792142][ T3538] rock: directory entry would overflow storage [ 25.798312][ T3538] rock: sig=0x4f50, size=4, remaining=3 [ 25.803930][ T3538] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 25.839503][ T29] audit: type=1400 audit(1754771472.808:135): avc: denied { mount } for pid=3537 comm="syz.2.30" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 25.861821][ T29] audit: type=1400 audit(1754771472.818:136): avc: denied { create } for pid=3550 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.881358][ T29] audit: type=1400 audit(1754771472.818:137): avc: denied { ioctl } for pid=3550 comm="syz.0.34" path="socket:[3990]" dev="sockfs" ino=3990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.905895][ T29] audit: type=1400 audit(1754771472.888:138): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 26.087630][ T3568] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 26.090219][ T29] audit: type=1400 audit(1754771473.018:139): avc: denied { create } for pid=3557 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.180747][ T3576] netlink: 52 bytes leftover after parsing attributes in process `syz.3.46'. [ 26.267547][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.310851][ T3531] kexec: Could not allocate control_code_buffer [ 26.374941][ T3597] netlink: 'syz.1.55': attribute type 13 has an invalid length. [ 26.382692][ T3597] netlink: 172 bytes leftover after parsing attributes in process `syz.1.55'. [ 26.396197][ T3597] erspan0: refused to change device tx_queue_len [ 26.399223][ T3601] netlink: 'syz.3.57': attribute type 6 has an invalid length. [ 26.410324][ T3600] loop0: detected capacity change from 0 to 512 [ 26.419303][ T3600] EXT4-fs: Ignoring removed oldalloc option [ 26.432070][ T3600] EXT4-fs (loop0): 1 truncate cleaned up [ 26.442972][ T3604] loop4: detected capacity change from 0 to 128 [ 26.445792][ T3600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.534478][ T3617] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 26.571294][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.591631][ T3624] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 26.598256][ T3624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 26.605878][ T3624] vhci_hcd vhci_hcd.0: Device attached [ 26.631731][ T3630] loop0: detected capacity change from 0 to 1024 [ 26.638448][ T3630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 26.645333][ T3624] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 26.651850][ T3624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 26.659382][ T3624] vhci_hcd vhci_hcd.0: Device attached [ 26.668814][ T3624] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 26.670610][ T3630] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 26.675389][ T3624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 26.675453][ T3624] vhci_hcd vhci_hcd.0: Device attached [ 26.710603][ T3630] EXT4-fs (loop0): mount failed [ 26.770466][ T3643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 26.843699][ T3624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 26.852165][ T3395] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 26.862007][ T3624] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 26.868603][ T3624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 26.876253][ T3624] vhci_hcd vhci_hcd.0: Device attached [ 26.885821][ T3658] vhci_hcd: connection closed [ 26.885876][ T166] vhci_hcd: stop threads [ 26.886028][ T3636] vhci_hcd: connection closed [ 26.890685][ T166] vhci_hcd: release socket [ 26.895388][ T3631] vhci_hcd: connection closed [ 26.899628][ T166] vhci_hcd: disconnect device [ 26.915136][ T166] vhci_hcd: stop threads [ 26.915624][ T3625] vhci_hcd: connection reset by peer [ 26.919556][ T166] vhci_hcd: release socket [ 26.919571][ T166] vhci_hcd: disconnect device [ 26.936944][ T166] vhci_hcd: stop threads [ 26.941251][ T166] vhci_hcd: release socket [ 26.945762][ T166] vhci_hcd: disconnect device [ 26.951702][ T166] vhci_hcd: stop threads [ 26.955974][ T166] vhci_hcd: release socket [ 26.960402][ T166] vhci_hcd: disconnect device [ 27.382008][ T3696] x_tables: ip_tables: udp match: only valid for protocol 17 [ 27.497179][ T3701] loop4: detected capacity change from 0 to 512 [ 27.526418][ T3701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.540133][ T3701] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.95: bad orphan inode 13 [ 27.570071][ T3701] ext4_test_bit(bit=12, block=18) = 1 [ 27.575539][ T3701] is_bad_inode(inode)=0 [ 27.579679][ T3701] NEXT_ORPHAN(inode)=2130706432 [ 27.584534][ T3701] max_ino=32 [ 27.587703][ T3701] i_nlink=1 [ 27.620299][ T3701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.713574][ T3701] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 27.741068][ T3701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.95: bg 0: block 248: padding at end of block bitmap is not set [ 27.763807][ T3701] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.95: Failed to acquire dquot type 1 [ 27.811960][ T3701] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 27.873326][ T3701] syz.4.95 (3701) used greatest stack depth: 9248 bytes left [ 28.004545][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.354199][ T3714] netlink: 108 bytes leftover after parsing attributes in process `syz.0.100'. [ 28.703158][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 28.721754][ T3758] vxlan0: entered promiscuous mode [ 28.737927][ T55] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.747853][ T55] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.767706][ T55] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.796741][ T55] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.871378][ T3769] netlink: 108 bytes leftover after parsing attributes in process `syz.2.121'. [ 28.880404][ T3769] netlink: 108 bytes leftover after parsing attributes in process `syz.2.121'. [ 29.019034][ T3782] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 29.054422][ T3782] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 29.054371][ T55] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.075994][ T55] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.097386][ T3782] Zero length message leads to an empty skb [ 29.098541][ T55] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.117806][ T3786] tipc: Started in network mode [ 29.122715][ T3786] tipc: Node identity 662bf213c385, cluster identity 4711 [ 29.130150][ T3786] tipc: Enabled bearer , priority 0 [ 29.144666][ T3786] tipc: Disabling bearer [ 29.155393][ T55] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.202182][ T3796] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 29.224864][ T3802] syzkaller1: entered promiscuous mode [ 29.230442][ T3802] syzkaller1: entered allmulticast mode [ 29.410252][ T3844] 9pnet_fd: Insufficient options for proto=fd [ 29.451824][ T3847] SELinux: failed to load policy [ 29.523772][ T3862] C: renamed from team_slave_0 (while UP) [ 29.538830][ T3862] netlink: 'syz.3.161': attribute type 3 has an invalid length. [ 29.704342][ T3895] netlink: 'syz.3.172': attribute type 3 has an invalid length. [ 29.733692][ T3897] netlink: 'syz.2.174': attribute type 21 has an invalid length. [ 29.754154][ T3897] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 29.777474][ T3906] 9pnet_fd: Insufficient options for proto=fd [ 29.874655][ T3940] SELinux: policydb version 0 does not match my version range 15-35 [ 29.885983][ T3940] SELinux: failed to load policy [ 29.886333][ T3942] process 'syz.2.187' launched '/dev/fd/6' with NULL argv: empty string added [ 29.927329][ T3947] bridge0: entered promiscuous mode [ 29.933261][ T3947] macsec1: entered promiscuous mode [ 29.940867][ T3947] bridge0: port 3(macsec1) entered blocking state [ 29.947489][ T3947] bridge0: port 3(macsec1) entered disabled state [ 29.965927][ T3947] macsec1: entered allmulticast mode [ 29.971355][ T3947] bridge0: entered allmulticast mode [ 29.977394][ T3947] macsec1: left allmulticast mode [ 29.982456][ T3947] bridge0: left allmulticast mode [ 29.988094][ T3947] bridge0: left promiscuous mode [ 30.073278][ T3960] loop1: detected capacity change from 0 to 1024 [ 30.080203][ T3960] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 30.154427][ T3973] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 30.248440][ T3993] loop2: detected capacity change from 0 to 1024 [ 30.273473][ T3993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.321685][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.364899][ T4011] loop1: detected capacity change from 0 to 164 [ 30.380687][ T4011] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.402089][ T4011] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.412394][ T4011] Symlink component flag not implemented [ 30.418184][ T4011] Symlink component flag not implemented [ 30.424742][ T4011] Symlink component flag not implemented (7) [ 30.430730][ T4011] Symlink component flag not implemented (116) [ 30.454840][ T4023] sctp: [Deprecated]: syz.1.223 (pid 4023) Use of int in maxseg socket option. [ 30.454840][ T4023] Use struct sctp_assoc_value instead [ 30.626981][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 30.627065][ T29] audit: type=1400 audit(1754771477.678:465): avc: denied { create } for pid=4050 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 30.652728][ T29] audit: type=1400 audit(1754771477.678:466): avc: denied { ioctl } for pid=4050 comm="syz.2.236" path="socket:[6709]" dev="sockfs" ino=6709 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 30.688631][ T29] audit: type=1326 audit(1754771477.738:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.712222][ T29] audit: type=1326 audit(1754771477.738:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.735784][ T29] audit: type=1326 audit(1754771477.738:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.759108][ T29] audit: type=1326 audit(1754771477.738:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.782407][ T29] audit: type=1326 audit(1754771477.738:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.805728][ T29] audit: type=1326 audit(1754771477.738:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.828915][ T29] audit: type=1326 audit(1754771477.748:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.852260][ T29] audit: type=1326 audit(1754771477.748:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75569ebe9 code=0x7ffc0000 [ 30.910337][ T4072] ALSA: seq fatal error: cannot create timer (-22) [ 31.066005][ T4102] tipc: New replicast peer: 255.255.255.255 [ 31.072326][ T4102] tipc: Enabled bearer , priority 10 [ 31.099251][ T4108] loop3: detected capacity change from 0 to 512 [ 31.204464][ T4130] SELinux: failed to load policy [ 31.436867][ T4153] batadv_slave_1: entered promiscuous mode [ 31.443724][ T4152] batadv_slave_1: left promiscuous mode [ 31.466460][ T4157] openvswitch: netlink: Message has 6 unknown bytes. [ 31.522775][ T4165] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 31.530642][ T4165] __nla_validate_parse: 11 callbacks suppressed [ 31.530654][ T4165] netlink: 224 bytes leftover after parsing attributes in process `syz.2.288'. [ 31.630519][ T4181] loop1: detected capacity change from 0 to 1024 [ 31.646508][ T4183] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 31.654359][ T4183] SELinux: failed to load policy [ 31.660728][ T4181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.674653][ T4181] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.705769][ T4189] pim6reg1: entered promiscuous mode [ 31.711113][ T4189] pim6reg1: entered allmulticast mode [ 31.728852][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.744974][ T4191] netlink: 165 bytes leftover after parsing attributes in process `syz.1.298'. [ 31.859780][ T4208] bridge0: entered promiscuous mode [ 31.870955][ T4208] bridge0: port 3(macsec1) entered blocking state [ 31.877514][ T4208] bridge0: port 3(macsec1) entered disabled state [ 31.898893][ T4208] macsec1: entered allmulticast mode [ 31.904646][ T4208] bridge0: entered allmulticast mode [ 31.910270][ T3395] usb 9-1: enqueue for inactive port 0 [ 31.921982][ T3395] usb 9-1: enqueue for inactive port 0 [ 31.934292][ T4208] macsec1: left allmulticast mode [ 31.939779][ T4208] bridge0: left allmulticast mode [ 31.957933][ T4208] bridge0: left promiscuous mode [ 32.006333][ T3395] vhci_hcd: vhci_device speed not set [ 32.025491][ T4223] loop4: detected capacity change from 0 to 128 [ 32.116699][ T4240] netlink: 52 bytes leftover after parsing attributes in process `syz.3.315'. [ 32.155543][ T4262] loop3: detected capacity change from 0 to 1024 [ 32.174297][ T4262] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.189899][ T10] tipc: Node number set to 2779705875 [ 32.195549][ T4262] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.316: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.258943][ T4262] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.316: Failed to acquire dquot type 0 [ 32.347472][ T4262] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.316: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.484114][ T4262] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.316: Invalid inode bitmap blk 0 in block_group 0 [ 32.499933][ T4256] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.514752][ T4256] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0 [ 32.526526][ T4262] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 32.535723][ T4262] EXT4-fs (loop3): 1 orphan inode deleted [ 32.559628][ T4262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.632782][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.076200][ T4304] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 33.098304][ T4304] SELinux: failed to load policy [ 33.116141][ T4315] openvswitch: netlink: Message has 6 unknown bytes. [ 33.151852][ T4317] loop3: detected capacity change from 0 to 1024 [ 33.171273][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.190169][ T4317] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.258758][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.308079][ T4332] loop3: detected capacity change from 0 to 128 [ 33.355535][ T4338] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 33.363298][ T4338] netlink: 224 bytes leftover after parsing attributes in process `syz.0.335'. [ 33.479622][ T4341] ================================================================== [ 33.488152][ T4341] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 33.496149][ T4341] [ 33.498476][ T4341] write to 0xffff88810733c128 of 4 bytes by task 4332 on cpu 0: [ 33.506092][ T4341] __mark_inode_dirty+0x240/0x760 [ 33.511118][ T4341] fat_update_time+0x1ec/0x200 [ 33.515869][ T4341] touch_atime+0x148/0x340 [ 33.520281][ T4341] filemap_splice_read+0x6ba/0x740 [ 33.525375][ T4341] splice_direct_to_actor+0x26f/0x680 [ 33.530733][ T4341] do_splice_direct+0xda/0x150 [ 33.535491][ T4341] do_sendfile+0x380/0x650 [ 33.539907][ T4341] __x64_sys_sendfile64+0x105/0x150 [ 33.545101][ T4341] x64_sys_call+0x2bb0/0x2ff0 [ 33.549768][ T4341] do_syscall_64+0xd2/0x200 [ 33.554264][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.560136][ T4341] [ 33.562471][ T4341] read to 0xffff88810733c128 of 4 bytes by task 4341 on cpu 1: [ 33.569990][ T4341] __mark_inode_dirty+0x52/0x760 [ 33.574915][ T4341] fat_update_time+0x1ec/0x200 [ 33.579675][ T4341] touch_atime+0x148/0x340 [ 33.584169][ T4341] filemap_splice_read+0x6ba/0x740 [ 33.589271][ T4341] splice_direct_to_actor+0x26f/0x680 [ 33.594628][ T4341] do_splice_direct+0xda/0x150 [ 33.599398][ T4341] do_sendfile+0x380/0x650 [ 33.603815][ T4341] __x64_sys_sendfile64+0x105/0x150 [ 33.609051][ T4341] x64_sys_call+0x2bb0/0x2ff0 [ 33.613831][ T4341] do_syscall_64+0xd2/0x200 [ 33.618326][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.624457][ T4341] [ 33.626803][ T4341] value changed: 0x00000000 -> 0x00000038 [ 33.632501][ T4341] [ 33.634810][ T4341] Reported by Kernel Concurrency Sanitizer on: [ 33.640942][ T4341] CPU: 1 UID: 0 PID: 4341 Comm: syz.3.333 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 33.652987][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 33.663027][ T4341] ================================================================== [ 33.844214][ T4332] ================================================================== [ 33.852324][ T4332] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 33.859433][ T4332] [ 33.861747][ T4332] write to 0xffff88810733c214 of 4 bytes by task 4341 on cpu 0: [ 33.869380][ T4332] xas_set_mark+0x12b/0x140 [ 33.873911][ T4332] __folio_start_writeback+0x1dd/0x440 [ 33.880055][ T4332] __block_write_full_folio+0x53a/0x8f0 [ 33.885661][ T4332] block_write_full_folio+0x2c2/0x2e0 [ 33.891031][ T4332] mpage_writepages+0x6cf/0x1250 [ 33.895946][ T4332] fat_writepages+0x24/0x30 [ 33.900436][ T4332] do_writepages+0x1c6/0x310 [ 33.905003][ T4332] file_write_and_wait_range+0x156/0x2c0 [ 33.910668][ T4332] __generic_file_fsync+0x46/0x140 [ 33.915812][ T4332] fat_file_fsync+0x49/0x100 [ 33.920398][ T4332] vfs_fsync_range+0x10d/0x130 [ 33.925164][ T4332] generic_file_write_iter+0x1b8/0x2f0 [ 33.930609][ T4332] iter_file_splice_write+0x666/0x9e0 [ 33.935962][ T4332] direct_splice_actor+0x153/0x2a0 [ 33.941055][ T4332] splice_direct_to_actor+0x30f/0x680 [ 33.946402][ T4332] do_splice_direct+0xda/0x150 [ 33.951154][ T4332] do_sendfile+0x380/0x650 [ 33.955546][ T4332] __x64_sys_sendfile64+0x105/0x150 [ 33.960732][ T4332] x64_sys_call+0x2bb0/0x2ff0 [ 33.965388][ T4332] do_syscall_64+0xd2/0x200 [ 33.969878][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.975773][ T4332] [ 33.978085][ T4332] read to 0xffff88810733c214 of 4 bytes by task 4332 on cpu 1: [ 33.985612][ T4332] xas_find_marked+0x5dc/0x620 [ 33.990361][ T4332] find_get_entry+0x5d/0x380 [ 33.994945][ T4332] filemap_get_folios_tag+0x92/0x210 [ 34.000231][ T4332] filemap_fdatawait_range+0x88/0x1d0 [ 34.005595][ T4332] __writeback_single_inode+0xdb/0x7c0 [ 34.011058][ T4332] writeback_single_inode+0x167/0x3e0 [ 34.016426][ T4332] sync_inode_metadata+0x5b/0x90 [ 34.021343][ T4332] __generic_file_fsync+0xf8/0x140 [ 34.026432][ T4332] fat_file_fsync+0x49/0x100 [ 34.031018][ T4332] vfs_fsync_range+0x10d/0x130 [ 34.035766][ T4332] generic_file_write_iter+0x1b8/0x2f0 [ 34.041198][ T4332] iter_file_splice_write+0x666/0x9e0 [ 34.046542][ T4332] direct_splice_actor+0x153/0x2a0 [ 34.051730][ T4332] splice_direct_to_actor+0x30f/0x680 [ 34.057097][ T4332] do_splice_direct+0xda/0x150 [ 34.061830][ T4332] do_sendfile+0x380/0x650 [ 34.066219][ T4332] __x64_sys_sendfile64+0x105/0x150 [ 34.071396][ T4332] x64_sys_call+0x2bb0/0x2ff0 [ 34.076047][ T4332] do_syscall_64+0xd2/0x200 [ 34.080541][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.086416][ T4332] [ 34.088719][ T4332] value changed: 0x0a000021 -> 0x00000021 [ 34.094405][ T4332] [ 34.096726][ T4332] Reported by Kernel Concurrency Sanitizer on: [ 34.102844][ T4332] CPU: 1 UID: 0 PID: 4332 Comm: syz.3.333 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 34.114795][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.124849][ T4332] ==================================================================