last executing test programs: 1.104756221s ago: executing program 2 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 1.054387782s ago: executing program 0 (id=425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd7) 1.044622312s ago: executing program 2 (id=426): syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 780.872896ms ago: executing program 0 (id=431): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 681.331798ms ago: executing program 0 (id=434): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x34, &(0x7f0000000640)={0x6, 0x0, 0x4}) 599.63537ms ago: executing program 0 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 525.114231ms ago: executing program 0 (id=441): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 440.904112ms ago: executing program 4 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x5, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 436.843313ms ago: executing program 0 (id=449): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) 413.071013ms ago: executing program 4 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 390.455033ms ago: executing program 3 (id=452): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000, 0x0) socket$inet6(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 376.143514ms ago: executing program 1 (id=453): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 373.699404ms ago: executing program 4 (id=454): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xfffffffffffffdcf, 0x0, 0x0) 348.313174ms ago: executing program 4 (id=455): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 330.683704ms ago: executing program 1 (id=456): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x59c0ffb3, 0x48100) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x8000, 0x4, 0x9, 0x10001}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746ec66d653d77697e3935ff0f000000010000636f21c2695175652c00"], 0xfe, 0x31e, &(0x7f0000000a00)="$eJzs3UFrXFUUB/CTWBOppJOFCAriRTe6eSTxCzhIC2JAiY1UF8KredFhXmfCvKEyRaw7t36O4tKdIH6BbNy7c5eNyy6KT5JppkkcFy1M34T5/SDcAzd/5lyGN5zNzD269dOd7n6V7efDWH4/xXJELD+MWD+pxpbOrEuxEmf9EO+2bv35xqeff/FRe3v7+k5KN9o339tKKV1787dvv/v5rd+HL3/2y7VfV+Nw/cujv7f+Onz18LWjf25+06lSp0q9/jDl6Xa/P8xvl0Xa61TdLKVPyiKvitTpVcXg3P5+2T84GKW8t7d29WBQVFXKe6PULUZp2E/DwSjlX+edXsqyLK1djcXyLOfdfbCzk7dn0AxzZDBo58fP7up/dnYfNNIQANCop5n/l2c//5+OKE8//y8t+vz/LMz/i+B4/l95/PyeZ/4HAAAAAAAAAAAAAIDL4GFdt+q6bp2uF/+a7o/Z8v4vtjNf3Hspovzx7u7d3fE63m/vRyfKKGIjWvEoop4Y1zc+3L6+kU6sx9qd++P88frC+fxmtGJ9en4zpVTfT+l8/sWTX7SY5LeiFa9Mz2+NX/9CfiXeeftMPotW/PFV9KOMvTjOPsl/v5nSBx9vX8ivnvwfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIshSxNT7+/Psv/bH+cn9+tvRCseTb+ff2Pq/fxX4vUrzZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE5Vo3vdvCyLwRwV9WPz0s/si4i5aEOhmBRNfzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8/fk0u+mOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBJ1eheNy/LYjDDoukzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXCb/BgAA///PbSt7") 326.513574ms ago: executing program 3 (id=457): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 280.681415ms ago: executing program 3 (id=458): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)) 254.558226ms ago: executing program 1 (id=459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 228.091616ms ago: executing program 3 (id=460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 227.531216ms ago: executing program 4 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 221.230286ms ago: executing program 2 (id=462): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000) 194.032936ms ago: executing program 4 (id=463): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 161.678148ms ago: executing program 3 (id=464): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f00000005c0)={[{@errors_remount}]}, 0x1, 0x46b, &(0x7f0000000600)="$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") unshare(0x2c020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 158.264177ms ago: executing program 1 (id=465): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000079140007000000008500000086000000bf09000000000000550901008000000095000000000000001d0a010000000000bf91000000000000b702000002000000840000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff5, &(0x7f0000000cc0)=""/4085, 0x40f00, 0x5}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1}, 0x94) 156.809137ms ago: executing program 2 (id=466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r1, 0x6}, 0x8) 115.616678ms ago: executing program 2 (id=467): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) time(0x0) 71.406149ms ago: executing program 1 (id=468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/time\x00') write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 28.31825ms ago: executing program 2 (id=469): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private0, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xd8e, 0xac, 0x5}, &(0x7f0000000040)=0x10) 22.04627ms ago: executing program 3 (id=470): write(0xffffffffffffffff, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f0", 0x44) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 0s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 33.276363][ T29] audit: type=1400 audit(1753453543.764:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.277559][ T3297] cgroup: Unknown subsys name 'net' [ 33.299948][ T29] audit: type=1400 audit(1753453543.764:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.328305][ T29] audit: type=1400 audit(1753453543.794:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.448805][ T3297] cgroup: Unknown subsys name 'cpuset' [ 33.455149][ T3297] cgroup: Unknown subsys name 'rlimit' [ 33.626993][ T29] audit: type=1400 audit(1753453544.114:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.650465][ T29] audit: type=1400 audit(1753453544.124:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.672708][ T29] audit: type=1400 audit(1753453544.124:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.693681][ T29] audit: type=1400 audit(1753453544.124:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.703278][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.714284][ T29] audit: type=1400 audit(1753453544.124:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.747742][ T29] audit: type=1400 audit(1753453544.124:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.771766][ T29] audit: type=1400 audit(1753453544.214:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.802918][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.573332][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.625099][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.661109][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.700407][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.707834][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.715446][ T3306] bridge_slave_0: entered allmulticast mode [ 35.722486][ T3306] bridge_slave_0: entered promiscuous mode [ 35.729122][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.762074][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.769333][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.776560][ T3306] bridge_slave_1: entered allmulticast mode [ 35.783094][ T3306] bridge_slave_1: entered promiscuous mode [ 35.789439][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.841471][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.870826][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.885270][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.892462][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.899693][ T3313] bridge_slave_0: entered allmulticast mode [ 35.906125][ T3313] bridge_slave_0: entered promiscuous mode [ 35.915091][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.922273][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.929624][ T3313] bridge_slave_1: entered allmulticast mode [ 35.936428][ T3313] bridge_slave_1: entered promiscuous mode [ 35.947291][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.954429][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.961749][ T3312] bridge_slave_0: entered allmulticast mode [ 35.968462][ T3312] bridge_slave_0: entered promiscuous mode [ 35.987837][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.995026][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.002226][ T3310] bridge_slave_0: entered allmulticast mode [ 36.008805][ T3310] bridge_slave_0: entered promiscuous mode [ 36.015338][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.022672][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.029984][ T3312] bridge_slave_1: entered allmulticast mode [ 36.036450][ T3312] bridge_slave_1: entered promiscuous mode [ 36.043331][ T3306] team0: Port device team_slave_0 added [ 36.056477][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.063637][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.070868][ T3310] bridge_slave_1: entered allmulticast mode [ 36.077214][ T3310] bridge_slave_1: entered promiscuous mode [ 36.093883][ T3306] team0: Port device team_slave_1 added [ 36.105303][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.135216][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.150794][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.161442][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.176143][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.183329][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.209540][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.220523][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.227636][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.235290][ T3311] bridge_slave_0: entered allmulticast mode [ 36.242160][ T3311] bridge_slave_0: entered promiscuous mode [ 36.254688][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.264975][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.278909][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.285891][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.311909][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.325324][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.332538][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.339780][ T3311] bridge_slave_1: entered allmulticast mode [ 36.346275][ T3311] bridge_slave_1: entered promiscuous mode [ 36.353311][ T3313] team0: Port device team_slave_0 added [ 36.360026][ T3313] team0: Port device team_slave_1 added [ 36.377766][ T3310] team0: Port device team_slave_0 added [ 36.399360][ T3312] team0: Port device team_slave_0 added [ 36.405659][ T3310] team0: Port device team_slave_1 added [ 36.421329][ T3312] team0: Port device team_slave_1 added [ 36.439263][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.449022][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.456070][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.482280][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.508920][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.515982][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.542072][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.553885][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.563374][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.570528][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.596664][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.617766][ T3306] hsr_slave_0: entered promiscuous mode [ 36.623824][ T3306] hsr_slave_1: entered promiscuous mode [ 36.636372][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.643430][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.669505][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.691982][ T3311] team0: Port device team_slave_0 added [ 36.698108][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.705358][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.733111][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.746854][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.754986][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.782627][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.807011][ T3311] team0: Port device team_slave_1 added [ 36.854336][ T3310] hsr_slave_0: entered promiscuous mode [ 36.861405][ T3310] hsr_slave_1: entered promiscuous mode [ 36.867991][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.876807][ T3310] Cannot create hsr debugfs directory [ 36.886068][ T3312] hsr_slave_0: entered promiscuous mode [ 36.892265][ T3312] hsr_slave_1: entered promiscuous mode [ 36.898363][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.906308][ T3312] Cannot create hsr debugfs directory [ 36.916867][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.924195][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.950301][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.986270][ T3313] hsr_slave_0: entered promiscuous mode [ 36.992465][ T3313] hsr_slave_1: entered promiscuous mode [ 36.999802][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.008114][ T3313] Cannot create hsr debugfs directory [ 37.014035][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.021235][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.047297][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.126074][ T3311] hsr_slave_0: entered promiscuous mode [ 37.132283][ T3311] hsr_slave_1: entered promiscuous mode [ 37.138310][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.145887][ T3311] Cannot create hsr debugfs directory [ 37.278005][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.287099][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.308870][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.318008][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.335670][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.351977][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.364617][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.378024][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.393435][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.403007][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.416481][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.426379][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.466882][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.483070][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.494215][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.509314][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.518159][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.555769][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.565752][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.581682][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.591613][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.598994][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.608638][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.615736][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.629448][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.639275][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.697065][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.713144][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.742567][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.752586][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.762284][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.778036][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.785191][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.798776][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.808179][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.815493][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.825864][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.833104][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.851214][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.860999][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.868919][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.888271][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.897856][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.905384][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.928951][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.936210][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.945891][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.953195][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.963780][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.970977][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.999666][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.020573][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.105979][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.143403][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.212692][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.234724][ T3306] veth0_vlan: entered promiscuous mode [ 38.246991][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.267466][ T3306] veth1_vlan: entered promiscuous mode [ 38.305111][ T3306] veth0_macvtap: entered promiscuous mode [ 38.329063][ T3306] veth1_macvtap: entered promiscuous mode [ 38.360858][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.370718][ T3313] veth0_vlan: entered promiscuous mode [ 38.402248][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.411036][ T3310] veth0_vlan: entered promiscuous mode [ 38.423765][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.432874][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.442189][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.451556][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.466273][ T3311] veth0_vlan: entered promiscuous mode [ 38.472512][ T3313] veth1_vlan: entered promiscuous mode [ 38.486665][ T3311] veth1_vlan: entered promiscuous mode [ 38.501055][ T3310] veth1_vlan: entered promiscuous mode [ 38.509280][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.509293][ T29] audit: type=1400 audit(1753453549.004:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BoPNUi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.546040][ T3313] veth0_macvtap: entered promiscuous mode [ 38.558578][ T3311] veth0_macvtap: entered promiscuous mode [ 38.563564][ T29] audit: type=1400 audit(1753453549.034:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.581787][ T3310] veth0_macvtap: entered promiscuous mode [ 38.586448][ T29] audit: type=1400 audit(1753453549.034:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BoPNUi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.598032][ T3310] veth1_macvtap: entered promiscuous mode [ 38.617394][ T29] audit: type=1400 audit(1753453549.034:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.646959][ T29] audit: type=1400 audit(1753453549.034:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BoPNUi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.673772][ T29] audit: type=1400 audit(1753453549.034:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.BoPNUi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.685470][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.701303][ T29] audit: type=1400 audit(1753453549.034:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.701337][ T29] audit: type=1400 audit(1753453549.034:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.758794][ T29] audit: type=1400 audit(1753453549.034:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.760645][ T3313] veth1_macvtap: entered promiscuous mode [ 38.791823][ T3311] veth1_macvtap: entered promiscuous mode [ 38.801227][ T29] audit: type=1400 audit(1753453549.294:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.809353][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.841558][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.860919][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.879445][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.893634][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.909070][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.917871][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.926626][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.935411][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.948252][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.960372][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.969572][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.979097][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.987955][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.999354][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.009067][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.017910][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.026647][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081533][ T3312] veth0_vlan: entered promiscuous mode [ 39.099373][ T3312] veth1_vlan: entered promiscuous mode [ 39.178795][ T3312] veth0_macvtap: entered promiscuous mode [ 39.178829][ T3491] loop3: detected capacity change from 0 to 128 [ 39.205122][ T3312] veth1_macvtap: entered promiscuous mode [ 39.215141][ T3491] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.231150][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.252271][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.261775][ T3491] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.265262][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.279877][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.288758][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.298076][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.312896][ T3495] veth0_to_team: entered promiscuous mode [ 39.318778][ T3495] veth0_to_team: entered allmulticast mode [ 39.357619][ T2265] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.675225][ T3526] loop4: detected capacity change from 0 to 512 [ 39.726735][ T3532] netlink: 'syz.3.27': attribute type 8 has an invalid length. [ 39.766467][ T3526] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.792769][ T3526] EXT4-fs (loop4): mount failed [ 39.975987][ T3558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.38'. [ 39.984967][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.015347][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 40.022648][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.129008][ T3577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 40.136465][ T3577] syzkaller1: linktype set to 768 [ 40.204829][ T3586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.250355][ T3586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.259464][ T3586] bond0: (slave bond1): Enslaving as an active interface with an up link [ 40.288407][ T3595] loop2: detected capacity change from 0 to 512 [ 40.310547][ T3595] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.53: casefold flag without casefold feature [ 40.347071][ T3595] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.53: couldn't read orphan inode 15 (err -117) [ 40.368318][ T3595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.424379][ T3591] geneve0: entered promiscuous mode [ 40.430397][ T3591] geneve0: entered allmulticast mode [ 40.472409][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.564433][ T3620] loop2: detected capacity change from 0 to 256 [ 40.572758][ T3610] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 40.590591][ T3620] ======================================================= [ 40.590591][ T3620] WARNING: The mand mount option has been deprecated and [ 40.590591][ T3620] and is ignored by this kernel. Remove the mand [ 40.590591][ T3620] option from the mount to silence this warning. [ 40.590591][ T3620] ======================================================= [ 40.654358][ T3620] FAT-fs (loop2): Directory bread(block 64) failed [ 40.662716][ T3620] FAT-fs (loop2): Directory bread(block 65) failed [ 40.675581][ T3631] random: crng reseeded on system resumption [ 40.683568][ T3620] FAT-fs (loop2): Directory bread(block 66) failed [ 40.691792][ T3620] FAT-fs (loop2): Directory bread(block 67) failed [ 40.707215][ T3620] FAT-fs (loop2): Directory bread(block 68) failed [ 40.719241][ T3620] FAT-fs (loop2): Directory bread(block 69) failed [ 40.726008][ T3620] FAT-fs (loop2): Directory bread(block 70) failed [ 40.737155][ T3620] FAT-fs (loop2): Directory bread(block 71) failed [ 40.760808][ T3620] FAT-fs (loop2): Directory bread(block 72) failed [ 40.774088][ T3620] FAT-fs (loop2): Directory bread(block 73) failed [ 40.849958][ T3640] netlink: 71 bytes leftover after parsing attributes in process `syz.3.76'. [ 41.062170][ T3653] random: crng reseeded on system resumption [ 41.678588][ T3692] loop0: detected capacity change from 0 to 512 [ 41.720187][ T3692] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.98: Parent and EA inode have the same ino 15 [ 41.747295][ T3692] EXT4-fs (loop0): Remounting filesystem read-only [ 41.760370][ T3692] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.773732][ T3692] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.787777][ T3692] EXT4-fs (loop0): 1 orphan inode deleted [ 41.798813][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.816778][ T3705] loop4: detected capacity change from 0 to 128 [ 41.830064][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.849139][ T3705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.872668][ T3705] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.926055][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.973897][ T3724] pim6reg: tun_chr_ioctl cmd 2147767520 [ 42.239779][ T3757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.126'. [ 42.292133][ T3763] loop4: detected capacity change from 0 to 128 [ 42.415167][ T3771] loop4: detected capacity change from 0 to 512 [ 42.423641][ T3771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.431253][ T3771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.444547][ T3771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.493084][ T3771] EXT4-fs (loop4): 1 truncate cleaned up [ 42.517320][ T3771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.615132][ T3783] loop2: detected capacity change from 0 to 512 [ 42.643538][ T3783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.675260][ T3783] EXT4-fs (loop2): 1 truncate cleaned up [ 42.683780][ T3771] syz.4.133 (3771) used greatest stack depth: 10656 bytes left [ 42.694163][ T3783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.694616][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.730429][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.747078][ T3717] syz.0.108 (3717) used greatest stack depth: 10512 bytes left [ 42.801824][ T3789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3789 comm=syz.3.141 [ 42.931672][ T3802] netlink: 'syz.3.147': attribute type 83 has an invalid length. [ 43.141632][ T3817] loop4: detected capacity change from 0 to 512 [ 43.172271][ T3817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.233436][ T3817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.261356][ T3817] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.297242][ T3827] netlink: 'syz.1.158': attribute type 21 has an invalid length. [ 43.352359][ T3817] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.155: corrupted xattr block 32: bad e_name length [ 43.403371][ T3832] netlink: 'syz.1.158': attribute type 21 has an invalid length. [ 43.417299][ T3817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.439581][ T3817] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.155: corrupted xattr block 32: bad e_name length [ 43.454731][ T3817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.466936][ T3834] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.155: failed to insert inode 16: doubly allocated? [ 43.478207][ T3835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.161'. [ 43.502757][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.554164][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 43.554182][ T29] audit: type=1326 audit(1753453554.044:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d14fe9a9 code=0x7ffc0000 [ 43.585865][ T29] audit: type=1326 audit(1753453554.084:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fb6d14fe9a9 code=0x7ffc0000 [ 43.610110][ T29] audit: type=1326 audit(1753453554.084:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d14fe9a9 code=0x7ffc0000 [ 43.634187][ T29] audit: type=1326 audit(1753453554.084:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d14fe9a9 code=0x7ffc0000 [ 43.667795][ T29] audit: type=1400 audit(1753453554.154:261): avc: denied { name_bind } for pid=3841 comm="syz.0.165" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.689531][ T29] audit: type=1400 audit(1753453554.154:262): avc: denied { node_bind } for pid=3841 comm="syz.0.165" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.717552][ T3827] netlink: 156 bytes leftover after parsing attributes in process `syz.1.158'. [ 43.770325][ T3832] netlink: 156 bytes leftover after parsing attributes in process `syz.1.158'. [ 43.832940][ T29] audit: type=1400 audit(1753453554.304:263): avc: denied { name_bind } for pid=3851 comm="syz.4.168" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.880290][ T29] audit: type=1400 audit(1753453554.354:264): avc: denied { relabelfrom } for pid=3853 comm="syz.4.171" name="" dev="pipefs" ino=5051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 43.932704][ T29] audit: type=1400 audit(1753453554.404:265): avc: denied { read write } for pid=3859 comm="syz.2.172" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.957455][ T29] audit: type=1400 audit(1753453554.404:266): avc: denied { open } for pid=3859 comm="syz.2.172" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.059818][ T3874] netlink: 3 bytes leftover after parsing attributes in process `syz.3.179'. [ 44.097955][ T3874] 0ªX¹¦À: renamed from caif0 [ 44.104606][ T3874] 0ªX¹¦À: entered allmulticast mode [ 44.110197][ T3874] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 44.185145][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 44.304177][ T3890] xt_hashlimit: max too large, truncated to 1048576 [ 44.390640][ T3896] blkio.reset_stats is deprecated [ 44.493464][ T3906] loop3: detected capacity change from 0 to 128 [ 44.524475][ T3910] SELinux: failed to load policy [ 44.682922][ T3922] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 44.729276][ T3925] loop2: detected capacity change from 0 to 4096 [ 44.760487][ T3925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.775510][ T3933] loop1: detected capacity change from 0 to 512 [ 44.801197][ T3933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.814423][ T3933] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.841555][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.853850][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.924102][ T3943] loop1: detected capacity change from 0 to 1024 [ 44.975750][ T3943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.009668][ T3943] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.042703][ T3957] netlink: 'syz.2.215': attribute type 8 has an invalid length. [ 45.050493][ T3957] netem: change failed [ 45.059258][ T3943] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.208: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.078062][ T3943] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 45.090838][ T3943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.090838][ T3943] [ 45.146543][ T3960] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: comm syz.1.208: lblock 0 mapped to illegal pblock 0 (length 3) [ 45.170019][ T3960] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 45.182506][ T3960] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.182506][ T3960] [ 45.227589][ T12] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:0: lblock 4 mapped to illegal pblock 4 (length 2) [ 45.253465][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 45.266092][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.266092][ T12] [ 45.277158][ T51] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.277200][ T3965] loop3: detected capacity change from 0 to 1024 [ 45.300984][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 45.313353][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.313353][ T51] [ 45.323194][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 45.362067][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.378695][ T3965] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.438731][ T3965] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.443446][ T3965] EXT4-fs (loop3): Remounting filesystem read-only [ 45.490425][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.623978][ T3994] pimreg: entered allmulticast mode [ 45.633690][ T3994] pimreg: left allmulticast mode [ 45.641666][ T3387] kernel read not supported for file /mISDNtimer (pid: 3387 comm: kworker/0:3) [ 45.822591][ T4015] Illegal XDP return value 4294967274 on prog (id 119) dev N/A, expect packet loss! [ 45.947320][ T4034] bridge_slave_0: invalid flags given to default FDB implementation [ 46.120595][ T4065] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 46.142675][ T4069] loop1: detected capacity change from 0 to 512 [ 46.151733][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.677117][ T4140] loop4: detected capacity change from 0 to 2048 [ 46.709418][ T4140] EXT4-fs (loop4): failed to initialize system zone (-117) [ 46.724609][ T4140] EXT4-fs (loop4): mount failed [ 47.143600][ T4205] loop4: detected capacity change from 0 to 512 [ 47.164733][ T4205] EXT4-fs: Ignoring removed orlov option [ 47.190941][ T4205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.234266][ T4205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.251365][ T4205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.294: bg 0: block 248: padding at end of block bitmap is not set [ 47.293961][ T4205] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.294: Failed to acquire dquot type 1 [ 47.326057][ T4205] EXT4-fs (loop4): 1 truncate cleaned up [ 47.343036][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.383523][ T4205] syz.4.294 (4205) used greatest stack depth: 9304 bytes left [ 47.441059][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.548308][ T4238] loop4: detected capacity change from 0 to 512 [ 47.588618][ T4238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.645659][ T4238] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.738985][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.863024][ T4279] loop4: detected capacity change from 0 to 512 [ 47.884725][ T4279] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.916130][ T4279] EXT4-fs (loop4): 1 truncate cleaned up [ 47.928270][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.954322][ T4279] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.302: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 47.998020][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 48.004630][ T4279] EXT4-fs warning (device loop4): ext4_rename_delete:3726: inode #2: comm syz.4.302: Deleting old file: nlink 5, error=-117 [ 48.075542][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.516540][ T4324] loop4: detected capacity change from 0 to 128 [ 48.571605][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 48.571622][ T29] audit: type=1400 audit(1753453559.064:396): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.757261][ T29] audit: type=1400 audit(1753453559.244:397): avc: denied { read write } for pid=4331 comm="syz.3.316" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.781442][ T29] audit: type=1400 audit(1753453559.244:398): avc: denied { open } for pid=4331 comm="syz.3.316" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.857714][ T29] audit: type=1400 audit(1753453559.334:399): avc: denied { create } for pid=4333 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.877124][ T29] audit: type=1400 audit(1753453559.334:400): avc: denied { connect } for pid=4333 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.896524][ T29] audit: type=1400 audit(1753453559.334:401): avc: denied { read } for pid=4333 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.020178][ T29] audit: type=1400 audit(1753453559.464:402): avc: denied { create } for pid=4339 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.039809][ T29] audit: type=1400 audit(1753453559.474:403): avc: denied { bind } for pid=4339 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.059081][ T29] audit: type=1400 audit(1753453559.474:404): avc: denied { write } for pid=4339 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.078288][ T29] audit: type=1400 audit(1753453559.484:405): avc: denied { allowed } for pid=4341 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.164723][ T4354] netlink: 'syz.2.326': attribute type 3 has an invalid length. [ 49.172569][ T4354] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.326'. [ 49.583004][ T4391] loop4: detected capacity change from 0 to 1024 [ 49.674792][ T4391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.701556][ T4398] loop0: detected capacity change from 0 to 512 [ 49.741568][ T4398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.761745][ T4391] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.800851][ T4398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.834127][ T4391] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.335: lblock 3 mapped to illegal pblock 3 (length 3) [ 49.843720][ T4398] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.880314][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.889312][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.898209][ T4391] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 49.910551][ T4391] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.910551][ T4391] [ 49.917817][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.933227][ T4409] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.957276][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.975745][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.984644][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.992298][ T4409] EXT4-fs error (device loop4) in ext4_setattr:5986: Corrupt filesystem [ 50.014586][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 50.024982][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.043514][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 50.052772][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 50.065263][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 50.217934][ T4430] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 50.222940][ T4435] loop4: detected capacity change from 0 to 164 [ 50.260806][ T4430] team0: Port device geneve1 added [ 50.273361][ T4435] Unable to read rock-ridge attributes [ 50.299035][ T4435] Unable to read rock-ridge attributes [ 50.315639][ T4439] loop2: detected capacity change from 0 to 2048 [ 50.358557][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.413670][ T2244] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.439697][ T2244] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 50.452125][ T2244] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.452125][ T2244] [ 50.461908][ T2244] EXT4-fs (loop2): Total free blocks count 0 [ 50.468053][ T2244] EXT4-fs (loop2): Free/Dirty block details [ 50.474285][ T2244] EXT4-fs (loop2): free_blocks=2415919504 [ 50.480174][ T2244] EXT4-fs (loop2): dirty_blocks=16 [ 50.485443][ T2244] EXT4-fs (loop2): Block reservation details [ 50.491864][ T2244] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 50.532766][ C1] hrtimer: interrupt took 29773 ns [ 50.620350][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.684255][ T4482] loop3: detected capacity change from 0 to 512 [ 50.698191][ T4482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.727879][ T4482] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.375: invalid block [ 50.741494][ T4482] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.375: invalid indirect mapped block 4294967295 (level 1) [ 50.759781][ T4482] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.375: invalid indirect mapped block 4294967295 (level 1) [ 50.776773][ T4482] EXT4-fs (loop3): 2 truncates cleaned up [ 50.783382][ T4482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.851644][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.066993][ T4527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.093684][ T4529] loop2: detected capacity change from 0 to 4096 [ 51.099837][ T4527] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 51.141570][ T4527] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 51.149822][ T4529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.284421][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.498617][ T4573] loop2: detected capacity change from 0 to 8192 [ 51.547760][ T4594] capability: warning: `syz.3.416' uses deprecated v2 capabilities in a way that may be insecure [ 51.854989][ T4631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 51.861647][ T4631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.869589][ T4631] vhci_hcd vhci_hcd.0: Device attached [ 51.876781][ T4630] loop4: detected capacity change from 0 to 1764 [ 51.880275][ T4635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.953181][ T4635] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 51.959885][ T4635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.963685][ T4640] sctp: [Deprecated]: syz.4.428 (pid 4640) Use of int in max_burst socket option deprecated. [ 51.963685][ T4640] Use struct sctp_assoc_value instead [ 51.967406][ T4635] vhci_hcd vhci_hcd.0: Device attached [ 52.030188][ T4631] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5) [ 52.036834][ T4631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.044547][ T4631] vhci_hcd vhci_hcd.0: Device attached [ 52.085844][ T4651] netlink: 'syz.4.432': attribute type 3 has an invalid length. [ 52.108555][ T4632] vhci_hcd: connection closed [ 52.110350][ T4638] vhci_hcd: connection closed [ 52.110925][ T51] vhci_hcd: stop threads [ 52.115243][ T4642] vhci_hcd: connection closed [ 52.119909][ T51] vhci_hcd: release socket [ 52.133430][ T51] vhci_hcd: disconnect device [ 52.138334][ T36] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 52.145979][ T36] usb 5-1: enqueue for inactive port 0 [ 52.159536][ T36] usb 5-1: enqueue for inactive port 0 [ 52.169251][ T36] usb 5-1: enqueue for inactive port 0 [ 52.175266][ T51] vhci_hcd: stop threads [ 52.179609][ T51] vhci_hcd: release socket [ 52.184065][ T51] vhci_hcd: disconnect device [ 52.189427][ T51] vhci_hcd: stop threads [ 52.193790][ T51] vhci_hcd: release socket [ 52.198359][ T51] vhci_hcd: disconnect device [ 52.237769][ T36] vhci_hcd: vhci_device speed not set [ 52.544004][ T4702] loop1: detected capacity change from 0 to 512 [ 52.545553][ T4698] loop4: detected capacity change from 0 to 8192 [ 52.552388][ T4702] vfat: Unknown parameter 'shortnÆme' [ 52.565964][ T4698] syz.4.455: attempt to access beyond end of device [ 52.565964][ T4698] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 52.579444][ T4698] Buffer I/O error on dev loop4, logical block 57847, async page read [ 52.710272][ T4717] loop3: detected capacity change from 0 to 512 [ 52.731365][ T4717] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.748480][ T4717] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.757308][ T4717] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.464: Block bitmap for bg 0 marked uninitialized [ 52.777787][ T4717] EXT4-fs (loop3): Remounting filesystem read-only [ 52.786760][ T4717] EXT4-fs (loop3): 1 orphan inode deleted [ 52.793431][ T4717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.798916][ T4725] netlink: 'syz.1.468': attribute type 3 has an invalid length. [ 52.824547][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.851480][ C0] ================================================================== [ 52.859616][ C0] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 52.866039][ C0] [ 52.868364][ C0] read to 0xffffc90010967bc0 of 4 bytes by task 4714 on cpu 1: [ 52.875931][ C0] do_sys_poll+0x99c/0xbd0 [ 52.880352][ C0] __se_sys_ppoll+0x1b9/0x200 [ 52.885066][ C0] __x64_sys_ppoll+0x67/0x80 [ 52.889669][ C0] x64_sys_call+0x2de5/0x2fb0 [ 52.894349][ C0] do_syscall_64+0xd2/0x200 [ 52.898853][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.904750][ C0] [ 52.907100][ C0] write to 0xffffc90010967bc0 of 4 bytes by interrupt on cpu 0: [ 52.914728][ C0] pollwake+0xb6/0x100 [ 52.918801][ C0] __wake_up+0x66/0xb0 [ 52.922888][ C0] bpf_ringbuf_notify+0x22/0x30 [ 52.927759][ C0] irq_work_run+0xdf/0x2d0 [ 52.932199][ C0] __sysvec_irq_work+0x22/0x170 [ 52.937154][ C0] sysvec_irq_work+0x66/0x80 [ 52.941767][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 52.946935][ C0] native_apic_msr_write+0x3d/0x60 [ 52.952081][ C0] x2apic_send_IPI_self+0x10/0x20 [ 52.957139][ C0] arch_irq_work_raise+0x46/0x50 [ 52.962099][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 52.967490][ C0] irq_work_queue+0x70/0x100 [ 52.972094][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 52.977055][ C0] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 52.982525][ C0] bpf_trace_run3+0x10c/0x1d0 [ 52.987227][ C0] kmem_cache_free+0x257/0x300 [ 52.992093][ C0] security_file_free+0x61/0xa0 [ 52.996964][ C0] __fput+0x478/0x650 [ 53.000967][ C0] fput_close_sync+0x6e/0x120 [ 53.005651][ C0] __x64_sys_close+0x56/0xf0 [ 53.010251][ C0] x64_sys_call+0x2747/0x2fb0 [ 53.014941][ C0] do_syscall_64+0xd2/0x200 [ 53.019445][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.025344][ C0] [ 53.027669][ C0] value changed: 0x00000001 -> 0x00000000 [ 53.033381][ C0] [ 53.035702][ C0] Reported by Kernel Concurrency Sanitizer on: [ 53.041860][ C0] CPU: 0 UID: 0 PID: 3310 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 53.054830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.064994][ C0] ==================================================================