last executing test programs: 1.355269358s ago: executing program 0 (id=201): r0 = socket$unix(0x1, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x2, 0x4) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=','], 0x30}, 0x0) 1.227562479s ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.027420807s ago: executing program 2 (id=220): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 643.834642ms ago: executing program 1 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) 618.144814ms ago: executing program 2 (id=239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) 579.261847ms ago: executing program 2 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}}, 0x1c}}, 0x0) 567.495158ms ago: executing program 1 (id=242): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 551.83862ms ago: executing program 1 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 535.600072ms ago: executing program 3 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) 524.499253ms ago: executing program 2 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40000582) 514.811254ms ago: executing program 4 (id=247): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 485.695646ms ago: executing program 1 (id=248): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 470.393597ms ago: executing program 2 (id=249): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x49d1f586de5c007a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 470.087087ms ago: executing program 4 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0xcb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r0, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 440.700721ms ago: executing program 4 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000180a05000000000000000000020000000900010073797a3000000000090002"], 0x60}}, 0x0) 428.061531ms ago: executing program 3 (id=252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 417.831663ms ago: executing program 1 (id=253): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x252, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x1, 0x1, 0x7, 0x10000, 0x9, 0x8}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086607, 0x0) 383.786306ms ago: executing program 3 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) writev(0xffffffffffffffff, &(0x7f00000030c0)=[{0x0}], 0x1) 361.350127ms ago: executing program 0 (id=255): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202) r1 = fcntl$dupfd(r0, 0x0, r0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x44}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 361.108378ms ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fd"], 0x48) 344.440389ms ago: executing program 3 (id=257): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d40)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x4}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x16, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x4}}]}]}, 0x64}}, 0x0) 335.43412ms ago: executing program 0 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) 296.128573ms ago: executing program 4 (id=259): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) signalfd(r0, 0x0, 0x0) 276.132305ms ago: executing program 3 (id=260): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xffffffffffffff63, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x81000000}}]}}]}, 0x148}}, 0x0) 196.289362ms ago: executing program 1 (id=261): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000800)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0xf, 0x6, "5e9c72", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x8, 0x2, 0x1, 0x3, 0x6, 0x5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x7, 0x0, 0x1, 0x2, 0x2, 0x3}, 0x2, {0xb, 0x7, 0x1, 0x12, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 119.302109ms ago: executing program 0 (id=262): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 11.907159ms ago: executing program 0 (id=263): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000780)='./file0\x00', &(0x7f0000000600)='./bus\x00') 387.35µs ago: executing program 2 (id=264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x3, 0xfffd, 0x2, 0x0, 0x0, 0x2c}}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x32, 0x3, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 202.88µs ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) 0s ago: executing program 4 (id=266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): [ 20.241312][ T29] audit: type=1400 audit(1730796254.085:81): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 25.698373][ T29] audit: type=1400 audit(1730796259.545:82): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.699347][ T3306] cgroup: Unknown subsys name 'net' [ 25.721133][ T29] audit: type=1400 audit(1730796259.545:83): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.748439][ T29] audit: type=1400 audit(1730796259.575:84): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.886660][ T3306] cgroup: Unknown subsys name 'cpuset' [ 25.892805][ T3306] cgroup: Unknown subsys name 'rlimit' [ 25.999671][ T29] audit: type=1400 audit(1730796259.845:85): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.023015][ T29] audit: type=1400 audit(1730796259.845:86): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.043525][ T29] audit: type=1400 audit(1730796259.845:87): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.046650][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.063870][ T29] audit: type=1400 audit(1730796259.845:88): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.092679][ T29] audit: type=1400 audit(1730796259.845:89): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.117450][ T29] audit: type=1400 audit(1730796259.845:90): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.140750][ T29] audit: type=1400 audit(1730796259.915:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.160348][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.168963][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.187800][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.283585][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.291203][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.298497][ T3316] bridge_slave_0: entered allmulticast mode [ 27.304788][ T3316] bridge_slave_0: entered promiscuous mode [ 27.313061][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.320240][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.327543][ T3316] bridge_slave_1: entered allmulticast mode [ 27.333837][ T3316] bridge_slave_1: entered promiscuous mode [ 27.357670][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.381346][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.388459][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.395578][ T3322] bridge_slave_0: entered allmulticast mode [ 27.402001][ T3322] bridge_slave_0: entered promiscuous mode [ 27.409636][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.418789][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.425931][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.433198][ T3322] bridge_slave_1: entered allmulticast mode [ 27.439634][ T3322] bridge_slave_1: entered promiscuous mode [ 27.466895][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.489833][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.515552][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.524957][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.532164][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.539363][ T3315] bridge_slave_0: entered allmulticast mode [ 27.545894][ T3315] bridge_slave_0: entered promiscuous mode [ 27.552256][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.565859][ T3316] team0: Port device team_slave_0 added [ 27.572262][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.582351][ T3316] team0: Port device team_slave_1 added [ 27.592822][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.599975][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.607137][ T3315] bridge_slave_1: entered allmulticast mode [ 27.613472][ T3315] bridge_slave_1: entered promiscuous mode [ 27.652855][ T3322] team0: Port device team_slave_0 added [ 27.659395][ T3322] team0: Port device team_slave_1 added [ 27.665378][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.672498][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.698473][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.709640][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.716606][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.742536][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.775088][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.785374][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.796819][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.803942][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.811133][ T3318] bridge_slave_0: entered allmulticast mode [ 27.817408][ T3318] bridge_slave_0: entered promiscuous mode [ 27.824490][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.831660][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.838794][ T3318] bridge_slave_1: entered allmulticast mode [ 27.845305][ T3318] bridge_slave_1: entered promiscuous mode [ 27.851794][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.858780][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.884675][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.913443][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.920479][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.946447][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.973930][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.983041][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.990150][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.997508][ T3323] bridge_slave_0: entered allmulticast mode [ 28.003699][ T3323] bridge_slave_0: entered promiscuous mode [ 28.012961][ T3315] team0: Port device team_slave_0 added [ 28.020398][ T3316] hsr_slave_0: entered promiscuous mode [ 28.026418][ T3316] hsr_slave_1: entered promiscuous mode [ 28.033286][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.047647][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.054711][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.061914][ T3323] bridge_slave_1: entered allmulticast mode [ 28.068265][ T3323] bridge_slave_1: entered promiscuous mode [ 28.074813][ T3315] team0: Port device team_slave_1 added [ 28.112889][ T3318] team0: Port device team_slave_0 added [ 28.119696][ T3318] team0: Port device team_slave_1 added [ 28.132149][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.141645][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.148707][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.174616][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.187460][ T3322] hsr_slave_0: entered promiscuous mode [ 28.193465][ T3322] hsr_slave_1: entered promiscuous mode [ 28.199386][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.206968][ T3322] Cannot create hsr debugfs directory [ 28.222345][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.231865][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.238962][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.265017][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.308716][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.315737][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.341855][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.353449][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.360422][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.386344][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.397551][ T3323] team0: Port device team_slave_0 added [ 28.422430][ T3323] team0: Port device team_slave_1 added [ 28.440768][ T3315] hsr_slave_0: entered promiscuous mode [ 28.446931][ T3315] hsr_slave_1: entered promiscuous mode [ 28.452651][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.460260][ T3315] Cannot create hsr debugfs directory [ 28.472304][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.479295][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.505484][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.517128][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.524072][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.549992][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.594036][ T3318] hsr_slave_0: entered promiscuous mode [ 28.600134][ T3318] hsr_slave_1: entered promiscuous mode [ 28.606096][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.613633][ T3318] Cannot create hsr debugfs directory [ 28.649883][ T3323] hsr_slave_0: entered promiscuous mode [ 28.655928][ T3323] hsr_slave_1: entered promiscuous mode [ 28.661750][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.669362][ T3323] Cannot create hsr debugfs directory [ 28.726085][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.734660][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.751450][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.761757][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.822197][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.832637][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.849511][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.858899][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.875751][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.884500][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.893620][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.902863][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.933757][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.943574][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.952515][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.960984][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.005559][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.021226][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.029960][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.038599][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.052253][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.104806][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.116050][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.130433][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.139980][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147101][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.157442][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.164496][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.173613][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.184897][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.203200][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.212519][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.219606][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.228522][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.235599][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.248883][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.257108][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.274435][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.281520][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.308653][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.315745][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.330933][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.338068][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.349635][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.362544][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.369636][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.387286][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.394466][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.404069][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.411231][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.429048][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.475080][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.485589][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.517071][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.550488][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.590121][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.612264][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.642625][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.696502][ T3315] veth0_vlan: entered promiscuous mode [ 29.720177][ T3322] veth0_vlan: entered promiscuous mode [ 29.730737][ T3315] veth1_vlan: entered promiscuous mode [ 29.748503][ T3322] veth1_vlan: entered promiscuous mode [ 29.761023][ T3323] veth0_vlan: entered promiscuous mode [ 29.774790][ T3323] veth1_vlan: entered promiscuous mode [ 29.800742][ T3315] veth0_macvtap: entered promiscuous mode [ 29.809969][ T3318] veth0_vlan: entered promiscuous mode [ 29.821641][ T3315] veth1_macvtap: entered promiscuous mode [ 29.833475][ T3323] veth0_macvtap: entered promiscuous mode [ 29.844151][ T3323] veth1_macvtap: entered promiscuous mode [ 29.853704][ T3318] veth1_vlan: entered promiscuous mode [ 29.868784][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.876492][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.887098][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.898206][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.906379][ T3322] veth0_macvtap: entered promiscuous mode [ 29.914683][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.927565][ T3322] veth1_macvtap: entered promiscuous mode [ 29.935681][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.944459][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.953251][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.962081][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.978099][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.988647][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.999523][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.014595][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.023407][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.032646][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.041436][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.053837][ T3316] veth0_vlan: entered promiscuous mode [ 30.068882][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.079356][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.089264][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.099717][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.110431][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.123553][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.127132][ T3316] veth1_vlan: entered promiscuous mode [ 30.152735][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.163204][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.167291][ T3454] ALSA: seq fatal error: cannot create timer (-22) [ 30.173159][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.190052][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.201541][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.209634][ T3318] veth0_macvtap: entered promiscuous mode [ 30.216941][ T3318] veth1_macvtap: entered promiscuous mode [ 30.231752][ T3316] veth0_macvtap: entered promiscuous mode [ 30.245176][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.255704][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.265605][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.276190][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.286027][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.296626][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.308686][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.320230][ T3322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329002][ T3322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.337749][ T3322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.346514][ T3322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.364581][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.375247][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.385121][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.395644][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.405528][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.415991][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.436478][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.446836][ T3316] veth1_macvtap: entered promiscuous mode [ 30.459309][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.468167][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476971][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.485821][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.534708][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.545195][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.555099][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.565590][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.575460][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.585921][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.595740][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.606284][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.618428][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.626875][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.637352][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.647230][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.657695][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.667543][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.678050][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.687942][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.698377][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.709260][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.717719][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.726494][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.735202][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.744057][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.783035][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 30.783048][ T29] audit: type=1400 audit(1730796264.625:142): avc: denied { compute_member } for pid=3488 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 30.819332][ T3493] SELinux: policydb version 793756863 does not match my version range 15-33 [ 30.820883][ T29] audit: type=1400 audit(1730796264.665:143): avc: denied { load_policy } for pid=3492 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 30.836267][ T3493] SELinux: failed to load policy [ 30.848734][ T29] audit: type=1400 audit(1730796264.675:144): avc: denied { read } for pid=3490 comm="syz.2.3" dev="nsfs" ino=4026532675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.873901][ T29] audit: type=1400 audit(1730796264.675:145): avc: denied { open } for pid=3490 comm="syz.2.3" path="net:[4026532675]" dev="nsfs" ino=4026532675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.896787][ T29] audit: type=1400 audit(1730796264.675:146): avc: denied { create } for pid=3490 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.948070][ T29] audit: type=1400 audit(1730796264.785:147): avc: denied { create } for pid=3494 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.967358][ T29] audit: type=1400 audit(1730796264.785:148): avc: denied { setopt } for pid=3494 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.986761][ T29] audit: type=1400 audit(1730796264.785:149): avc: denied { bind } for pid=3494 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.005859][ T29] audit: type=1400 audit(1730796264.785:150): avc: denied { name_bind } for pid=3494 comm="syz.1.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.027462][ T29] audit: type=1400 audit(1730796264.785:151): avc: denied { node_bind } for pid=3494 comm="syz.1.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 31.097329][ T3510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.121077][ T3505] 9pnet: Could not find request transport: f [ 31.202864][ T3495] syz.1.14 (3495) used greatest stack depth: 10456 bytes left [ 31.273775][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.282757][ T3532] loop1: detected capacity change from 0 to 1024 [ 31.282994][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.311894][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.355097][ T3533] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 31.363325][ T3533] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 31.371750][ T3543] loop4: detected capacity change from 0 to 512 [ 31.389297][ T3543] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.390328][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.416656][ T3543] EXT4-fs (loop4): mount failed [ 31.483411][ T3556] loop2: detected capacity change from 0 to 512 [ 31.514126][ T3556] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.527211][ T3556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.562300][ T3556] EXT4-fs (loop2): 1 orphan inode deleted [ 31.568251][ T3556] EXT4-fs (loop2): 1 truncate cleaned up [ 31.574593][ T3556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.605563][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.629387][ T3575] netem: change failed [ 31.635167][ T3574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3574 comm=syz.3.48 [ 31.650217][ T3574] bridge0: port 3(syz_tun) entered blocking state [ 31.656771][ T3574] bridge0: port 3(syz_tun) entered disabled state [ 31.663352][ T3574] syz_tun: entered allmulticast mode [ 31.669504][ T3574] syz_tun: entered promiscuous mode [ 31.674842][ T3574] bridge0: port 3(syz_tun) entered blocking state [ 31.681305][ T3574] bridge0: port 3(syz_tun) entered forwarding state [ 31.954328][ T3619] loop2: detected capacity change from 0 to 512 [ 31.990493][ T3619] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.65: corrupted in-inode xattr: invalid ea_ino [ 32.019815][ T3619] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.65: couldn't read orphan inode 15 (err -117) [ 32.050954][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.114717][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.153135][ T3630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.186197][ T3635] : renamed from bond0 (while UP) [ 32.259846][ T3645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 32.323969][ T3661] syz.3.86[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.324106][ T3661] syz.3.86[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.335553][ T3661] syz.3.86[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.379651][ T3668] loop0: detected capacity change from 0 to 512 [ 32.400038][ T3668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.418733][ T3668] EXT4-fs (loop0): 1 truncate cleaned up [ 32.424768][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.443557][ T3669] loop4: detected capacity change from 0 to 512 [ 32.453283][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.459983][ T3669] ======================================================= [ 32.459983][ T3669] WARNING: The mand mount option has been deprecated and [ 32.459983][ T3669] and is ignored by this kernel. Remove the mand [ 32.459983][ T3669] option from the mount to silence this warning. [ 32.459983][ T3669] ======================================================= [ 32.526463][ T3669] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 32.561649][ T3669] System zones: 0-2, 18-18, 34-34 [ 32.579601][ T3669] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.89: bg 0: block 248: padding at end of block bitmap is not set [ 32.626296][ T3700] syz.0.100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.642914][ T3702] loop1: detected capacity change from 0 to 764 [ 32.648756][ T3669] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.89: Failed to acquire dquot type 1 [ 32.662449][ T3669] EXT4-fs (loop4): 1 truncate cleaned up [ 32.670840][ T3669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.685312][ T3669] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.792042][ T3669] syz.4.89 (3669) used greatest stack depth: 9344 bytes left [ 32.803111][ T3720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 32.804983][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.934993][ T3749] loop4: detected capacity change from 0 to 1024 [ 32.952030][ T3749] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 32.961868][ T3749] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 32.983697][ T3749] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.027469][ T3764] loop1: detected capacity change from 0 to 128 [ 33.097602][ T3749] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.123: unexpected bad inode w/o EXT4_IGET_BAD [ 33.125947][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 33.126053][ T3749] EXT4-fs (loop4): no journal found [ 33.140109][ T3749] EXT4-fs (loop4): can't get journal size [ 33.167487][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.215877][ T3749] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.4.123: path /26/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 33.286393][ T3785] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 33.318450][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.501516][ T3806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 33.711609][ T3833] pimreg: entered allmulticast mode [ 33.738494][ T3831] pimreg: left allmulticast mode [ 33.747029][ T3838] syz.1.164: attempt to access beyond end of device [ 33.747029][ T3838] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 33.882482][ T3392] kernel write not supported for file /snd/seq (pid: 3392 comm: kworker/1:3) [ 33.936082][ T3854] loop4: detected capacity change from 0 to 1024 [ 33.950560][ T3854] EXT4-fs: Ignoring removed oldalloc option [ 33.957628][ T3854] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.976880][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.033708][ T3865] loop2: detected capacity change from 0 to 512 [ 34.043138][ T3865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.072125][ T3868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.110589][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.119954][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.141066][ T3865] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.176269][ T3884] loop0: detected capacity change from 0 to 164 [ 34.195862][ T3884] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 34.206623][ T3884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 34.249707][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.311298][ T3903] xt_hashlimit: size too large, truncated to 1048576 [ 34.320143][ T3900] loop0: detected capacity change from 0 to 512 [ 34.379925][ T3900] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 34.388552][ T3900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.400736][ T3900] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.193: Failed to acquire dquot type 1 [ 34.426399][ T3911] loop1: detected capacity change from 0 to 512 [ 34.447375][ T3900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 40: padding at end of block bitmap is not set [ 34.481030][ T3900] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 34.496974][ T3900] EXT4-fs (loop0): 1 truncate cleaned up [ 34.503188][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.517098][ T3911] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 34.525275][ T3911] System zones: 0-2, 18-18, 34-34 [ 34.534578][ T3911] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 34.535541][ T3900] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 34.549708][ T3911] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm +}[@: Failed to acquire dquot type 1 [ 34.574936][ T3911] EXT4-fs (loop1): 1 truncate cleaned up [ 34.585749][ T3922] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 34.585997][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.610917][ T3927] loop4: detected capacity change from 0 to 512 [ 34.621824][ T3927] EXT4-fs: Ignoring removed oldalloc option [ 34.625724][ T3911] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.643118][ T3927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.655441][ T3927] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.668648][ T3927] EXT4-fs (loop4): 1 truncate cleaned up [ 34.674577][ T3927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.709874][ T3927] EXT4-fs (loop4): shut down requested (2) [ 34.716346][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.741743][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.751182][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.821772][ T3939] netlink: 'syz.1.206': attribute type 3 has an invalid length. [ 34.947223][ T3952] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 34.977321][ T3952] team0: Device hsr_slave_0 failed to register rx_handler [ 35.006961][ T3962] loop3: detected capacity change from 0 to 128 [ 35.114382][ T3979] loop1: detected capacity change from 0 to 512 [ 35.132509][ T3979] ext2: Unknown parameter 'measure' [ 35.161415][ T3984] sg_write: process 102 (syz.4.228) changed security contexts after opening file descriptor, this is not allowed. [ 35.173774][ T3984] program syz.4.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.232271][ T3988] loop1: detected capacity change from 0 to 2048 [ 35.272485][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.288692][ T3988] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 35.318270][ T4003] loop3: detected capacity change from 0 to 1024 [ 35.329466][ T3988] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 3 with error 28 [ 35.341772][ T3988] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.341772][ T3988] [ 35.342302][ T4003] EXT4-fs: Ignoring removed nobh option [ 35.351454][ T3988] EXT4-fs (loop1): Total free blocks count 0 [ 35.351513][ T3988] EXT4-fs (loop1): Free/Dirty block details [ 35.351525][ T3988] EXT4-fs (loop1): free_blocks=66060288 [ 35.351538][ T3988] EXT4-fs (loop1): dirty_blocks=16 [ 35.379887][ T3988] EXT4-fs (loop1): Block reservation details [ 35.385919][ T3988] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 35.391451][ T4003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.418912][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.430902][ T4003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.464609][ T4012] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 35.526471][ T4023] capability: warning: `syz.4.244' uses deprecated v2 capabilities in a way that may be insecure [ 35.538058][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.552942][ T4021] xt_connbytes: Forcing CT accounting to be enabled [ 35.562280][ T4021] Cannot find add_set index 0 as target [ 35.596863][ T4029] delete_channel: no stack [ 35.607446][ T4029] delete_channel: no stack [ 35.655299][ T4041] loop1: detected capacity change from 0 to 128 [ 35.662064][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 35.690632][ T4041] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 35.745000][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 35.773084][ T4041] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 35.787692][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 35.787706][ T29] audit: type=1326 audit(1730796525.629:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.817198][ T29] audit: type=1326 audit(1730796525.629:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.840424][ T29] audit: type=1326 audit(1730796525.629:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.863749][ T29] audit: type=1326 audit(1730796525.629:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.878156][ T4057] netlink: 284 bytes leftover after parsing attributes in process `syz.3.260'. [ 35.887176][ T29] audit: type=1326 audit(1730796525.629:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.919309][ T29] audit: type=1326 audit(1730796525.629:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.942761][ T29] audit: type=1326 audit(1730796525.699:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.942822][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.966091][ T29] audit: type=1400 audit(1730796525.699:323): avc: denied { getopt } for pid=4031 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.966110][ T29] audit: type=1326 audit(1730796525.749:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 35.966283][ T29] audit: type=1326 audit(1730796525.749:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6601be719 code=0x7ffc0000 [ 36.053544][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.065345][ T3017] ================================================================== [ 36.073540][ T3017] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 36.080746][ T3017] [ 36.083062][ T3017] write to 0xffff888106d06b70 of 8 bytes by task 3761 on cpu 1: [ 36.090689][ T3017] dentry_unlink_inode+0x65/0x260 [ 36.095715][ T3017] d_delete+0x7d/0x100 [ 36.099781][ T3017] d_delete_notify+0x34/0x100 [ 36.104465][ T3017] vfs_unlink+0x320/0x430 [ 36.108796][ T3017] do_unlinkat+0x236/0x4c0 [ 36.113211][ T3017] __x64_sys_unlink+0x2e/0x40 [ 36.117891][ T3017] x64_sys_call+0x280f/0x2d60 [ 36.122566][ T3017] do_syscall_64+0xc9/0x1c0 [ 36.127084][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.133162][ T3017] [ 36.135484][ T3017] read to 0xffff888106d06b70 of 8 bytes by task 3017 on cpu 0: [ 36.143019][ T3017] step_into+0x123/0x810 [ 36.147256][ T3017] walk_component+0x169/0x230 [ 36.151981][ T3017] path_lookupat+0x10a/0x2b0 [ 36.156570][ T3017] filename_lookup+0x127/0x300 [ 36.161331][ T3017] do_readlinkat+0x89/0x210 [ 36.165830][ T3017] __x64_sys_readlink+0x47/0x60 [ 36.170675][ T3017] x64_sys_call+0x13c3/0x2d60 [ 36.175347][ T3017] do_syscall_64+0xc9/0x1c0 [ 36.179845][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.185739][ T3017] [ 36.188053][ T3017] value changed: 0xffff8881045a4c20 -> 0x0000000000000000 [ 36.195146][ T3017] [ 36.197471][ T3017] Reported by Kernel Concurrency Sanitizer on: [ 36.203616][ T3017] CPU: 0 UID: 0 PID: 3017 Comm: udevd Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 36.213845][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.223890][ T3017] ================================================================== [ 36.238357][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.258343][ T4062] loop0: detected capacity change from 0 to 512 [ 36.265030][ T4062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.281532][ T4062] EXT4-fs (loop0): 1 truncate cleaned up [ 36.289342][ T4062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.303516][ T4062] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.263: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 36.323971][ T4062] EXT4-fs (loop0): Remounting filesystem read-only [ 36.330564][ T4062] EXT4-fs warning (device loop0): ext4_rename_delete:3733: inode #2: comm syz.0.263: Deleting old file: nlink 4, error=-117 [ 36.851499][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.