last executing test programs: 18.328345562s ago: executing program 2 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 18.312728563s ago: executing program 2 (id=157): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6}) 18.290690903s ago: executing program 2 (id=158): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x15) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xa86, 0x2) 18.278406033s ago: executing program 2 (id=159): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 18.109700866s ago: executing program 2 (id=161): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002"], 0x0, 0x42}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 17.838200662s ago: executing program 2 (id=170): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=f']) 17.838077092s ago: executing program 32 (id=170): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=f']) 12.582284624s ago: executing program 3 (id=300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) close(r1) 12.518070255s ago: executing program 3 (id=302): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/45, 0x2d) getdents(r1, 0x0, 0x58) 12.423570387s ago: executing program 3 (id=308): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12.110062273s ago: executing program 3 (id=317): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 11.639417762s ago: executing program 3 (id=329): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 11.115313463s ago: executing program 3 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 11.115155783s ago: executing program 33 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 2.263192065s ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x141, 0xbd, 0x32, 0x7e, 0x20, 0xbed, 0x1100, 0x629a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x4c, 0x7, 0x0, 0xfd, 0x22, 0xcd}}]}}]}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.604498558s ago: executing program 0 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x3, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) 1.543209669s ago: executing program 0 (id=686): syz_emit_ethernet(0xae, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) 1.454819551s ago: executing program 0 (id=677): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) symlink(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000200)) 1.088391578s ago: executing program 5 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db15a23319e3f64fdf5f88b2078", 0x20}], 0x1}}], 0x1, 0x840) 985.33322ms ago: executing program 5 (id=701): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 946.352091ms ago: executing program 5 (id=704): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setrlimit(0x0, &(0x7f00000010c0)={0x2, 0x100}) setregid(0xee00, 0xee00) 856.947362ms ago: executing program 5 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op], 0x1) 798.491894ms ago: executing program 5 (id=711): r0 = syz_clone(0xac201300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) wait4(r0, 0xfffffffffffffffe, 0x80000000, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x2003516, 0x0, 0x0, 0x0, 0x0) 698.570516ms ago: executing program 0 (id=714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 672.227486ms ago: executing program 0 (id=716): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019}) finit_module(r2, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 516.522669ms ago: executing program 6 (id=720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 405.821942ms ago: executing program 1 (id=731): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 405.134961ms ago: executing program 6 (id=732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 301.796094ms ago: executing program 5 (id=722): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) clock_gettime(0x6, &(0x7f00000002c0)) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 301.655204ms ago: executing program 6 (id=723): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000000240)=0x0) io_destroy(r1) 290.270354ms ago: executing program 1 (id=724): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000800)={0x30, r3, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) 218.460625ms ago: executing program 1 (id=725): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x4048043) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 196.351806ms ago: executing program 4 (id=727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 193.317306ms ago: executing program 1 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x9}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 179.667496ms ago: executing program 6 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f00000018c0)="2c1775af1d", 0x5}], 0x2}, 0x0) 128.664467ms ago: executing program 1 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000340)="e7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 128.503527ms ago: executing program 6 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) close(r2) 128.380067ms ago: executing program 4 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 107.909627ms ago: executing program 4 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x1) 97.176537ms ago: executing program 6 (id=736): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78a", 0x48) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 56.939718ms ago: executing program 1 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 56.769288ms ago: executing program 4 (id=738): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000540)=r1}, 0x20) 30.382389ms ago: executing program 4 (id=739): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 0s ago: executing program 4 (id=740): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 24.619514][ T29] audit: type=1400 audit(1757102283.749:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.620485][ T3292] cgroup: Unknown subsys name 'net' [ 24.642245][ T29] audit: type=1400 audit(1757102283.749:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.669596][ T29] audit: type=1400 audit(1757102283.779:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.819876][ T3292] cgroup: Unknown subsys name 'cpuset' [ 24.825990][ T3292] cgroup: Unknown subsys name 'rlimit' [ 24.995752][ T29] audit: type=1400 audit(1757102284.119:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.019011][ T29] audit: type=1400 audit(1757102284.119:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.041624][ T29] audit: type=1400 audit(1757102284.119:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.049645][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.061990][ T29] audit: type=1400 audit(1757102284.119:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.090806][ T29] audit: type=1400 audit(1757102284.129:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.115596][ T29] audit: type=1400 audit(1757102284.129:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.121406][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.138866][ T29] audit: type=1400 audit(1757102284.209:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.608177][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.627357][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.645241][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.666700][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.738981][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.749831][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.757058][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.764403][ T3310] bridge_slave_0: entered allmulticast mode [ 26.770767][ T3310] bridge_slave_0: entered promiscuous mode [ 26.798196][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.805282][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.812400][ T3310] bridge_slave_1: entered allmulticast mode [ 26.818702][ T3310] bridge_slave_1: entered promiscuous mode [ 26.833303][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.840397][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.847491][ T3308] bridge_slave_0: entered allmulticast mode [ 26.853698][ T3308] bridge_slave_0: entered promiscuous mode [ 26.860059][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.867109][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.874368][ T3305] bridge_slave_0: entered allmulticast mode [ 26.880851][ T3305] bridge_slave_0: entered promiscuous mode [ 26.901352][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.908513][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.915735][ T3308] bridge_slave_1: entered allmulticast mode [ 26.922235][ T3308] bridge_slave_1: entered promiscuous mode [ 26.928524][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.935595][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.942884][ T3305] bridge_slave_1: entered allmulticast mode [ 26.949678][ T3305] bridge_slave_1: entered promiscuous mode [ 26.977032][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.984189][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.991868][ T3303] bridge_slave_0: entered allmulticast mode [ 26.998207][ T3303] bridge_slave_0: entered promiscuous mode [ 27.005506][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.022627][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.037103][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.051400][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.058453][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.065753][ T3303] bridge_slave_1: entered allmulticast mode [ 27.072425][ T3303] bridge_slave_1: entered promiscuous mode [ 27.081933][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.092408][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.117073][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.137024][ T3310] team0: Port device team_slave_0 added [ 27.153403][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.160493][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.167581][ T3302] bridge_slave_0: entered allmulticast mode [ 27.174080][ T3302] bridge_slave_0: entered promiscuous mode [ 27.186271][ T3310] team0: Port device team_slave_1 added [ 27.193102][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.212814][ T3305] team0: Port device team_slave_0 added [ 27.219339][ T3305] team0: Port device team_slave_1 added [ 27.225316][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.232378][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.239529][ T3302] bridge_slave_1: entered allmulticast mode [ 27.245776][ T3302] bridge_slave_1: entered promiscuous mode [ 27.252547][ T3308] team0: Port device team_slave_0 added [ 27.268543][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.275525][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.301615][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.313190][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.327260][ T3308] team0: Port device team_slave_1 added [ 27.337393][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.344426][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.370351][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.398701][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.409044][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.424484][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.431483][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.457428][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.468757][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.475833][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.501772][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.528730][ T3303] team0: Port device team_slave_0 added [ 27.535796][ T3303] team0: Port device team_slave_1 added [ 27.544051][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.551038][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.577208][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.588267][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.595274][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.621196][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.642212][ T3302] team0: Port device team_slave_0 added [ 27.668771][ T3310] hsr_slave_0: entered promiscuous mode [ 27.674803][ T3310] hsr_slave_1: entered promiscuous mode [ 27.682095][ T3302] team0: Port device team_slave_1 added [ 27.688755][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.695786][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.721713][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.734081][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.741058][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.767096][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.832324][ T3305] hsr_slave_0: entered promiscuous mode [ 27.839121][ T3305] hsr_slave_1: entered promiscuous mode [ 27.845930][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.851811][ T3305] Cannot create hsr debugfs directory [ 27.894412][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.901609][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.927879][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.940914][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.947958][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.974059][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.988813][ T3308] hsr_slave_0: entered promiscuous mode [ 27.995179][ T3308] hsr_slave_1: entered promiscuous mode [ 28.001483][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.007214][ T3308] Cannot create hsr debugfs directory [ 28.078185][ T3302] hsr_slave_0: entered promiscuous mode [ 28.084275][ T3302] hsr_slave_1: entered promiscuous mode [ 28.090143][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 28.095855][ T3302] Cannot create hsr debugfs directory [ 28.104010][ T3303] hsr_slave_0: entered promiscuous mode [ 28.110113][ T3303] hsr_slave_1: entered promiscuous mode [ 28.115960][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 28.121705][ T3303] Cannot create hsr debugfs directory [ 28.278050][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.290324][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.303514][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.317059][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.344312][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.354678][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.366279][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.382720][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.401966][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.411085][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.426810][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.435995][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.475797][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.485724][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.497358][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.506124][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.519748][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.528174][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.536712][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.547830][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.571438][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.582226][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.615293][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.633698][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.643841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.650900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.674021][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.682517][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.689589][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.707047][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.714194][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.723100][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.730143][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.749228][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.777005][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.784169][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.804279][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.813249][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.833726][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.840838][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.862726][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.876703][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.893189][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.900325][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.909992][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.917038][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.927565][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.952650][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.959745][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.975642][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.982753][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.005707][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.020616][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.054747][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.088463][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.098987][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.150764][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.182854][ T3305] veth0_vlan: entered promiscuous mode [ 29.189106][ T3310] veth0_vlan: entered promiscuous mode [ 29.210256][ T3305] veth1_vlan: entered promiscuous mode [ 29.230553][ T3310] veth1_vlan: entered promiscuous mode [ 29.245510][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.263122][ T3305] veth0_macvtap: entered promiscuous mode [ 29.278740][ T3308] veth0_vlan: entered promiscuous mode [ 29.289184][ T3310] veth0_macvtap: entered promiscuous mode [ 29.296692][ T3305] veth1_macvtap: entered promiscuous mode [ 29.305336][ T3308] veth1_vlan: entered promiscuous mode [ 29.319431][ T3310] veth1_macvtap: entered promiscuous mode [ 29.335994][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.350430][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.367722][ T3302] veth0_vlan: entered promiscuous mode [ 29.380074][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.388941][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.398626][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.411973][ T3308] veth0_macvtap: entered promiscuous mode [ 29.420330][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.428079][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.440986][ T3308] veth1_macvtap: entered promiscuous mode [ 29.449180][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.460153][ T3302] veth1_vlan: entered promiscuous mode [ 29.475999][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.488690][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.508836][ T3302] veth0_macvtap: entered promiscuous mode [ 29.517040][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528288][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.546006][ T3302] veth1_macvtap: entered promiscuous mode [ 29.554744][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.557485][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.581235][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.604853][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.620814][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.629710][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 29.629764][ T29] audit: type=1400 audit(1757102288.759:97): avc: denied { prog_load } for pid=3472 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.657151][ T29] audit: type=1400 audit(1757102288.759:98): avc: denied { perfmon } for pid=3472 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.678574][ T29] audit: type=1400 audit(1757102288.759:99): avc: denied { prog_run } for pid=3472 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.697610][ T29] audit: type=1400 audit(1757102288.789:100): avc: denied { write } for pid=3472 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.702924][ T3303] veth0_vlan: entered promiscuous mode [ 29.725962][ T3303] veth1_vlan: entered promiscuous mode [ 29.733758][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.741253][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.762763][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.781446][ T29] audit: type=1400 audit(1757102288.909:101): avc: denied { mount } for pid=3474 comm="syz.1.2" name="/" dev="ramfs" ino=4946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 29.813464][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.835444][ T3303] veth0_macvtap: entered promiscuous mode [ 29.859836][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.891084][ T3303] veth1_macvtap: entered promiscuous mode [ 29.907681][ T3486] loop2: detected capacity change from 0 to 512 [ 29.922213][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.946116][ T29] audit: type=1400 audit(1757102289.069:102): avc: denied { open } for pid=3488 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.969579][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.992625][ T29] audit: type=1400 audit(1757102289.089:103): avc: denied { read write } for pid=3492 comm="syz.0.11" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.004493][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.016278][ T29] audit: type=1400 audit(1757102289.089:104): avc: denied { open } for pid=3492 comm="syz.0.11" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.039652][ T3439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.052051][ T29] audit: type=1400 audit(1757102289.119:105): avc: denied { ioctl } for pid=3492 comm="syz.0.11" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.052080][ T29] audit: type=1400 audit(1757102289.119:106): avc: denied { create } for pid=3492 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.070943][ T3486] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.091810][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.139593][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.163307][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.183376][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.197946][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.211444][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.219813][ T3486] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3: corrupted inode contents [ 30.245365][ T3509] loop3: detected capacity change from 0 to 128 [ 30.255321][ T3486] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3: mark_inode_dirty error [ 30.269910][ T3509] EXT4-fs: Ignoring removed nobh option [ 30.277685][ T3486] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3: corrupted inode contents [ 30.291365][ T3509] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.312438][ T3486] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3: mark_inode_dirty error [ 30.325506][ T3509] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.383538][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.384399][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.540084][ T3541] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.542394][ T3540] loop4: detected capacity change from 0 to 1024 [ 30.559073][ T3540] ext4: Bad value for 'max_dir_size_kb' [ 30.652951][ T3546] loop1: detected capacity change from 0 to 764 [ 30.773393][ T3551] syz.1.26 (3551) used greatest stack depth: 10800 bytes left [ 30.828572][ T3558] loop4: detected capacity change from 0 to 1024 [ 30.848252][ T3560] random: crng reseeded on system resumption [ 30.902661][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.990971][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.045395][ T3577] loop1: detected capacity change from 0 to 128 [ 31.058297][ T3579] netlink: 'syz.0.38': attribute type 6 has an invalid length. [ 31.086265][ T3582] mmap: syz.4.39 (3582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.087279][ T3577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.105967][ T3577] FAT-fs (loop1): Filesystem has been set read-only [ 31.126745][ T3577] syz.1.37: attempt to access beyond end of device [ 31.126745][ T3577] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 31.140609][ T3577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.148521][ T3577] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 31.159334][ T3577] syz.1.37: attempt to access beyond end of device [ 31.159334][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.192505][ T3585] syz.1.37: attempt to access beyond end of device [ 31.192505][ T3585] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.212309][ T3577] syz.1.37: attempt to access beyond end of device [ 31.212309][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.271027][ T3585] syz.1.37: attempt to access beyond end of device [ 31.271027][ T3585] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.303591][ T3577] syz.1.37: attempt to access beyond end of device [ 31.303591][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.317525][ T3577] syz.1.37: attempt to access beyond end of device [ 31.317525][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.331868][ T3577] syz.1.37: attempt to access beyond end of device [ 31.331868][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.345402][ T3577] syz.1.37: attempt to access beyond end of device [ 31.345402][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.403626][ T3577] syz.1.37: attempt to access beyond end of device [ 31.403626][ T3577] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.418413][ T3592] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 31.449751][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 31.461429][ T3594] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 31.490896][ T3598] loop0: detected capacity change from 0 to 512 [ 31.499101][ T3600] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 31.525832][ T3598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.581093][ T3604] netlink: 'syz.2.48': attribute type 3 has an invalid length. [ 31.608248][ T3596] syz.4.45 (3596) used greatest stack depth: 10176 bytes left [ 31.620486][ T3598] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.672085][ T3609] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 31.697320][ T3609] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 31.707559][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.923568][ T3632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.62'. [ 31.932501][ T3632] netem: unknown loss type 13 [ 31.937175][ T3632] netem: change failed [ 31.992519][ T3636] pim6reg: entered allmulticast mode [ 32.093282][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.102136][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.110994][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.125228][ T3657] netlink: 'syz.1.72': attribute type 2 has an invalid length. [ 32.132432][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.132858][ T3657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.141628][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.159168][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.164602][ T3657] Zero length message leads to an empty skb [ 32.288281][ T3666] loop1: detected capacity change from 0 to 256 [ 32.306566][ T3666] msdos: Bad value for 'fmask' [ 32.331356][ T3654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.447354][ T3688] SELinux: Context is not valid (left unmapped). [ 32.466507][ T3685] SELinux: security policydb version 17 (MLS) not backwards compatible [ 32.478182][ T3686] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET) [ 32.502838][ T3685] SELinux: failed to load policy [ 32.530374][ T3696] SELinux: security policydb version 17 (MLS) not backwards compatible [ 32.551368][ T3696] SELinux: failed to load policy [ 32.622753][ T3710] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 33.004518][ T3502] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 33.174382][ T3763] syz.3.119 (3763) used greatest stack depth: 9384 bytes left [ 33.227024][ T3781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.256343][ T3783] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 33.596518][ T3830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.633803][ T3830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.713558][ T3830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.743914][ T3850] loop2: detected capacity change from 0 to 512 [ 33.754726][ T3830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.782129][ T3850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.795445][ T3850] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.815511][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.836411][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.854991][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.873549][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.917703][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.918650][ T3855] loop0: detected capacity change from 0 to 512 [ 33.934443][ T3855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.947647][ T3855] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.959163][ T3855] EXT4-fs (loop0): 1 truncate cleaned up [ 33.966025][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.979168][ T3855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.011637][ T3858] process 'syz.4.162' launched '/dev/fd/3' with NULL argv: empty string added [ 34.087707][ T3870] loop9: detected capacity change from 0 to 7 [ 34.095361][ T3870] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.106364][ T3870] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.114641][ T3870] loop9: unable to read partition table [ 34.121157][ T3870] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 34.121157][ T3870] ) failed (rc=-5) [ 34.135325][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.143519][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.160498][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.168446][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.183685][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.195032][ T3439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.256301][ T3439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.311857][ T3439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.362878][ T3439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.447399][ T3878] chnl_net:caif_netlink_parms(): no params data found [ 34.485971][ T3910] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 34.488508][ T3905] IPVS: stopping master sync thread 3910 ... [ 34.504306][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ba52a00: rx timeout, send abort [ 34.513181][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ba52a00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.556504][ T3439] bridge_slave_1: left allmulticast mode [ 34.562220][ T3439] bridge_slave_1: left promiscuous mode [ 34.567921][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.602666][ T3439] bridge_slave_0: left allmulticast mode [ 34.608372][ T3439] bridge_slave_0: left promiscuous mode [ 34.614322][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.688184][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 34.688197][ T29] audit: type=1400 audit(1757102293.809:418): avc: denied { add_name } for pid=3914 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.716826][ T29] audit: type=1400 audit(1757102293.809:419): avc: denied { create } for pid=3914 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.743728][ T29] audit: type=1400 audit(1757102293.869:420): avc: denied { write } for pid=3914 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.770127][ T29] audit: type=1400 audit(1757102293.869:421): avc: denied { append } for pid=3914 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.806080][ T29] audit: type=1326 audit(1757102293.929:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c363ebe9 code=0x7ffc0000 [ 34.829015][ T29] audit: type=1326 audit(1757102293.929:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c363ebe9 code=0x7ffc0000 [ 34.851896][ T29] audit: type=1400 audit(1757102293.929:424): avc: denied { remove_name } for pid=3941 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.875283][ T29] audit: type=1400 audit(1757102293.929:425): avc: denied { unlink } for pid=3941 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.902534][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.918509][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.933818][ T3439] bond0 (unregistering): Released all slaves [ 34.969248][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.976433][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.988125][ T3367] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 34.988669][ T29] audit: type=1400 audit(1757102294.109:426): avc: denied { read write } for pid=3952 comm="+}[@" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.996325][ T3367] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 35.018815][ T29] audit: type=1400 audit(1757102294.109:427): avc: denied { open } for pid=3952 comm="+}[@" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.025431][ T3878] bridge_slave_0: entered allmulticast mode [ 35.055515][ T3367] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 35.061870][ T3878] bridge_slave_0: entered promiscuous mode [ 35.070513][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.077610][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.080411][ T3367] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.099050][ T3878] bridge_slave_1: entered allmulticast mode [ 35.106004][ T3878] bridge_slave_1: entered promiscuous mode [ 35.118618][ T3439] hsr_slave_0: left promiscuous mode [ 35.124544][ T3439] hsr_slave_1: left promiscuous mode [ 35.134206][ T3959] binfmt_misc: register: failed to install interpreter file ./file0 [ 35.140385][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.149832][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.157682][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.165148][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.181418][ T3439] veth1_macvtap: left promiscuous mode [ 35.186988][ T3439] veth0_macvtap: left promiscuous mode [ 35.193369][ T3439] veth1_vlan: left promiscuous mode [ 35.193903][ T3957] fido_id[3957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.199075][ T3439] veth0_vlan: left promiscuous mode [ 35.225122][ T3963] loop1: detected capacity change from 0 to 128 [ 35.299340][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.315534][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 35.325023][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.344130][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 35.400249][ T3974] : renamed from bond0 (while UP) [ 35.423463][ T3878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.441664][ T3384] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 35.449279][ T3384] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 35.456670][ T3384] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 35.459781][ T3878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.469889][ T3384] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 35.506615][ T3987] fido_id[3987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.525564][ T3878] team0: Port device team_slave_0 added [ 35.533525][ T3989] loop3: detected capacity change from 0 to 8192 [ 35.533865][ T3878] team0: Port device team_slave_1 added [ 35.573752][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.580769][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.606687][ T3878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.618608][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.625611][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.652001][ T3878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.680419][ T3878] hsr_slave_0: entered promiscuous mode [ 35.687243][ T3986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.695813][ T3986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.706293][ T3878] hsr_slave_1: entered promiscuous mode [ 35.712557][ T3878] debugfs: 'hsr0' already exists in 'hsr' [ 35.718302][ T3878] Cannot create hsr debugfs directory [ 35.794832][ T3878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.804854][ T3878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.813984][ T3878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.823833][ T3878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.880415][ T3878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.893227][ T4001] loop1: detected capacity change from 0 to 512 [ 35.900806][ T4001] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 35.910783][ T4001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 35.918728][ T4001] System zones: 1-12 [ 35.924866][ T4001] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.210: corrupted in-inode xattr: e_value size too large [ 35.940519][ T4001] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.210: couldn't read orphan inode 15 (err -117) [ 35.954203][ T4001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.970335][ T3878] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.980960][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.988045][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.012887][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.020148][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.029320][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.038540][ T3878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.048934][ T3878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.151686][ T3878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.223790][ T4025] loop4: detected capacity change from 0 to 128 [ 36.304240][ T3878] veth0_vlan: entered promiscuous mode [ 36.312200][ T3878] veth1_vlan: entered promiscuous mode [ 36.327138][ T3878] veth0_macvtap: entered promiscuous mode [ 36.335202][ T3878] veth1_macvtap: entered promiscuous mode [ 36.346639][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.359715][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.371269][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.380497][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.399697][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.413397][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.569087][ T4051] loop5: detected capacity change from 0 to 512 [ 36.576088][ T4051] journal_path: Non-blockdev passed as './bus' [ 36.582349][ T4051] EXT4-fs: error: could not find journal device path [ 36.606111][ T4053] loop5: detected capacity change from 0 to 512 [ 36.614505][ T4053] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 36.631863][ T4053] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.645360][ T4053] EXT4-fs (loop5): 1 truncate cleaned up [ 36.652933][ T4053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.731285][ T3878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.271309][ T4081] loop5: detected capacity change from 0 to 128 [ 37.281412][ T4081] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.293907][ T4081] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.347081][ T3878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.718416][ T4119] macvtap0: refused to change device tx_queue_len [ 38.073416][ T4137] hub 2-0:1.0: USB hub found [ 38.078150][ T4137] hub 2-0:1.0: 8 ports detected [ 38.460310][ T4187] loop0: detected capacity change from 0 to 1024 [ 38.481874][ T4187] ======================================================= [ 38.481874][ T4187] WARNING: The mand mount option has been deprecated and [ 38.481874][ T4187] and is ignored by this kernel. Remove the mand [ 38.481874][ T4187] option from the mount to silence this warning. [ 38.481874][ T4187] ======================================================= [ 38.561368][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.781388][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.951581][ T4243] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.987318][ T4243] FAT-fs (loop1): unable to read boot sector [ 39.233158][ T4217] netlink: 'syz.4.285': attribute type 13 has an invalid length. [ 39.245680][ T4217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.569344][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 39.577062][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 39.618186][ T4294] netlink: 'syz.1.309': attribute type 5 has an invalid length. [ 39.623657][ T3367] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 39.646056][ T3367] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.669374][ T4294] batman_adv: batadv0: Adding interface: vxlan0 [ 39.675697][ T4294] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.702432][ T4298] __nla_validate_parse: 22 callbacks suppressed [ 39.702447][ T4298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 39.707434][ T4299] fido_id[4299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.711043][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 39.711057][ T29] audit: type=1400 audit(1757102298.829:579): avc: denied { write } for pid=4297 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.731027][ T4294] batman_adv: batadv0: Interface activated: vxlan0 [ 39.731230][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.737179][ T29] audit: type=1400 audit(1757102298.829:580): avc: denied { nlmsg_write } for pid=4297 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.818428][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.837378][ T4305] loop5: detected capacity change from 0 to 4096 [ 39.870030][ T4305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.911093][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.920720][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.941851][ T4317] loop3: detected capacity change from 0 to 512 [ 39.950610][ T4317] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.953240][ T3878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.971927][ T4317] EXT4-fs (loop3): invalid journal inode [ 39.977784][ T29] audit: type=1400 audit(1757102299.099:581): avc: denied { watch watch_reads } for pid=4319 comm="syz.0.319" path="/68" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.978233][ T4317] EXT4-fs (loop3): can't get journal size [ 40.018523][ T4317] EXT4-fs (loop3): 1 truncate cleaned up [ 40.025577][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.027850][ T4323] capability: warning: `' uses deprecated v2 capabilities in a way that may be insecure [ 40.064173][ T29] audit: type=1400 audit(1757102299.189:582): avc: denied { mounton } for pid=4316 comm="syz.3.317" path="/64/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.116220][ T29] audit: type=1400 audit(1757102299.229:583): avc: denied { sqpoll } for pid=4324 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.119359][ T4317] loop3: detected capacity change from 512 to 0 [ 40.155822][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 40.165199][ C1] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 40.176361][ T4330] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.317: reading directory lblock 0 [ 40.194488][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 40.194553][ T4337] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.210628][ T29] audit: type=1400 audit(1757102299.319:584): avc: denied { create } for pid=4336 comm="syz.5.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.230677][ T29] audit: type=1400 audit(1757102299.319:585): avc: denied { write } for pid=4336 comm="syz.5.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.252078][ T4337] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.252743][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 40.268774][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 40.278241][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.286518][ T4330] EXT4-fs (loop3): I/O error while writing superblock [ 40.359766][ T4342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 40.375005][ C1] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 40.384679][ T3310] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 40.405517][ C1] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 40.415139][ C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 40.425720][ T3310] EXT4-fs error (device loop3): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 40.426975][ T29] audit: type=1400 audit(1757102299.549:586): avc: denied { mounton } for pid=4345 comm="syz.1.330" path="/58/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.440128][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 40.470431][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 40.479905][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.492023][ T3310] EXT4-fs (loop3): I/O error while writing superblock [ 40.498943][ T3310] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: IO failure [ 40.520422][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 40.530070][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.539099][ T3310] EXT4-fs (loop3): I/O error while writing superblock [ 40.546065][ T3310] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 40.561947][ T29] audit: type=1326 audit(1757102299.689:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2b86ebe9 code=0x7ffc0000 [ 40.585581][ T29] audit: type=1326 audit(1757102299.689:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2b86ebe9 code=0x7ffc0000 [ 40.609895][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.618218][ T3310] EXT4-fs (loop3): I/O error while writing superblock [ 40.644410][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:1: unable to read itable block [ 40.668758][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.687635][ T31] EXT4-fs (loop3): I/O error while writing superblock [ 40.696610][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.707090][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 40.716560][ T3310] EXT4-fs (loop3): I/O error while writing superblock [ 40.785139][ T4353] SELinux: ebitmap start bit (1952802677) is not a multiple of the map unit size (64) [ 40.795716][ T4353] SELinux: failed to load policy [ 40.880552][ T391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.926699][ T391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.994028][ T391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.036633][ T391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.121113][ T391] bridge_slave_1: left allmulticast mode [ 41.127008][ T391] bridge_slave_1: left promiscuous mode [ 41.132927][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.160868][ T391] bridge_slave_0: left allmulticast mode [ 41.166549][ T391] bridge_slave_0: left promiscuous mode [ 41.172270][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.253094][ T391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.264885][ T391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.279359][ T391] bond0 (unregistering): Released all slaves [ 41.339528][ T391] hsr_slave_0: left promiscuous mode [ 41.348474][ T391] hsr_slave_1: left promiscuous mode [ 41.366299][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.373828][ T391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.420388][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.427832][ T391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.463018][ T391] veth1_macvtap: left promiscuous mode [ 41.471067][ T391] veth0_macvtap: left promiscuous mode [ 41.476601][ T391] veth1_vlan: left promiscuous mode [ 41.482431][ T391] veth0_vlan: left promiscuous mode [ 41.546996][ T391] team0 (unregistering): Port device team_slave_1 removed [ 41.561557][ T391] team0 (unregistering): Port device team_slave_0 removed [ 41.577979][ T4427] loop5: detected capacity change from 0 to 164 [ 41.588760][ T4427] ISOFS: unable to read i-node block [ 41.594261][ T4427] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 41.611560][ T4415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'. [ 41.646787][ T4429] bond0: entered promiscuous mode [ 41.651905][ T4429] bond0: entered allmulticast mode [ 41.675446][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.685949][ T4429] bond0 (unregistering): Released all slaves [ 41.721952][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 41.744485][ T4444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.770753][ T4444] wireguard0: entered promiscuous mode [ 41.776314][ T4444] wireguard0: entered allmulticast mode [ 41.836285][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.843468][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.862984][ T4369] bridge_slave_0: entered allmulticast mode [ 41.870990][ T4369] bridge_slave_0: entered promiscuous mode [ 41.877708][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.884874][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.898804][ T4369] bridge_slave_1: entered allmulticast mode [ 41.905635][ T4369] bridge_slave_1: entered promiscuous mode [ 41.937205][ T4470] syz.4.368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.939167][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.958137][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.008219][ T4369] team0: Port device team_slave_0 added [ 42.016777][ T4369] team0: Port device team_slave_1 added [ 42.038022][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.045029][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.070991][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.132469][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.139604][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.165641][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.238408][ T4369] hsr_slave_0: entered promiscuous mode [ 42.246222][ T4369] hsr_slave_1: entered promiscuous mode [ 42.425517][ T4369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.442391][ T4369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.453692][ T4369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.464775][ T4525] netlink: 96 bytes leftover after parsing attributes in process `syz.4.388'. [ 42.483021][ T4369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.561644][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.568725][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.576114][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.583174][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.655450][ T4560] loop4: detected capacity change from 0 to 128 [ 42.672816][ T4560] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 42.742371][ T4560] FAT-fs (loop4): FAT read failed (blocknr 128) [ 42.749137][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.753933][ T4568] loop0: detected capacity change from 0 to 512 [ 42.771075][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 42.791490][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.802735][ T4568] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.813813][ T4575] FAT-fs (loop11): unable to read boot sector [ 42.820331][ T4568] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.403: bad orphan inode 13 [ 42.830832][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.838232][ T4568] ext4_test_bit(bit=12, block=18) = 1 [ 42.843699][ T4568] is_bad_inode(inode)=0 [ 42.847884][ T4568] NEXT_ORPHAN(inode)=2130706432 [ 42.852830][ T4568] max_ino=32 [ 42.856058][ T4568] i_nlink=1 [ 42.865898][ T4568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.879116][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.889373][ T4568] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.926092][ T4570] bridge_slave_1: left allmulticast mode [ 42.931873][ T4570] bridge_slave_1: left promiscuous mode [ 42.937576][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.941461][ T4568] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.954865][ T4570] bridge_slave_0: left allmulticast mode [ 42.960672][ T4570] bridge_slave_0: left promiscuous mode [ 42.966399][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.982895][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.020666][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.027755][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.041506][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.048604][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.097264][ T4369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.107708][ T4369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.162915][ T4600] loop1: detected capacity change from 0 to 1024 [ 43.194514][ T4600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.243353][ T4600] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 43.281780][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.307775][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.435400][ T4628] SELinux: failed to load policy [ 43.487161][ T4369] veth0_vlan: entered promiscuous mode [ 43.496263][ T4369] veth1_vlan: entered promiscuous mode [ 43.517055][ T4369] veth0_macvtap: entered promiscuous mode [ 43.531009][ T4369] veth1_macvtap: entered promiscuous mode [ 43.551737][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.564915][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.586809][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.601749][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.612143][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.630000][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.768559][ T4656] netlink: 'syz.6.423': attribute type 3 has an invalid length. [ 43.848511][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 44.120166][ T4686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.437'. [ 44.212622][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 44.324727][ T4706] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 44.343929][ T4708] loop0: detected capacity change from 0 to 164 [ 44.373442][ T4708] rock: directory entry would overflow storage [ 44.379701][ T4708] rock: sig=0x66, size=4, remaining=3 [ 44.384913][ T4710] loop6: detected capacity change from 0 to 128 [ 44.408402][ T4708] rock: directory entry would overflow storage [ 44.414682][ T4708] rock: sig=0x66, size=4, remaining=3 [ 44.437250][ T4715] ALSA: seq fatal error: cannot create timer (-22) [ 44.477905][ T4708] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.557122][ T4722] loop0: detected capacity change from 0 to 1024 [ 44.577252][ T4722] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.726586][ T4744] serio: Serial port ptm0 [ 44.853328][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 44.853342][ T29] audit: type=1326 audit(1757102303.979:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 44.897662][ T29] audit: type=1326 audit(1757102304.009:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 44.921078][ T29] audit: type=1326 audit(1757102304.009:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 44.944317][ T29] audit: type=1326 audit(1757102304.009:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 44.967582][ T29] audit: type=1326 audit(1757102304.009:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 44.990832][ T29] audit: type=1326 audit(1757102304.009:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 45.014119][ T29] audit: type=1326 audit(1757102304.009:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 45.037492][ T29] audit: type=1326 audit(1757102304.009:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 45.060835][ T29] audit: type=1326 audit(1757102304.009:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 45.084591][ T29] audit: type=1326 audit(1757102304.009:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d1f4ebe9 code=0x7ffc0000 [ 45.191028][ T4779] __nla_validate_parse: 3 callbacks suppressed [ 45.191043][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.481'. [ 45.249065][ T4786] loop5: detected capacity change from 0 to 1024 [ 45.256861][ T4786] EXT4-fs: Ignoring removed orlov option [ 45.262648][ T4786] ext4: Unknown parameter 'nouser_xattr' [ 45.599975][ T4797] macvtap0: refused to change device tx_queue_len [ 45.974754][ T4840] netlink: 32 bytes leftover after parsing attributes in process `syz.6.508'. [ 45.983685][ T4840] netem: unknown loss type 13 [ 45.988406][ T4840] netem: change failed [ 46.136555][ T4858] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.136555][ T4858] program syz.1.517 not setting count and/or reply_len properly [ 46.249252][ T4864] capability: warning: `syz.1.519' uses 32-bit capabilities (legacy support in use) [ 46.295133][ T4865] 9pnet: Could not find request transport: 0xffffffffffffffff [ 46.561899][ T4893] loop1: detected capacity change from 0 to 128 [ 46.591369][ T4893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.706852][ T4893] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.766203][ T4893] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.533: bg 0: bad block bitmap checksum [ 46.854883][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.352397][ T4966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.564'. [ 47.557453][ T4988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.740884][ T31] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 47.955760][ T5020] ipvlan2: entered promiscuous mode [ 47.972147][ T5020] bridge0: port 3(ipvlan2) entered blocking state [ 47.978703][ T5020] bridge0: port 3(ipvlan2) entered disabled state [ 47.988496][ T5020] ipvlan2: entered allmulticast mode [ 47.993889][ T5020] bridge0: entered allmulticast mode [ 48.003482][ T5020] ipvlan2: left allmulticast mode [ 48.005525][ T5027] loop1: detected capacity change from 0 to 512 [ 48.008631][ T5020] bridge0: left allmulticast mode [ 48.021762][ T5027] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.028577][ T5027] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.040031][ T5028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'. [ 48.046913][ T5027] EXT4-fs (loop1): 1 truncate cleaned up [ 48.055665][ T5027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.574980][ T5059] loop4: detected capacity change from 0 to 512 [ 48.596943][ T5059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.615650][ T5059] EXT4-fs (loop4): 1 truncate cleaned up [ 48.621821][ T5059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.642997][ T5067] loop5: detected capacity change from 0 to 256 [ 48.652940][ T5067] msdos: Bad value for 'fmask' [ 48.692316][ T5059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.717827][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 48.726843][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 48.735788][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 48.785335][ T5077] loop9: detected capacity change from 0 to 7 [ 48.792119][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.800390][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.808245][ T3293] loop9: unable to read partition table [ 48.814449][ T5077] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.822666][ T5077] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.830548][ T5077] loop9: unable to read partition table [ 48.841025][ T5077] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.841025][ T5077] ) failed (rc=-5) [ 48.854638][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.863366][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.871370][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.880911][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.888866][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.894711][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 48.905655][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 48.914584][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 49.055004][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.282343][ T3384] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 49.290185][ T3384] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 49.298783][ T3384] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 49.314649][ T3384] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 49.330286][ T5132] loop4: detected capacity change from 0 to 128 [ 49.443551][ T5150] SELinux: security policydb version 17 (MLS) not backwards compatible [ 49.459894][ T5150] SELinux: failed to load policy [ 49.563963][ T5169] : renamed from bond0 (while UP) [ 49.574775][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 49.582273][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 49.589703][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 49.612651][ T10] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.652899][ T5179] fido_id[5179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.686893][ T5186] SELinux: security policydb version 17 (MLS) not backwards compatible [ 49.713019][ T5186] SELinux: failed to load policy [ 49.757464][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.777172][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.804270][ T5200] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 49.953113][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 49.953127][ T29] audit: type=1326 audit(1757102315.079:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 49.984173][ T29] audit: type=1326 audit(1757102315.079:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.007451][ T29] audit: type=1326 audit(1757102315.079:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.030809][ T29] audit: type=1326 audit(1757102315.079:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.054015][ T29] audit: type=1326 audit(1757102315.079:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.077294][ T29] audit: type=1326 audit(1757102315.079:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.100639][ T29] audit: type=1326 audit(1757102315.079:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.131687][ T5214] loop4: detected capacity change from 0 to 512 [ 50.147166][ T29] audit: type=1326 audit(1757102315.209:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.170441][ T29] audit: type=1326 audit(1757102315.209:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.193796][ T29] audit: type=1326 audit(1757102315.209:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426649ebe9 code=0x7ffc0000 [ 50.217185][ T5214] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 50.243202][ T5214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 50.264938][ T5214] System zones: 1-12 [ 50.297911][ T5214] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.665: corrupted in-inode xattr: e_value size too large [ 50.338575][ T5214] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.665: couldn't read orphan inode 15 (err -117) [ 50.379945][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.417550][ T5253] loop1: detected capacity change from 0 to 128 [ 50.473091][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.769111][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.778588][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.779154][ T3439] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 51.162963][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 51.222747][ T5360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.285245][ T5360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.382490][ T5360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.406196][ T5379] __nla_validate_parse: 18 callbacks suppressed [ 51.406211][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.718'. [ 51.441188][ T5360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.519275][ T391] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.551562][ T391] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.567662][ T391] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.586095][ T391] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.619807][ T5388] loop1: detected capacity change from 0 to 128 [ 51.649906][ T5388] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.663677][ T5388] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.696780][ T391] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 51.724192][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.826555][ T5409] loop9: detected capacity change from 0 to 7 [ 51.834918][ T5409] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.844390][ T5409] loop9: unable to read partition table [ 51.851235][ T5409] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.851235][ T5409] ) failed (rc=-5) [ 51.905361][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.730'. [ 51.930234][ T5424] loop6: detected capacity change from 0 to 512 [ 51.938984][ T5424] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.945825][ T5424] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 51.974905][ T5424] EXT4-fs (loop6): 1 truncate cleaned up [ 51.982252][ T5424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.026222][ T5434] loop4: detected capacity change from 0 to 512 [ 52.034427][ T5434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.047905][ T5434] EXT4-fs (loop4): 1 truncate cleaned up [ 52.054201][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.120472][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.611563][ T5436] ================================================================== [ 52.619693][ T5436] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 52.627525][ T5436] [ 52.629852][ T5436] write to 0xffffea0004aee918 of 8 bytes by task 5424 on cpu 1: [ 52.637482][ T5436] __filemap_remove_folio+0x1a5/0x2a0 [ 52.642863][ T5436] folio_unmap_invalidate+0x1dd/0x360 [ 52.648247][ T5436] invalidate_inode_pages2_range+0x27c/0x3d0 [ 52.654270][ T5436] filemap_invalidate_pages+0x16d/0x1a0 [ 52.659815][ T5436] kiocb_invalidate_pages+0x6e/0x80 [ 52.665023][ T5436] __iomap_dio_rw+0x5d4/0x1250 [ 52.669885][ T5436] iomap_dio_rw+0x40/0x90 [ 52.674215][ T5436] ext4_file_write_iter+0xad9/0xf00 [ 52.679423][ T5436] iter_file_splice_write+0x663/0xa60 [ 52.684794][ T5436] direct_splice_actor+0x153/0x2a0 [ 52.689908][ T5436] splice_direct_to_actor+0x30f/0x680 [ 52.695282][ T5436] do_splice_direct+0xda/0x150 [ 52.700048][ T5436] do_sendfile+0x380/0x650 [ 52.704469][ T5436] __x64_sys_sendfile64+0x105/0x150 [ 52.709678][ T5436] x64_sys_call+0x2bb0/0x2ff0 [ 52.714362][ T5436] do_syscall_64+0xd2/0x200 [ 52.718883][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.724788][ T5436] [ 52.727107][ T5436] read to 0xffffea0004aee918 of 8 bytes by task 5436 on cpu 0: [ 52.734667][ T5436] folio_mapping+0xa1/0x120 [ 52.739183][ T5436] folio_wait_writeback+0x43/0x140 [ 52.744529][ T5436] file_write_and_wait_range+0x20b/0x2c0 [ 52.750190][ T5436] generic_buffers_fsync_noflush+0x45/0x120 [ 52.756099][ T5436] ext4_sync_file+0x1ab/0x690 [ 52.760782][ T5436] vfs_fsync_range+0x10d/0x130 [ 52.765557][ T5436] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.771123][ T5436] ext4_file_write_iter+0xdbf/0xf00 [ 52.776347][ T5436] iter_file_splice_write+0x663/0xa60 [ 52.781725][ T5436] direct_splice_actor+0x153/0x2a0 [ 52.786841][ T5436] splice_direct_to_actor+0x30f/0x680 [ 52.792216][ T5436] do_splice_direct+0xda/0x150 [ 52.796979][ T5436] do_sendfile+0x380/0x650 [ 52.801403][ T5436] __x64_sys_sendfile64+0x105/0x150 [ 52.806630][ T5436] x64_sys_call+0x2bb0/0x2ff0 [ 52.811313][ T5436] do_syscall_64+0xd2/0x200 [ 52.815830][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.821727][ T5436] [ 52.824042][ T5436] value changed: 0xffff88811a0ba998 -> 0x0000000000000000 [ 52.831147][ T5436] [ 52.833471][ T5436] Reported by Kernel Concurrency Sanitizer on: [ 52.839631][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.6.736 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.849270][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.859330][ T5436] ================================================================== [ 52.955518][ T4369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.