last executing test programs: 1.439247109s ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.292288961s ago: executing program 0 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.266651372s ago: executing program 0 (id=475): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffe, @mcast2, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1c) 1.187845783s ago: executing program 0 (id=478): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 1.072167654s ago: executing program 2 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 988.888805ms ago: executing program 2 (id=481): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) 984.782656ms ago: executing program 1 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 921.030176ms ago: executing program 1 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 846.237987ms ago: executing program 3 (id=485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 760.146269ms ago: executing program 3 (id=486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@block_validity}, {@dioread_lock}, {@usrquota}, {@abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) fallocate(r0, 0x10, 0x2, 0x7000000) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 759.423529ms ago: executing program 1 (id=487): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 741.270799ms ago: executing program 2 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 636.035531ms ago: executing program 1 (id=490): r0 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 632.078771ms ago: executing program 2 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x0, 0x238, 0x2d8, 0x138, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 610.677011ms ago: executing program 3 (id=491): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x123c, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 585.600332ms ago: executing program 1 (id=495): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 530.938912ms ago: executing program 1 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 522.174002ms ago: executing program 2 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 458.067393ms ago: executing program 2 (id=502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 287.143376ms ago: executing program 0 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 286.543566ms ago: executing program 4 (id=514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x8}, 0x90) 253.307006ms ago: executing program 3 (id=505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000017000000b7080000000000005b8af8ff00000000bfa200000000000007020000f8ffffff5444000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 218.609787ms ago: executing program 4 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 215.666937ms ago: executing program 0 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@block_validity}, {@dioread_lock}, {@usrquota}, {@abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) fallocate(r0, 0x10, 0x2, 0x7000000) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 136.533868ms ago: executing program 4 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) 127.729838ms ago: executing program 4 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 98.369328ms ago: executing program 3 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 91.901219ms ago: executing program 4 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 316.08µs ago: executing program 3 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x800}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0) 0s ago: executing program 4 (id=513): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 21.629111][ T29] audit: type=1400 audit(1746205494.285:81): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 27.924946][ T29] audit: type=1400 audit(1746205500.585:82): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.926010][ T3292] cgroup: Unknown subsys name 'net' [ 27.947676][ T29] audit: type=1400 audit(1746205500.585:83): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.975074][ T29] audit: type=1400 audit(1746205500.615:84): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.134573][ T3292] cgroup: Unknown subsys name 'cpuset' [ 28.140767][ T3292] cgroup: Unknown subsys name 'rlimit' [ 28.251994][ T29] audit: type=1400 audit(1746205500.905:85): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.275437][ T29] audit: type=1400 audit(1746205500.905:86): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.296312][ T29] audit: type=1400 audit(1746205500.905:87): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.309567][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.316946][ T29] audit: type=1400 audit(1746205500.905:88): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.345858][ T29] audit: type=1400 audit(1746205500.915:89): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.370726][ T29] audit: type=1400 audit(1746205500.915:90): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.393987][ T29] audit: type=1400 audit(1746205500.985:91): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.418895][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.526169][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.615265][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.622445][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.629820][ T3302] bridge_slave_0: entered allmulticast mode [ 29.636364][ T3302] bridge_slave_0: entered promiscuous mode [ 29.647527][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.654842][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.662095][ T3302] bridge_slave_1: entered allmulticast mode [ 29.668849][ T3302] bridge_slave_1: entered promiscuous mode [ 29.675008][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.723992][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.738673][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.757611][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.766584][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 29.788443][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.802544][ T3302] team0: Port device team_slave_0 added [ 29.811660][ T3302] team0: Port device team_slave_1 added [ 29.858407][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.865414][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.891526][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.914593][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.921607][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.947550][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.969445][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.976571][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.983928][ T3303] bridge_slave_0: entered allmulticast mode [ 29.990271][ T3303] bridge_slave_0: entered promiscuous mode [ 29.999200][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006434][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.013809][ T3303] bridge_slave_1: entered allmulticast mode [ 30.020270][ T3303] bridge_slave_1: entered promiscuous mode [ 30.051339][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.058621][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.066062][ T3309] bridge_slave_0: entered allmulticast mode [ 30.072587][ T3309] bridge_slave_0: entered promiscuous mode [ 30.099061][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106178][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.113380][ T3309] bridge_slave_1: entered allmulticast mode [ 30.120073][ T3309] bridge_slave_1: entered promiscuous mode [ 30.131556][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.154853][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.161942][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.169257][ T3308] bridge_slave_0: entered allmulticast mode [ 30.175865][ T3308] bridge_slave_0: entered promiscuous mode [ 30.189213][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.204252][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.213502][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.220699][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.227911][ T3311] bridge_slave_0: entered allmulticast mode [ 30.234419][ T3311] bridge_slave_0: entered promiscuous mode [ 30.240839][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.248603][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.255798][ T3308] bridge_slave_1: entered allmulticast mode [ 30.262514][ T3308] bridge_slave_1: entered promiscuous mode [ 30.284471][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.304767][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.312033][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.319887][ T3311] bridge_slave_1: entered allmulticast mode [ 30.326506][ T3311] bridge_slave_1: entered promiscuous mode [ 30.340029][ T3302] hsr_slave_0: entered promiscuous mode [ 30.346143][ T3302] hsr_slave_1: entered promiscuous mode [ 30.352970][ T3303] team0: Port device team_slave_0 added [ 30.359985][ T3303] team0: Port device team_slave_1 added [ 30.366396][ T3309] team0: Port device team_slave_0 added [ 30.382564][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.398081][ T3309] team0: Port device team_slave_1 added [ 30.420275][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.440339][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.447420][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.473361][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.485813][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.508423][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.515586][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.541658][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.554661][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.564411][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.571485][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.597887][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.612242][ T3308] team0: Port device team_slave_0 added [ 30.619213][ T3308] team0: Port device team_slave_1 added [ 30.635699][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.642728][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.669081][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.691084][ T3311] team0: Port device team_slave_0 added [ 30.710507][ T3311] team0: Port device team_slave_1 added [ 30.729657][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.736763][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.762883][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.774727][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.781801][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.807936][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849165][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.856200][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.882734][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.895697][ T3303] hsr_slave_0: entered promiscuous mode [ 30.901741][ T3303] hsr_slave_1: entered promiscuous mode [ 30.907651][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.915246][ T3303] Cannot create hsr debugfs directory [ 30.928411][ T3309] hsr_slave_0: entered promiscuous mode [ 30.934554][ T3309] hsr_slave_1: entered promiscuous mode [ 30.940523][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.948216][ T3309] Cannot create hsr debugfs directory [ 30.954035][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.960998][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.987076][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.037383][ T3308] hsr_slave_0: entered promiscuous mode [ 31.043407][ T3308] hsr_slave_1: entered promiscuous mode [ 31.049521][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.057208][ T3308] Cannot create hsr debugfs directory [ 31.076074][ T3311] hsr_slave_0: entered promiscuous mode [ 31.082155][ T3311] hsr_slave_1: entered promiscuous mode [ 31.088285][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.095887][ T3311] Cannot create hsr debugfs directory [ 31.219532][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.230681][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.251822][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.262527][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.309190][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.319887][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.328909][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.337913][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.370410][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.386937][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.399276][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.409170][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.441181][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.449029][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.463522][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.473222][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.482172][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.515794][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.529503][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.538956][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.552805][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.564929][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.572100][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.582271][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.607176][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.614294][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.632868][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.647513][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.661386][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.685511][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.692593][ T2453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.705691][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.725344][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.732513][ T2453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.741983][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.749139][ T2453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.758069][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.765143][ T2453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.843620][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.854435][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.867560][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.885980][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.913625][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.923155][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.930522][ T2453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.939573][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.946701][ T2453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.974990][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.990236][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.997338][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.023910][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.031070][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.047350][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.148428][ T3308] veth0_vlan: entered promiscuous mode [ 32.158780][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.172211][ T3308] veth1_vlan: entered promiscuous mode [ 32.201683][ T3309] veth0_vlan: entered promiscuous mode [ 32.218787][ T3309] veth1_vlan: entered promiscuous mode [ 32.225842][ T3308] veth0_macvtap: entered promiscuous mode [ 32.240411][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.251559][ T3308] veth1_macvtap: entered promiscuous mode [ 32.267374][ T3309] veth0_macvtap: entered promiscuous mode [ 32.283267][ T3309] veth1_macvtap: entered promiscuous mode [ 32.290380][ T3302] veth0_vlan: entered promiscuous mode [ 32.306714][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.315170][ T3302] veth1_vlan: entered promiscuous mode [ 32.327767][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.338356][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.351563][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.361190][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.377005][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.385914][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.394671][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.403638][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.414446][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.425037][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.435650][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.453941][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.462967][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471746][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480531][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.492597][ T3311] veth0_vlan: entered promiscuous mode [ 32.506087][ T3303] veth0_vlan: entered promiscuous mode [ 32.526247][ T3311] veth1_vlan: entered promiscuous mode [ 32.533432][ T3303] veth1_vlan: entered promiscuous mode [ 32.567033][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.589527][ T3302] veth0_macvtap: entered promiscuous mode [ 32.598408][ T3303] veth0_macvtap: entered promiscuous mode [ 32.613908][ T3303] veth1_macvtap: entered promiscuous mode [ 32.630363][ T3311] veth0_macvtap: entered promiscuous mode [ 32.638734][ T3302] veth1_macvtap: entered promiscuous mode [ 32.657325][ T3311] veth1_macvtap: entered promiscuous mode [ 32.671590][ T3444] loop2: detected capacity change from 0 to 4096 [ 32.674622][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.688645][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.698646][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.709228][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.720926][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.729435][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.739973][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.750021][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.761184][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.771087][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.782486][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.794268][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.810463][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.821656][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.831618][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.842332][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.853638][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.866265][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.876789][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.886727][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.897193][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.907183][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.917657][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.929102][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.940082][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.949061][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.957926][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.966918][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.979089][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.987901][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 32.987964][ T29] audit: type=1400 audit(1746205505.635:146): avc: denied { write } for pid=3451 comm="syz.3.8" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.988069][ T29] audit: type=1400 audit(1746205505.655:147): avc: denied { open } for pid=3451 comm="syz.3.8" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.994205][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048543][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057279][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.069113][ T29] audit: type=1400 audit(1746205505.685:148): avc: denied { ioctl } for pid=3451 comm="syz.3.8" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.070228][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.104106][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.114061][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.124775][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.134813][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.137728][ T29] audit: type=1400 audit(1746205505.795:149): avc: denied { create } for pid=3453 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.145486][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145505][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.145522][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.146590][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.174960][ T29] audit: type=1400 audit(1746205505.835:150): avc: denied { write } for pid=3453 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.179158][ T3450] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.240434][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.251140][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.261174][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.272155][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.282066][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.292901][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.302831][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.313550][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.327796][ T29] audit: type=1400 audit(1746205505.965:151): avc: denied { allowed } for pid=3458 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.347085][ T29] audit: type=1400 audit(1746205505.975:152): avc: denied { create } for pid=3458 comm="syz.3.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.357720][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.390483][ T3311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399335][ T3311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.408098][ T3311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.416966][ T3311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420998][ T29] audit: type=1326 audit(1746205506.075:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc81d2e969 code=0x7ffc0000 [ 33.451101][ T29] audit: type=1326 audit(1746205506.085:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc81d2e969 code=0x7ffc0000 [ 33.474444][ T29] audit: type=1326 audit(1746205506.085:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc81d2e969 code=0x7ffc0000 [ 33.646668][ T3477] bridge_slave_0: left allmulticast mode [ 33.652394][ T3477] bridge_slave_0: left promiscuous mode [ 33.658304][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.726419][ T3477] bridge_slave_1: left allmulticast mode [ 33.732310][ T3477] bridge_slave_1: left promiscuous mode [ 33.738257][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.753435][ T3490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 33.774052][ T3477] bond0: (slave bond_slave_0): Releasing backup interface [ 33.784348][ T3477] bond0: (slave bond_slave_1): Releasing backup interface [ 33.797204][ T3477] team0: Port device team_slave_0 removed [ 33.813430][ T3477] team0: Port device team_slave_1 removed [ 33.829801][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.837356][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.849608][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.853928][ T3495] loop1: detected capacity change from 0 to 1024 [ 33.857190][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.878140][ T3495] EXT4-fs: Ignoring removed bh option [ 33.895896][ T3495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 33.931158][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 33.983035][ T3502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3502 comm=syz.3.26 [ 34.123270][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 34.185229][ T3515] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 34.369241][ T3532] wireguard0: entered promiscuous mode [ 34.580076][ T3545] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 34.898476][ T3586] loop1: detected capacity change from 0 to 128 [ 35.017674][ T3590] syz.4.63 (3590) used greatest stack depth: 10912 bytes left [ 35.085026][ T3597] infiniband syz!: set active [ 35.089865][ T3597] infiniband syz!: added team_slave_0 [ 35.101233][ T3597] RDS/IB: syz!: added [ 35.106488][ T3597] smc: adding ib device syz! with port count 1 [ 35.113100][ T3597] smc: ib device syz! port 1 has pnetid [ 35.298668][ T3597] syz.1.66 (3597) used greatest stack depth: 10648 bytes left [ 35.351289][ T3612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.383720][ T3614] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.392986][ T3614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.529262][ T3622] random: crng reseeded on system resumption [ 35.701007][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 35.834079][ T3635] Falling back ldisc for ttyS3. [ 36.023398][ T3670] netlink: 'syz.0.93': attribute type 9 has an invalid length. [ 36.031274][ T3670] netlink: 371 bytes leftover after parsing attributes in process `syz.0.93'. [ 36.165670][ T3686] pim6reg: entered allmulticast mode [ 36.196023][ T3686] pim6reg: left allmulticast mode [ 36.263428][ C1] hrtimer: interrupt took 36694 ns [ 36.398064][ T3717] ------------[ cut here ]------------ [ 36.403822][ T3717] WARNING: CPU: 0 PID: 3717 at mm/page_alloc.c:4946 __alloc_frozen_pages_noprof+0x218/0x360 [ 36.414088][ T3717] Modules linked in: [ 36.418047][ T3717] CPU: 0 UID: 0 PID: 3717 Comm: syz.2.107 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) [ 36.430630][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.441237][ T3717] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 36.448058][ T3717] Code: 83 3d 63 b5 50 05 02 72 0e 48 83 b8 a0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 52 b2 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 36.467855][ T3717] RSP: 0018:ffffc9000e9f3aa8 EFLAGS: 00010246 [ 36.474073][ T3717] RAX: 9c72c0cd8911d100 RBX: 0000000000000016 RCX: 0000000000000000 [ 36.482143][ T3717] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 36.490227][ T3717] RBP: 0000000000000dc0 R08: ffff888103476d98 R09: 0000000000000000 [ 36.498300][ T3717] R10: ffff888118b37440 R11: 0001888118b37440 R12: ffffc9000e9f3d38 [ 36.506340][ T3717] R13: 00000000616c6572 R14: 0000000000040dc0 R15: 0000000000000000 [ 36.514878][ T3717] FS: 00007fdc803976c0(0000) GS:ffff8882aee50000(0000) knlGS:0000000000000000 [ 36.523960][ T3717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.530627][ T3717] CR2: 0000200000001000 CR3: 0000000115130000 CR4: 00000000003506f0 [ 36.538666][ T3717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.546822][ T3717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.555019][ T3717] Call Trace: [ 36.558392][ T3717] [ 36.561350][ T3717] __alloc_pages_noprof+0x9/0x20 [ 36.566418][ T3717] ___kmalloc_large_node+0x73/0x130 [ 36.571730][ T3717] __kmalloc_large_node_noprof+0x16/0xa0 [ 36.577455][ T3717] __kmalloc_noprof+0x2ab/0x3e0 [ 36.582342][ T3717] ? hashtab_init+0x9b/0xe0 [ 36.586994][ T3717] hashtab_init+0x9b/0xe0 [ 36.591503][ T3717] symtab_init+0x2c/0x40 [ 36.595809][ T3717] policydb_read+0x516/0x1330 [ 36.600638][ T3717] ? security_load_policy+0x90/0x890 [ 36.606027][ T3717] security_load_policy+0xba/0x890 [ 36.611281][ T3717] ? rep_movs_alternative+0x4a/0x90 [ 36.616562][ T3717] sel_write_load+0x1d4/0x380 [ 36.621719][ T3717] ? __pfx_sel_write_load+0x10/0x10 [ 36.627159][ T3717] vfs_write+0x266/0x8d0 [ 36.631564][ T3717] ? __rcu_read_unlock+0x4f/0x70 [ 36.636628][ T3717] ? __fget_files+0x184/0x1c0 [ 36.641366][ T3717] ksys_write+0xda/0x1a0 [ 36.645826][ T3717] __x64_sys_write+0x40/0x50 [ 36.650594][ T3717] x64_sys_call+0x2cdd/0x2fb0 [ 36.655441][ T3717] do_syscall_64+0xd0/0x1a0 [ 36.659991][ T3717] ? clear_bhb_loop+0x25/0x80 [ 36.664753][ T3717] ? clear_bhb_loop+0x25/0x80 [ 36.669620][ T3717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.675593][ T3717] RIP: 0033:0x7fdc81d2e969 [ 36.680195][ T3717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.699914][ T3717] RSP: 002b:00007fdc80397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.708465][ T3717] RAX: ffffffffffffffda RBX: 00007fdc81f55fa0 RCX: 00007fdc81d2e969 [ 36.716536][ T3717] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 36.724590][ T3717] RBP: 00007fdc81db0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 36.732741][ T3717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.741006][ T3717] R13: 0000000000000000 R14: 00007fdc81f55fa0 R15: 00007ffc0026e748 [ 36.749070][ T3717] [ 36.752111][ T3717] ---[ end trace 0000000000000000 ]--- [ 36.757794][ T3717] SELinux: failed to load policy [ 36.823033][ T3729] loop4: detected capacity change from 0 to 512 [ 36.840139][ T3729] ======================================================= [ 36.840139][ T3729] WARNING: The mand mount option has been deprecated and [ 36.840139][ T3729] and is ignored by this kernel. Remove the mand [ 36.840139][ T3729] option from the mount to silence this warning. [ 36.840139][ T3729] ======================================================= [ 36.905264][ T3729] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.917368][ T3729] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.111: bad orphan inode 13 [ 36.928089][ T3729] ext4_test_bit(bit=12, block=18) = 1 [ 36.933514][ T3729] is_bad_inode(inode)=0 [ 36.937903][ T3729] NEXT_ORPHAN(inode)=2130706432 [ 36.942861][ T3729] max_ino=32 [ 36.946248][ T3729] i_nlink=1 [ 36.950945][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.124834][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.261630][ T3753] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 37.289964][ T3742] Set syz1 is full, maxelem 65536 reached [ 37.296112][ T3743] Set syz1 is full, maxelem 65536 reached [ 37.454097][ T3766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 37.469952][ T3766] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 37.685074][ T3777] netlink: '+}[@': attribute type 10 has an invalid length. [ 37.699536][ T3781] bridge0: entered promiscuous mode [ 37.706491][ T3781] bridge0: port 3(macvlan2) entered blocking state [ 37.713296][ T3781] bridge0: port 3(macvlan2) entered disabled state [ 37.723203][ T3781] macvlan2: entered allmulticast mode [ 37.728945][ T3781] bridge0: entered allmulticast mode [ 37.735262][ T3781] macvlan2: left allmulticast mode [ 37.740666][ T3781] bridge0: left allmulticast mode [ 37.747307][ T3781] bridge0: left promiscuous mode [ 37.756391][ T3777] hsr_slave_0: left promiscuous mode [ 37.762230][ T3777] hsr_slave_1: left promiscuous mode [ 37.833415][ T3785] capability: warning: `syz.4.137' uses 32-bit capabilities (legacy support in use) [ 37.928977][ T3792] No such timeout policy "syz0" [ 37.987888][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 37.987952][ T29] audit: type=1400 audit(1746205510.645:312): avc: denied { write } for pid=3798 comm="syz.4.144" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.021108][ T3800] hub 9-0:1.0: USB hub found [ 38.026323][ T3800] hub 9-0:1.0: 8 ports detected [ 38.124625][ T3806] loop0: detected capacity change from 0 to 128 [ 38.135041][ T3806] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 38.148244][ T29] audit: type=1400 audit(1746205510.805:313): avc: denied { mount } for pid=3801 comm="syz.0.145" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.174700][ T3808] 9pnet: p9_errstr2errno: server reported unknown error @ [ 38.201284][ T3806] FAT-fs (loop0): FAT read failed (blocknr 128) [ 38.233858][ T29] audit: type=1400 audit(1746205510.885:314): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.563422][ T29] audit: type=1400 audit(1746205511.215:315): avc: denied { create } for pid=3818 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.582900][ T29] audit: type=1400 audit(1746205511.215:316): avc: denied { read } for pid=3821 comm="syz.1.152" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.606964][ T29] audit: type=1400 audit(1746205511.215:317): avc: denied { open } for pid=3821 comm="syz.1.152" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.632250][ T29] audit: type=1400 audit(1746205511.215:318): avc: denied { ioctl } for pid=3821 comm="syz.1.152" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.674945][ T29] audit: type=1326 audit(1746205511.325:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 38.698380][ T29] audit: type=1326 audit(1746205511.325:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 38.722268][ T29] audit: type=1326 audit(1746205511.325:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 38.923974][ T3846] SELinux: failed to load policy [ 38.996004][ T3852] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.030749][ T3852] syz.1.166 (3852) used greatest stack depth: 10272 bytes left [ 39.053272][ T3862] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.171'. [ 39.159176][ T3874] veth1_to_bond: entered allmulticast mode [ 39.176151][ T3874] veth1_to_bond: entered promiscuous mode [ 39.184219][ T3874] veth1_to_bond: left promiscuous mode [ 39.189857][ T3874] veth1_to_bond: left allmulticast mode [ 39.246652][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.255527][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.266333][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.288364][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.297292][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.307808][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.346303][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.355188][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.364606][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 39.568578][ T3917] bridge1: entered promiscuous mode [ 39.573920][ T3917] bridge1: entered allmulticast mode [ 39.589165][ T3917] team0: Port device bridge1 added [ 39.689995][ T3925] loop1: detected capacity change from 0 to 8192 [ 39.821575][ T3935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.842569][ T3937] loop1: detected capacity change from 0 to 128 [ 39.981500][ T3956] tipc: Started in network mode [ 39.986739][ T3956] tipc: Node identity ac14140f, cluster identity 4711 [ 39.994247][ T3956] tipc: New replicast peer: 255.255.255.83 [ 40.000178][ T3956] tipc: Enabled bearer , priority 10 [ 40.082952][ T3971] loop4: detected capacity change from 0 to 512 [ 40.145307][ T3971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.165202][ T3981] xt_CT: No such helper "syz0" [ 40.177323][ T3971] EXT4-fs (loop4): 1 orphan inode deleted [ 40.196811][ T3971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.209825][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 40.221508][ T3971] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.240739][ T3979] SELinux: ebitmap start bit (98) is not a multiple of the map unit size (64) [ 40.278754][ T3979] SELinux: failed to load policy [ 40.342660][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.379591][ T4011] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 40.379591][ T4011] program syz.4.229 not setting count and/or reply_len properly [ 40.581318][ T4041] unsupported nla_type 52263 [ 40.756282][ T4062] rdma_op ffff888118553580 conn xmit_rdma 0000000000000000 [ 40.772515][ T4064] loop4: detected capacity change from 0 to 512 [ 40.820864][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.855708][ T4064] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.907643][ T4083] program syz.2.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.964172][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.058009][ T4105] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 41.113714][ T3379] tipc: Node number set to 2886997007 [ 41.322585][ T4127] loop2: detected capacity change from 0 to 1024 [ 41.349219][ T4127] EXT4-fs: inline encryption not supported [ 41.355175][ T4127] EXT4-fs: Ignoring removed i_version option [ 41.373135][ T4127] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.440075][ T4127] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.273: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.487362][ T4127] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.273: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.503754][ T4127] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.273: Failed to acquire dquot type 0 [ 41.523766][ T4127] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 41.534185][ T4127] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.273: mark_inode_dirty error [ 41.563795][ T4127] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 41.597148][ T4127] EXT4-fs (loop2): 1 orphan inode deleted [ 41.607737][ T4146] netlink: 'syz.0.281': attribute type 16 has an invalid length. [ 41.613964][ T31] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.615600][ T4146] netlink: 'syz.0.281': attribute type 17 has an invalid length. [ 41.636100][ T4127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.655172][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 41.697183][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.718928][ T3309] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 41.735154][ T4146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.738397][ T3309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 41.760758][ T3309] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 41.845331][ T4166] Cannot find add_set index 0 as target [ 41.959651][ T4186] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 42.301368][ T4232] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 42.333732][ T4232] SELinux: failed to load policy [ 42.419056][ T4243] loop4: detected capacity change from 0 to 2048 [ 42.454271][ T4243] EXT4-fs: inline encryption not supported [ 42.589708][ T4243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.652380][ T4288] loop1: detected capacity change from 0 to 1024 [ 42.659330][ T4288] EXT4-fs: Ignoring removed i_version option [ 42.748208][ T4288] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 42.762983][ T4243] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.302: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 42.785383][ T4243] EXT4-fs (loop4): Remounting filesystem read-only [ 42.796861][ T4295] Cannot find add_set index 0 as target [ 42.796989][ T4288] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.306: Failed to acquire dquot type 0 [ 42.861511][ T4288] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.879401][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.888523][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.306: corrupted inode contents [ 42.902210][ T4288] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.306: mark_inode_dirty error [ 42.915807][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.306: corrupted inode contents [ 42.928780][ T4288] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.306: mark_inode_dirty error [ 42.956448][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.306: corrupted inode contents [ 43.005928][ T4288] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.015855][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.306: corrupted inode contents [ 43.025085][ T4306] loop3: detected capacity change from 0 to 512 [ 43.028042][ T4302] Falling back ldisc for ttyS3. [ 43.044918][ T4306] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.051737][ T4288] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.306: mark_inode_dirty error [ 43.064927][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 43.064944][ T29] audit: type=1326 audit(1746205515.725:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 43.066427][ T4306] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.314: bad orphan inode 13 [ 43.071338][ T29] audit: type=1326 audit(1746205515.725:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 43.136797][ T4288] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.146837][ T29] audit: type=1326 audit(1746205515.795:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 43.157142][ T4288] EXT4-fs (loop1): 1 truncate cleaned up [ 43.170168][ T29] audit: type=1326 audit(1746205515.795:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 43.184223][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.199334][ T29] audit: type=1326 audit(1746205515.795:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fee3be969 code=0x7ffc0000 [ 43.211994][ T4306] ext4_test_bit(bit=12, block=18) = 1 [ 43.241040][ T4306] is_bad_inode(inode)=0 [ 43.245259][ T4306] NEXT_ORPHAN(inode)=2130706432 [ 43.250119][ T4306] max_ino=32 [ 43.253419][ T4306] i_nlink=1 [ 43.257636][ T4306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.324753][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.337160][ T4306] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 43.352257][ T29] audit: type=1400 audit(1746205516.015:498): avc: denied { read } for pid=4320 comm="+}[@" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.378886][ T4306] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.392741][ T4326] loop1: detected capacity change from 0 to 1024 [ 43.411363][ T4326] EXT4-fs: Ignoring removed nobh option [ 43.416424][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.417064][ T4326] EXT4-fs: Ignoring removed bh option [ 43.450645][ T4326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.481034][ T4326] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.320: Allocating blocks 385-513 which overlap fs metadata [ 43.496903][ T4326] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.320: Allocating blocks 385-513 which overlap fs metadata [ 43.513576][ T4326] EXT4-fs (loop1): pa ffff8881007b7000: logic 16, phys. 129, len 24 [ 43.521820][ T4326] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 43.571496][ T4326] syz.1.320 (4326) used greatest stack depth: 9592 bytes left [ 43.580357][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.605173][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.615910][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.797074][ T29] audit: type=1400 audit(1746205516.455:499): avc: denied { bind } for pid=4351 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.893369][ T4364] loop1: detected capacity change from 0 to 164 [ 43.919477][ T29] audit: type=1400 audit(1746205516.485:500): avc: denied { write } for pid=4351 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.939065][ T29] audit: type=1400 audit(1746205516.565:501): avc: denied { mount } for pid=4361 comm="syz.1.331" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.942376][ T4364] process 'syz.1.331' launched '/dev/fd/4' with NULL argv: empty string added [ 43.980331][ T4364] syz.1.331: attempt to access beyond end of device [ 43.980331][ T4364] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 43.994979][ T29] audit: type=1400 audit(1746205516.635:502): avc: denied { execute_no_trans } for pid=4361 comm="syz.1.331" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.999102][ T4364] syz.1.331: attempt to access beyond end of device [ 43.999102][ T4364] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.130864][ T4393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4393 comm=syz.1.336 [ 44.143372][ T4393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4393 comm=syz.1.336 [ 44.226035][ T4409] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 44.233797][ T4409] netlink: 'syz.1.338': attribute type 4 has an invalid length. [ 44.241583][ T4409] __nla_validate_parse: 11 callbacks suppressed [ 44.241597][ T4409] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.338'. [ 44.351085][ T4427] loop1: detected capacity change from 0 to 512 [ 44.360968][ T4431] xt_hashlimit: size too large, truncated to 1048576 [ 44.461177][ T4427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.479354][ T4448] loop3: detected capacity change from 0 to 1024 [ 44.487745][ T4427] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.344: bg 0: block 248: padding at end of block bitmap is not set [ 44.563146][ T4427] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.344: Failed to acquire dquot type 1 [ 44.617009][ T4448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.653740][ T4448] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.675435][ T4427] EXT4-fs (loop1): 1 truncate cleaned up [ 44.699902][ T4427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.713199][ T4448] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 44.728509][ T4448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.346: bg 0: block 393: padding at end of block bitmap is not set [ 44.745773][ T4427] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 44.776246][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.795507][ T4427] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 44.848350][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.907402][ T4512] loop1: detected capacity change from 0 to 1024 [ 44.940335][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.968296][ T4518] smc: net device bond0 applied user defined pnetid SYZ2 [ 44.977547][ T4518] smc: net device bond0 erased user defined pnetid SYZ2 [ 44.995146][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.095286][ T4532] syz.0.365 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.169155][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 45.179600][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 45.237818][ T4544] atomic_op ffff888118b2f528 conn xmit_atomic 0000000000000000 [ 45.270886][ T4546] loop1: detected capacity change from 0 to 1024 [ 45.312139][ T4546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.370719][ T4546] netlink: 80 bytes leftover after parsing attributes in process `syz.1.371'. [ 45.395800][ T4546] netlink: 80 bytes leftover after parsing attributes in process `syz.1.371'. [ 45.450181][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.540589][ T4558] netlink: 3 bytes leftover after parsing attributes in process `syz.1.374'. [ 45.566404][ T4558] 0X: renamed from caif0 [ 45.585874][ T4558] 0X: entered allmulticast mode [ 45.591162][ T4558] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 45.867403][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 45.894129][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.901656][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.936678][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.944187][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.200550][ T4605] bond1: entered promiscuous mode [ 46.205815][ T4605] bond1: entered allmulticast mode [ 46.222988][ T4605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.237416][ T4609] loop4: detected capacity change from 0 to 1024 [ 46.246031][ T4605] bond1 (unregistering): Released all slaves [ 46.259153][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 46.268848][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 46.312676][ T4609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.324227][ T4617] loop1: detected capacity change from 0 to 1024 [ 46.354477][ T4609] netlink: 80 bytes leftover after parsing attributes in process `syz.4.397'. [ 46.365114][ T4617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.381088][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.381667][ T4617] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.414417][ T4617] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.400: bg 0: block 393: padding at end of block bitmap is not set [ 46.456799][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.559523][ T4629] loop1: detected capacity change from 0 to 8192 [ 46.570800][ T4629] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.828322][ T4647] smc: net device bond0 applied user defined pnetid SYZ2 [ 46.874010][ T4647] smc: net device bond0 erased user defined pnetid SYZ2 [ 46.906808][ T4651] bond1: entered promiscuous mode [ 46.911889][ T4651] bond1: entered allmulticast mode [ 46.931119][ T4651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.946047][ T4651] bond1 (unregistering): Released all slaves [ 47.017010][ T4661] loop1: detected capacity change from 0 to 512 [ 47.027672][ T4661] EXT4-fs: Ignoring removed nobh option [ 47.033269][ T4661] EXT4-fs: Ignoring removed bh option [ 47.047614][ T4661] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.418: invalid indirect mapped block 256 (level 2) [ 47.067698][ T4661] EXT4-fs (loop1): 2 truncates cleaned up [ 47.089993][ T4661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.297173][ T4271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 47.317505][ T4271] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 17407 with max blocks 1 with error 28 [ 47.330229][ T4271] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.330229][ T4271] [ 47.339976][ T4271] EXT4-fs (loop1): Total free blocks count 0 [ 47.346017][ T4271] EXT4-fs (loop1): Free/Dirty block details [ 47.348506][ T4673] bridge1: entered promiscuous mode [ 47.351938][ T4271] EXT4-fs (loop1): free_blocks=0 [ 47.357164][ T4673] bridge1: entered allmulticast mode [ 47.362175][ T4271] EXT4-fs (loop1): dirty_blocks=1 [ 47.369414][ T4673] team0: Port device bridge1 added [ 47.372489][ T4271] EXT4-fs (loop1): Block reservation details [ 47.372504][ T4271] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 47.392046][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.488814][ T4683] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.512040][ T4683] smc: net device bond0 erased user defined pnetid SYZ2 [ 47.642863][ T4705] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 47.762373][ T4716] pim6reg1: entered promiscuous mode [ 47.767774][ T4716] pim6reg1: entered allmulticast mode [ 47.823358][ T4726] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.867952][ T4726] smc: net device bond0 erased user defined pnetid SYZ2 [ 47.956199][ T4737] netlink: 'syz.0.452': attribute type 3 has an invalid length. [ 47.990659][ T4738] Zero length message leads to an empty skb [ 48.012014][ T4741] loop3: detected capacity change from 0 to 1024 [ 48.039458][ T4741] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.454: Failed to acquire dquot type 0 [ 48.069888][ T4741] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.098156][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.454: corrupted inode contents [ 48.124284][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 48.124351][ T29] audit: type=1326 audit(1746205520.785:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.153971][ T29] audit: type=1326 audit(1746205520.785:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.175811][ T4741] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.454: mark_inode_dirty error [ 48.177358][ T29] audit: type=1326 audit(1746205520.785:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.199021][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.454: corrupted inode contents [ 48.211866][ T29] audit: type=1326 audit(1746205520.785:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.246632][ T29] audit: type=1326 audit(1746205520.785:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.269599][ T29] audit: type=1326 audit(1746205520.785:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.292479][ T29] audit: type=1326 audit(1746205520.785:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.315725][ T29] audit: type=1326 audit(1746205520.785:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.338834][ T29] audit: type=1326 audit(1746205520.785:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.381960][ T29] audit: type=1326 audit(1746205520.995:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdf71e969 code=0x7ffc0000 [ 48.407236][ T4741] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.454: mark_inode_dirty error [ 48.427977][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.454: corrupted inode contents [ 48.465061][ T4741] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 48.473873][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.454: corrupted inode contents [ 48.486959][ T4741] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.454: mark_inode_dirty error [ 48.516779][ T4741] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 48.535410][ T4741] EXT4-fs (loop3): 1 truncate cleaned up [ 48.541539][ T4741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.564590][ T4741] EXT4-fs: Ignoring removed orlov option [ 48.570390][ T4741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.584843][ T4741] EXT4-fs (loop3): can't enable nombcache during remount [ 48.644817][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.688085][ T4763] loop4: detected capacity change from 0 to 8192 [ 48.839226][ T4769] loop2: detected capacity change from 0 to 8192 [ 48.865829][ T4769] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.916362][ T4789] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 48.928560][ T4789] dummy0: entered promiscuous mode [ 48.964086][ T4791] loop3: detected capacity change from 0 to 512 [ 48.986713][ T4789] bridge0: port 3(dummy0) entered blocking state [ 48.993213][ T4789] bridge0: port 3(dummy0) entered disabled state [ 49.003382][ T4791] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.488: corrupted in-inode xattr: invalid ea_ino [ 49.022582][ T4789] dummy0: entered allmulticast mode [ 49.028615][ T4789] bridge0: port 3(dummy0) entered blocking state [ 49.035070][ T4789] bridge0: port 3(dummy0) entered forwarding state [ 49.047329][ T4791] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.488: couldn't read orphan inode 15 (err -117) [ 49.082271][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.124445][ T4806] pim6reg1: entered promiscuous mode [ 49.127426][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.129784][ T4806] pim6reg1: entered allmulticast mode [ 49.198502][ T4804] loop2: detected capacity change from 0 to 8192 [ 49.228900][ T4814] ip6tnl1: entered promiscuous mode [ 49.229851][ T4812] SELinux: ebitmap: truncated map [ 49.243166][ T4812] SELinux: failed to load policy [ 49.255794][ T4804] __nla_validate_parse: 10 callbacks suppressed [ 49.255811][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 49.271176][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 49.304041][ T4818] loop3: detected capacity change from 0 to 1024 [ 49.310971][ T4818] EXT4-fs: Ignoring removed nobh option [ 49.316743][ T4818] EXT4-fs: Ignoring removed bh option [ 49.337709][ T4818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.379902][ T4826] bridge1: entered promiscuous mode [ 49.382391][ T4818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.486: Allocating blocks 385-513 which overlap fs metadata [ 49.385587][ T4826] bridge1: entered allmulticast mode [ 49.405123][ T4818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.486: Allocating blocks 385-513 which overlap fs metadata [ 49.419833][ T4826] team0: Port device bridge1 added [ 49.439893][ T4818] EXT4-fs (loop3): pa ffff8881069db0e0: logic 16, phys. 129, len 24 [ 49.447978][ T4818] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 49.487069][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.522981][ T4830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 49.645960][ T4838] loop3: detected capacity change from 0 to 8192 [ 49.655034][ T4838] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.819345][ T4852] bridge1: entered promiscuous mode [ 49.824760][ T4852] bridge1: entered allmulticast mode [ 49.833307][ T4852] team0: Port device bridge1 added [ 50.065385][ T3005] ================================================================== [ 50.073540][ T3005] BUG: KCSAN: data-race in dont_mount / step_into [ 50.079983][ T3005] [ 50.082311][ T3005] read-write to 0xffff888100448540 of 4 bytes by task 3296 on cpu 0: [ 50.090464][ T3005] dont_mount+0x2a/0x40 [ 50.094632][ T3005] vfs_unlink+0x28f/0x420 [ 50.098983][ T3005] do_unlinkat+0x28e/0x4c0 [ 50.103424][ T3005] __x64_sys_unlink+0x2e/0x40 [ 50.108129][ T3005] x64_sys_call+0x22a6/0x2fb0 [ 50.112822][ T3005] do_syscall_64+0xd0/0x1a0 [ 50.117361][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.123268][ T3005] [ 50.125650][ T3005] read to 0xffff888100448540 of 4 bytes by task 3005 on cpu 1: [ 50.133961][ T3005] step_into+0xe3/0x820 [ 50.138431][ T3005] walk_component+0x162/0x220 [ 50.144025][ T3005] path_lookupat+0xfe/0x2a0 [ 50.148582][ T3005] filename_lookup+0x147/0x340 [ 50.153372][ T3005] do_readlinkat+0x7d/0x320 [ 50.157925][ T3005] __x64_sys_readlink+0x47/0x60 [ 50.162870][ T3005] x64_sys_call+0x2cf3/0x2fb0 [ 50.167658][ T3005] do_syscall_64+0xd0/0x1a0 [ 50.172183][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.178116][ T3005] [ 50.180439][ T3005] value changed: 0x00300008 -> 0x00004008 [ 50.186157][ T3005] [ 50.188480][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 50.194732][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) [ 50.208288][ T3005] Tainted: [W]=WARN [ 50.212124][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.222215][ T3005] ==================================================================