last executing test programs: 8.040160534s ago: executing program 1 (id=154): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x1, 0x10000, 0xfffffffa, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) 7.823083318s ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0xffffffffffffff64, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000844) 7.746866438s ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 7.522794362s ago: executing program 1 (id=169): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x3, 0xbaf, &(0x7f0000002f00)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 7.218104057s ago: executing program 1 (id=176): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x250b, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0) 6.99389234s ago: executing program 1 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 6.956085941s ago: executing program 32 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 1.386257418s ago: executing program 3 (id=315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 1.2705771s ago: executing program 5 (id=318): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\\\\+\x00', 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a) 1.122929422s ago: executing program 5 (id=319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) memfd_secret(0x80000) 1.080812163s ago: executing program 5 (id=320): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 927.058125ms ago: executing program 5 (id=323): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x815, 0x3, 'none\x00', 0x1, 0x1, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 850.459607ms ago: executing program 5 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 784.086858ms ago: executing program 4 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8000091, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 779.833398ms ago: executing program 5 (id=327): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000cc0), 0x4000000000002b6, 0x40002132, 0x0) 666.425489ms ago: executing program 4 (id=329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 615.96364ms ago: executing program 0 (id=330): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) finit_module(r1, 0x0, 0x3) 573.914561ms ago: executing program 4 (id=331): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 546.867802ms ago: executing program 4 (id=332): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r1}]}]}, 0x28}}, 0x0) 527.983432ms ago: executing program 3 (id=333): r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 499.096722ms ago: executing program 2 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) 475.656893ms ago: executing program 3 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 459.626433ms ago: executing program 4 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 423.334763ms ago: executing program 2 (id=337): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7e) 418.812094ms ago: executing program 3 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 394.723304ms ago: executing program 0 (id=339): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 369.156664ms ago: executing program 2 (id=340): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 354.302175ms ago: executing program 0 (id=341): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 346.128875ms ago: executing program 3 (id=342): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x4896, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@commit={'commit', 0x3d, 0x5}}, {@acl}, {@errors_remount}, {@grpquota}]}, 0x3, 0x43b, &(0x7f00000008c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 308.014865ms ago: executing program 4 (id=343): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d3) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 275.869045ms ago: executing program 2 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1}) 259.236946ms ago: executing program 0 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 173.525507ms ago: executing program 2 (id=346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000980)='./bus\x00', 0x19) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 97.749288ms ago: executing program 0 (id=347): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r2, 0x0) 65.778239ms ago: executing program 3 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 15.94945ms ago: executing program 2 (id=349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0xd09fd0162b44d49e, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) 0s ago: executing program 0 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 33.675785][ T29] audit: type=1400 audit(1750019572.905:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.676950][ T3297] cgroup: Unknown subsys name 'net' [ 33.698663][ T29] audit: type=1400 audit(1750019572.905:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.726311][ T29] audit: type=1400 audit(1750019572.935:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.853243][ T3297] cgroup: Unknown subsys name 'cpuset' [ 33.859508][ T3297] cgroup: Unknown subsys name 'rlimit' [ 33.970791][ T29] audit: type=1400 audit(1750019573.195:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.995856][ T29] audit: type=1400 audit(1750019573.195:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.016433][ T29] audit: type=1400 audit(1750019573.195:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.037261][ T29] audit: type=1400 audit(1750019573.195:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.057552][ T29] audit: type=1400 audit(1750019573.205:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.082621][ T29] audit: type=1400 audit(1750019573.205:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.154280][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.163227][ T29] audit: type=1400 audit(1750019573.395:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.218355][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.432983][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.448283][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.531137][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.538875][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.546346][ T3307] bridge_slave_0: entered allmulticast mode [ 35.553958][ T3307] bridge_slave_0: entered promiscuous mode [ 35.574355][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.584075][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.591480][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.599031][ T3307] bridge_slave_1: entered allmulticast mode [ 35.606121][ T3307] bridge_slave_1: entered promiscuous mode [ 35.639897][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.647649][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.655001][ T3308] bridge_slave_0: entered allmulticast mode [ 35.661680][ T3308] bridge_slave_0: entered promiscuous mode [ 35.671251][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.678611][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.686122][ T3308] bridge_slave_1: entered allmulticast mode [ 35.693514][ T3308] bridge_slave_1: entered promiscuous mode [ 35.708525][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.737589][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.763097][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.772691][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.782963][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.820569][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.845596][ T3307] team0: Port device team_slave_0 added [ 35.857703][ T3308] team0: Port device team_slave_0 added [ 35.863985][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.871149][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.879938][ T3313] bridge_slave_0: entered allmulticast mode [ 35.889336][ T3313] bridge_slave_0: entered promiscuous mode [ 35.897398][ T3307] team0: Port device team_slave_1 added [ 35.918357][ T3308] team0: Port device team_slave_1 added [ 35.928788][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.936185][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.944013][ T3313] bridge_slave_1: entered allmulticast mode [ 35.950854][ T3313] bridge_slave_1: entered promiscuous mode [ 35.991365][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.998720][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.027396][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.040714][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.048051][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.055328][ T3315] bridge_slave_0: entered allmulticast mode [ 36.062060][ T3315] bridge_slave_0: entered promiscuous mode [ 36.068956][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.075989][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.102301][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.113872][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.120950][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.147130][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.162734][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.169725][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.195902][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.209145][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.216342][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.223976][ T3315] bridge_slave_1: entered allmulticast mode [ 36.230917][ T3315] bridge_slave_1: entered promiscuous mode [ 36.242265][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.257445][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.283197][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.294492][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.314442][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.321685][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.329175][ T3311] bridge_slave_0: entered allmulticast mode [ 36.336276][ T3311] bridge_slave_0: entered promiscuous mode [ 36.363693][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.370809][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.378153][ T3311] bridge_slave_1: entered allmulticast mode [ 36.384684][ T3311] bridge_slave_1: entered promiscuous mode [ 36.397446][ T3315] team0: Port device team_slave_0 added [ 36.404083][ T3313] team0: Port device team_slave_0 added [ 36.425875][ T3315] team0: Port device team_slave_1 added [ 36.432318][ T3313] team0: Port device team_slave_1 added [ 36.446522][ T3308] hsr_slave_0: entered promiscuous mode [ 36.453042][ T3308] hsr_slave_1: entered promiscuous mode [ 36.466846][ T3307] hsr_slave_0: entered promiscuous mode [ 36.473134][ T3307] hsr_slave_1: entered promiscuous mode [ 36.479251][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.487269][ T3307] Cannot create hsr debugfs directory [ 36.511102][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.522085][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.532559][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.540712][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.573155][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.590410][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.597812][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.624826][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.636356][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.643801][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.669868][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.686208][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.693322][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.719618][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.752592][ T3311] team0: Port device team_slave_0 added [ 36.781495][ T3311] team0: Port device team_slave_1 added [ 36.806361][ T3313] hsr_slave_0: entered promiscuous mode [ 36.812648][ T3313] hsr_slave_1: entered promiscuous mode [ 36.818601][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.826423][ T3313] Cannot create hsr debugfs directory [ 36.860365][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.867514][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.893875][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.907535][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.914649][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.941402][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.960452][ T3315] hsr_slave_0: entered promiscuous mode [ 36.967380][ T3315] hsr_slave_1: entered promiscuous mode [ 36.973359][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.981123][ T3315] Cannot create hsr debugfs directory [ 37.058867][ T3311] hsr_slave_0: entered promiscuous mode [ 37.065480][ T3311] hsr_slave_1: entered promiscuous mode [ 37.071495][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.079400][ T3311] Cannot create hsr debugfs directory [ 37.171239][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.182379][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.198126][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.226995][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.251088][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.264390][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.275034][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.286319][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.320770][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.329908][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.339025][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.348860][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.394065][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.413755][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.429444][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.439057][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.468653][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.478774][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.488515][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.497971][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.509107][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.528771][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.546873][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.560106][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.575231][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.582371][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.598750][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.605922][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.620411][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.627542][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.636858][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.643960][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.657365][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.705783][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.722989][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.730092][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.751622][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.759688][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.772764][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.818207][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.855784][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.867719][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.886002][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.893468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.904241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.911361][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.923281][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.937053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.944472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.970780][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.977911][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.992940][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.026847][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.047493][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.115641][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.184865][ T3313] veth0_vlan: entered promiscuous mode [ 38.209763][ T3308] veth0_vlan: entered promiscuous mode [ 38.224092][ T3313] veth1_vlan: entered promiscuous mode [ 38.233491][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.249439][ T3308] veth1_vlan: entered promiscuous mode [ 38.288040][ T3308] veth0_macvtap: entered promiscuous mode [ 38.317987][ T3308] veth1_macvtap: entered promiscuous mode [ 38.326950][ T3313] veth0_macvtap: entered promiscuous mode [ 38.341338][ T3313] veth1_macvtap: entered promiscuous mode [ 38.353372][ T3311] veth0_vlan: entered promiscuous mode [ 38.374426][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.392048][ T3311] veth1_vlan: entered promiscuous mode [ 38.414665][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.427136][ T3307] veth0_vlan: entered promiscuous mode [ 38.437547][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.446650][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.455433][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.464269][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.477328][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.497513][ T3315] veth0_vlan: entered promiscuous mode [ 38.505117][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.514667][ T3307] veth1_vlan: entered promiscuous mode [ 38.530709][ T3311] veth0_macvtap: entered promiscuous mode [ 38.539823][ T3315] veth1_vlan: entered promiscuous mode [ 38.551287][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.560726][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.570988][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.580075][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.595368][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.597223][ T3311] veth1_macvtap: entered promiscuous mode [ 38.624714][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.656930][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.668881][ T3307] veth0_macvtap: entered promiscuous mode [ 38.688572][ T3307] veth1_macvtap: entered promiscuous mode [ 38.696296][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.705281][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.706579][ T3477] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 38.714095][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.722478][ T3477] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 38.740053][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.783882][ T3315] veth0_macvtap: entered promiscuous mode [ 38.788145][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.800396][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.811612][ T3315] veth1_macvtap: entered promiscuous mode [ 38.835377][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.856100][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.885095][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.892510][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 38.892626][ T29] audit: type=1400 audit(1750019578.115:99): avc: denied { map_create } for pid=3484 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.893936][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899957][ T29] audit: type=1400 audit(1750019578.115:100): avc: denied { map_read map_write } for pid=3484 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.918913][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918995][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.984842][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.998823][ T3487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7'. [ 39.004094][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.016962][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.025937][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.033655][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 39.034902][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.045027][ T29] audit: type=1400 audit(1750019578.175:101): avc: denied { open } for pid=3484 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.076577][ T29] audit: type=1400 audit(1750019578.175:102): avc: denied { kernel } for pid=3484 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.101336][ T3486] loop2: detected capacity change from 0 to 8192 [ 39.126380][ T3489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.232681][ T29] audit: type=1400 audit(1750019578.445:103): avc: denied { create } for pid=3496 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.245606][ T3486] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 39.252844][ T29] audit: type=1400 audit(1750019578.455:104): avc: denied { connect } for pid=3496 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.262867][ T3486] FAT-fs (loop2): Filesystem has been set read-only [ 39.284471][ T29] audit: type=1400 audit(1750019578.455:105): avc: denied { mount } for pid=3485 comm="syz.2.3" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.324320][ T29] audit: type=1400 audit(1750019578.545:106): avc: denied { read } for pid=3494 comm="syz.1.10" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.347096][ T29] audit: type=1400 audit(1750019578.545:107): avc: denied { open } for pid=3494 comm="syz.1.10" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.371562][ T29] audit: type=1400 audit(1750019578.575:108): avc: denied { ioctl } for pid=3494 comm="syz.1.10" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.421327][ T3501] loop0: detected capacity change from 0 to 8192 [ 39.485914][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 39.495728][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 39.541802][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 39.635558][ T3521] dvmrp1: entered allmulticast mode [ 39.667325][ T3521] dvmrp1: left allmulticast mode [ 39.671393][ T3526] loop0: detected capacity change from 0 to 1024 [ 39.690541][ T3526] ======================================================= [ 39.690541][ T3526] WARNING: The mand mount option has been deprecated and [ 39.690541][ T3526] and is ignored by this kernel. Remove the mand [ 39.690541][ T3526] option from the mount to silence this warning. [ 39.690541][ T3526] ======================================================= [ 39.756571][ T3526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.907281][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.227951][ T3618] loop1: detected capacity change from 0 to 2048 [ 40.264743][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.398369][ T3629] netlink: 596 bytes leftover after parsing attributes in process `syz.2.40'. [ 40.427921][ T3630] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 40.580443][ T3638] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 40.588231][ T3638] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.44'. [ 40.627973][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.673108][ T3644] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 40.681016][ T3644] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.48'. [ 41.059778][ T3671] loop3: detected capacity change from 0 to 8192 [ 41.093301][ T3671] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.305903][ T3688] loop3: detected capacity change from 0 to 8192 [ 41.444207][ T3695] syz.0.69 (3695) used greatest stack depth: 10568 bytes left [ 41.835746][ T3719] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.883351][ T3719] SELinux: failed to load policy [ 41.981885][ T3725] loop1: detected capacity change from 0 to 512 [ 42.035897][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.053266][ T3725] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.080849][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.391133][ T3783] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 43.081417][ T3836] loop1: detected capacity change from 0 to 512 [ 43.095503][ T3836] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.108701][ T3836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.136099][ T3836] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.172818][ T3836] EXT4-fs (loop1): 1 truncate cleaned up [ 43.178995][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.409927][ T3853] loop4: detected capacity change from 0 to 512 [ 43.442098][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.465986][ T3853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.483152][ T3853] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.560364][ T3853] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.136: corrupted inode contents [ 43.584998][ T3853] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.136: mark_inode_dirty error [ 43.608239][ T3853] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.136: corrupted inode contents [ 43.627672][ T3867] C: renamed from team_slave_0 (while UP) [ 43.643094][ T3853] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.136: mark_inode_dirty error [ 43.658081][ T3853] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.136: mark inode dirty (error -117) [ 43.662357][ T3867] netlink: '+}[@': attribute type 3 has an invalid length. [ 43.702382][ T3853] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 43.714685][ T3867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 43.798709][ T3883] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.825966][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.836829][ T3885] loop3: detected capacity change from 0 to 1024 [ 43.877946][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.945807][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 43.945822][ T29] audit: type=1400 audit(1750019583.175:293): avc: denied { create } for pid=3897 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.979433][ T29] audit: type=1400 audit(1750019583.175:294): avc: denied { name_bind } for pid=3901 comm="syz.4.157" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.000567][ T29] audit: type=1400 audit(1750019583.205:295): avc: denied { write } for pid=3897 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.005803][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.130897][ T3922] netlink: 'syz.3.162': attribute type 3 has an invalid length. [ 44.157438][ T29] audit: type=1326 audit(1750019583.385:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedfcae929 code=0x7ffc0000 [ 44.181141][ T29] audit: type=1326 audit(1750019583.385:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedfcae929 code=0x7ffc0000 [ 44.204729][ T29] audit: type=1326 audit(1750019583.385:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feedfcae929 code=0x7ffc0000 [ 44.237828][ T29] audit: type=1400 audit(1750019583.465:299): avc: denied { kexec_image_load } for pid=3929 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.313587][ T3925] loop4: detected capacity change from 0 to 8192 [ 44.329983][ T29] audit: type=1400 audit(1750019583.555:300): avc: denied { create } for pid=3937 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.430753][ T29] audit: type=1400 audit(1750019583.555:301): avc: denied { ioctl } for pid=3937 comm="syz.3.167" path="socket:[6156]" dev="sockfs" ino=6156 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.457487][ T29] audit: type=1400 audit(1750019583.645:302): avc: denied { module_load } for pid=3944 comm="syz.3.170" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 44.505271][ T3941] loop1: detected capacity change from 0 to 4096 [ 44.525878][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.547504][ T3950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.592677][ T3941] loop1: detected capacity change from 4096 to 64 [ 44.651151][ T3968] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 44.689804][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.888543][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.946580][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.997520][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.014339][ T4011] loop9: detected capacity change from 0 to 7 [ 45.023211][ T4011] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.044081][ T4011] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.052309][ T4011] loop9: unable to read partition table [ 45.071008][ T4011] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 45.071008][ T4011] U) failed (rc=-5) [ 45.072192][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.100979][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.102096][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.168723][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.193826][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.202007][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.226280][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.243407][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.253820][ T12] bridge_slave_1: left allmulticast mode [ 45.255306][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.259677][ T12] bridge_slave_1: left promiscuous mode [ 45.273601][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.289516][ T12] bridge_slave_0: left allmulticast mode [ 45.295727][ T12] bridge_slave_0: left promiscuous mode [ 45.301490][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.465446][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.476356][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.487399][ T12] bond0 (unregistering): Released all slaves [ 45.550082][ T12] hsr_slave_0: left promiscuous mode [ 45.570655][ T12] hsr_slave_1: left promiscuous mode [ 45.576975][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.585291][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.605943][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.615270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.669159][ T12] veth1_macvtap: left promiscuous mode [ 45.679208][ T12] veth0_macvtap: left promiscuous mode [ 45.689418][ T12] veth1_vlan: left promiscuous mode [ 45.699472][ T12] veth0_vlan: left promiscuous mode [ 45.835842][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.852691][ T12] team0 (unregistering): Port device team_slave_0 removed [ 46.039428][ T4019] chnl_net:caif_netlink_parms(): no params data found [ 46.132898][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.140348][ T4019] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.164641][ T4019] bridge_slave_0: entered allmulticast mode [ 46.184040][ T4019] bridge_slave_0: entered promiscuous mode [ 46.204570][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.212272][ T4019] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.240295][ T4019] bridge_slave_1: entered allmulticast mode [ 46.250566][ T4019] bridge_slave_1: entered promiscuous mode [ 46.278658][ T4019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.290201][ T4019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.324308][ T4019] team0: Port device team_slave_0 added [ 46.333677][ T4019] team0: Port device team_slave_1 added [ 46.364518][ T4019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.371563][ T4019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.397973][ T4019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.440242][ T4019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.447403][ T4019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.473442][ T4019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.614349][ T4019] hsr_slave_0: entered promiscuous mode [ 46.634453][ T4019] hsr_slave_1: entered promiscuous mode [ 46.642568][ T4019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.674150][ T4019] Cannot create hsr debugfs directory [ 46.874469][ T4019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.889656][ T4019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.905458][ T4019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.937413][ T4019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.981517][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.990259][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.999579][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.008378][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.025890][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.035629][ T4182] __nla_validate_parse: 5 callbacks suppressed [ 47.035650][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 47.053534][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.064968][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 47.105813][ T4019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.127250][ T4019] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.145607][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.153081][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.181836][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.189314][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.314008][ T4019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.341568][ T4198] process 'syz.2.215' launched '/dev/fd/3' with NULL argv: empty string added [ 47.425196][ T4208] loop0: detected capacity change from 0 to 764 [ 47.499298][ T4214] loop0: detected capacity change from 0 to 1024 [ 47.527226][ T4214] EXT4-fs: Ignoring removed nobh option [ 47.534940][ T4214] EXT4-fs: Ignoring removed bh option [ 47.614443][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.650978][ T4019] veth0_vlan: entered promiscuous mode [ 47.689541][ T4019] veth1_vlan: entered promiscuous mode [ 47.761585][ T4019] veth0_macvtap: entered promiscuous mode [ 47.769674][ T4214] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.219: Allocating blocks 497-513 which overlap fs metadata [ 47.801453][ T4019] veth1_macvtap: entered promiscuous mode [ 47.823196][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.839128][ T4019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.864009][ T4019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.874111][ T4019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.884080][ T4019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.895578][ T4019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.910064][ T4235] ip6gre1: entered allmulticast mode [ 47.953096][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.018506][ T4243] mmap: syz.3.230 (4243) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.093745][ T4251] pim6reg1: entered promiscuous mode [ 48.099137][ T4251] pim6reg1: entered allmulticast mode [ 48.220645][ T4266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 48.473396][ T4288] loop3: detected capacity change from 0 to 128 [ 48.522955][ T4288] syz.3.249: attempt to access beyond end of device [ 48.522955][ T4288] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 48.571104][ T4288] syz.3.249: attempt to access beyond end of device [ 48.571104][ T4288] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 48.587802][ T4288] syz.3.249: attempt to access beyond end of device [ 48.587802][ T4288] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 48.636395][ T4288] syz.3.249: attempt to access beyond end of device [ 48.636395][ T4288] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 48.681582][ T4288] syz.3.249: attempt to access beyond end of device [ 48.681582][ T4288] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 48.710956][ T4288] syz.3.249: attempt to access beyond end of device [ 48.710956][ T4288] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 48.727720][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 48.744462][ T4288] syz.3.249: attempt to access beyond end of device [ 48.744462][ T4288] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 48.766064][ T4288] syz.3.249: attempt to access beyond end of device [ 48.766064][ T4288] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 48.786777][ T4297] syz.3.249: attempt to access beyond end of device [ 48.786777][ T4297] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 48.789933][ T4311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4311 comm=syz.0.258 [ 48.806705][ T4297] syz.3.249: attempt to access beyond end of device [ 48.806705][ T4297] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 48.922064][ T4322] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 49.058983][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 49.058998][ T29] audit: type=1326 audit(1750019588.285:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.090073][ T29] audit: type=1326 audit(1750019588.305:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.113855][ T29] audit: type=1326 audit(1750019588.305:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.137844][ T29] audit: type=1326 audit(1750019588.305:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.161409][ T29] audit: type=1326 audit(1750019588.305:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.185474][ T29] audit: type=1326 audit(1750019588.305:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.219405][ T29] audit: type=1326 audit(1750019588.345:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.242945][ T29] audit: type=1326 audit(1750019588.345:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.267388][ T29] audit: type=1326 audit(1750019588.355:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.292793][ T29] audit: type=1326 audit(1750019588.355:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98a3e929 code=0x7ffc0000 [ 49.620004][ T4359] loop5: detected capacity change from 0 to 512 [ 49.629537][ T4359] EXT4-fs (loop5): blocks per group (8192) and clusters per group (2304) inconsistent [ 49.741120][ T4367] loop0: detected capacity change from 0 to 512 [ 49.792673][ T4367] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.829523][ T4367] EXT4-fs (loop0): mount failed [ 49.838399][ T4377] ref_ctr_offset mismatch. inode: 0x182 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 50.038877][ T4404] loop0: detected capacity change from 0 to 128 [ 50.054744][ T4406] syz.4.299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.067762][ T4404] EXT4-fs: Ignoring removed nobh option [ 50.078205][ T4408] loop5: detected capacity change from 0 to 256 [ 50.090995][ T4404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.104763][ T4404] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.221841][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.423434][ T4439] netlink: 268 bytes leftover after parsing attributes in process `syz.3.312'. [ 50.432606][ T4439] unsupported nla_type 65024 [ 50.454360][ T4434] loop2: detected capacity change from 0 to 8192 [ 50.649343][ T4452] loop5: detected capacity change from 0 to 128 [ 50.877744][ T4457] SELinux: failed to load policy [ 50.899098][ T4459] syz_tun: entered allmulticast mode [ 50.926330][ T4458] syz_tun: left allmulticast mode [ 50.999392][ T36] IPVS: starting estimator thread 0... [ 51.105663][ T4464] IPVS: using max 1920 ests per chain, 96000 per kthread [ 51.150201][ T4474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 51.566221][ T4505] loop3: detected capacity change from 0 to 512 [ 51.575109][ T4506] IPv6: Can't replace route, no match found [ 51.600426][ T4505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.648788][ T4505] EXT4-fs (loop3): 1 truncate cleaned up [ 51.652139][ T4508] loop4: detected capacity change from 0 to 128 [ 51.661014][ T4505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.678655][ T4508] EXT4-fs: Ignoring removed nobh option [ 51.685605][ T4505] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.342: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 51.754050][ T4508] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.782869][ T4505] EXT4-fs (loop3): Remounting filesystem read-only [ 51.811864][ T4508] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.833624][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.917324][ T2997] ================================================================== [ 51.925576][ T2997] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 51.932315][ T2997] [ 51.934666][ T2997] read-write to 0xffff888105b973c0 of 4 bytes by task 3301 on cpu 0: [ 51.942756][ T2997] dont_mount+0x2a/0x40 [ 51.946960][ T2997] vfs_unlink+0x28f/0x420 [ 51.951340][ T2997] do_unlinkat+0x28e/0x4c0 [ 51.955796][ T2997] __x64_sys_unlink+0x2e/0x40 [ 51.960519][ T2997] x64_sys_call+0x22a6/0x2fb0 [ 51.965238][ T2997] do_syscall_64+0xd2/0x200 [ 51.969772][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.975702][ T2997] [ 51.978036][ T2997] read to 0xffff888105b973c0 of 4 bytes by task 2997 on cpu 1: [ 51.985601][ T2997] lookup_fast+0xf0/0x320 [ 51.989973][ T2997] walk_component+0x3f/0x220 [ 51.994586][ T2997] path_lookupat+0xfe/0x2a0 [ 51.999138][ T2997] filename_lookup+0x147/0x340 [ 52.003928][ T2997] do_readlinkat+0x7d/0x320 [ 52.008454][ T2997] __x64_sys_readlink+0x47/0x60 [ 52.013326][ T2997] x64_sys_call+0x2cf3/0x2fb0 [ 52.018017][ T2997] do_syscall_64+0xd2/0x200 [ 52.022532][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.028436][ T2997] [ 52.030768][ T2997] value changed: 0x00300008 -> 0x00004008 [ 52.036513][ T2997] [ 52.038888][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 52.045234][ T2997] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 52.057229][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.067331][ T2997] ================================================================== [ 52.108534][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.