last executing test programs: 2.447907122s ago: executing program 1 (id=430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1.533602489s ago: executing program 1 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4000000}, 0x44000) 1.35966441s ago: executing program 1 (id=468): unshare(0x2040400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.088549653s ago: executing program 4 (id=485): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 989.168283ms ago: executing program 0 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000ac0)="735afc39d50c2c799244792add30330a53545b45630901f6ba594df419bb11abebdd37178cffd52fbb4e589445b44cbf729e385ea63553e1aa2ecfdd42e70eb1213e677fdfef43b43687691efe837ef7", 0x50, 0x2, 0x0, 0x3}, &(0x7f0000001a80)) 988.283633ms ago: executing program 0 (id=491): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) timer_delete(r1) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 936.423244ms ago: executing program 0 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x200000000000000) 936.049894ms ago: executing program 4 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x5, 0x14, 0x0, &(0x7f0000000580)="259a53f271a76d2688ca4c6588a81f4cd227bd2a", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 748.750885ms ago: executing program 0 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 728.331565ms ago: executing program 4 (id=511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) 693.237865ms ago: executing program 2 (id=502): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 672.712865ms ago: executing program 3 (id=503): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) 672.251566ms ago: executing program 4 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 616.070556ms ago: executing program 3 (id=505): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 615.985956ms ago: executing program 4 (id=506): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r3 = syz_io_uring_complete(r1) close(r3) 587.948456ms ago: executing program 0 (id=507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 587.719346ms ago: executing program 4 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r2) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 587.170556ms ago: executing program 2 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) 536.194386ms ago: executing program 1 (id=509): perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x17e7b0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x18a1, 0x3fd, 0x200, 0x8, 0x4, 0x7ff, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 536.041766ms ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000322, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) 487.276497ms ago: executing program 3 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5507, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 486.690167ms ago: executing program 2 (id=513): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 434.666327ms ago: executing program 1 (id=514): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) signalfd4(r1, 0x0, 0x0, 0x800) 434.469777ms ago: executing program 2 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x5, 0x14, 0x0, &(0x7f0000000580)="259a53f271a76d2688ca4c6588a81f4cd227bd2a", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 434.352667ms ago: executing program 3 (id=516): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x8041}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) 405.781987ms ago: executing program 3 (id=517): r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 387.434148ms ago: executing program 1 (id=519): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 365.429128ms ago: executing program 3 (id=520): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 302.263058ms ago: executing program 2 (id=521): unshare(0x2040400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=522): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 34.211472][ T30] audit: type=1400 audit(1741903589.457:81): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.212487][ T3289] cgroup: Unknown subsys name 'net' [ 34.234219][ T30] audit: type=1400 audit(1741903589.457:82): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.261597][ T30] audit: type=1400 audit(1741903589.497:83): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.281506][ T30] audit: type=1400 audit(1741903589.497:84): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.395651][ T3289] cgroup: Unknown subsys name 'cpuset' [ 34.401809][ T3289] cgroup: Unknown subsys name 'rlimit' [ 34.552824][ T30] audit: type=1400 audit(1741903589.797:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.576109][ T30] audit: type=1400 audit(1741903589.797:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.591182][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.596551][ T30] audit: type=1400 audit(1741903589.797:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.625535][ T30] audit: type=1400 audit(1741903589.797:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.645788][ T30] audit: type=1400 audit(1741903589.807:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.648315][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.670632][ T30] audit: type=1400 audit(1741903589.807:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.664525][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.740789][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.747958][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.755290][ T3300] bridge_slave_0: entered allmulticast mode [ 35.761613][ T3300] bridge_slave_0: entered promiscuous mode [ 35.770308][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.777391][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.784625][ T3300] bridge_slave_1: entered allmulticast mode [ 35.791121][ T3300] bridge_slave_1: entered promiscuous mode [ 35.818123][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.846675][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.886567][ T3300] team0: Port device team_slave_0 added [ 35.901387][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.910893][ T3300] team0: Port device team_slave_1 added [ 35.949008][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.956028][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.981968][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.992970][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.006785][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.013820][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.039826][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.087220][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.094320][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.101566][ T3303] bridge_slave_0: entered allmulticast mode [ 36.108193][ T3303] bridge_slave_0: entered promiscuous mode [ 36.114614][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 36.138555][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.145668][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.152940][ T3303] bridge_slave_1: entered allmulticast mode [ 36.159389][ T3303] bridge_slave_1: entered promiscuous mode [ 36.196590][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.218431][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.225640][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.232849][ T3302] bridge_slave_0: entered allmulticast mode [ 36.239178][ T3302] bridge_slave_0: entered promiscuous mode [ 36.246784][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.262055][ T3300] hsr_slave_0: entered promiscuous mode [ 36.268290][ T3300] hsr_slave_1: entered promiscuous mode [ 36.276031][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.283163][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.290647][ T3302] bridge_slave_1: entered allmulticast mode [ 36.297007][ T3302] bridge_slave_1: entered promiscuous mode [ 36.312421][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 36.358083][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.367836][ T3303] team0: Port device team_slave_0 added [ 36.374472][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.405873][ T3303] team0: Port device team_slave_1 added [ 36.416312][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.423371][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.430628][ T3299] bridge_slave_0: entered allmulticast mode [ 36.437118][ T3299] bridge_slave_0: entered promiscuous mode [ 36.456910][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.464080][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.471245][ T3299] bridge_slave_1: entered allmulticast mode [ 36.477631][ T3299] bridge_slave_1: entered promiscuous mode [ 36.486147][ T3302] team0: Port device team_slave_0 added [ 36.506154][ T3302] team0: Port device team_slave_1 added [ 36.518818][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.525818][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.551808][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.570400][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.586385][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.593394][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.619350][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.636151][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.645624][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.652569][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678581][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.689867][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.696968][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.722948][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.771839][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.779047][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.786324][ T3311] bridge_slave_0: entered allmulticast mode [ 36.792619][ T3311] bridge_slave_0: entered promiscuous mode [ 36.799415][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.806526][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.813762][ T3311] bridge_slave_1: entered allmulticast mode [ 36.820275][ T3311] bridge_slave_1: entered promiscuous mode [ 36.827203][ T3299] team0: Port device team_slave_0 added [ 36.859315][ T3299] team0: Port device team_slave_1 added [ 36.866332][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.878616][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.889686][ T3302] hsr_slave_0: entered promiscuous mode [ 36.895895][ T3302] hsr_slave_1: entered promiscuous mode [ 36.901663][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.909280][ T3302] Cannot create hsr debugfs directory [ 36.923350][ T3303] hsr_slave_0: entered promiscuous mode [ 36.929468][ T3303] hsr_slave_1: entered promiscuous mode [ 36.935326][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.942879][ T3303] Cannot create hsr debugfs directory [ 36.967239][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.974292][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.000313][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.012069][ T3311] team0: Port device team_slave_0 added [ 37.026231][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.033290][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.059279][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.076018][ T3311] team0: Port device team_slave_1 added [ 37.108096][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.115175][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.141207][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.162268][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.170966][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.177964][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.203903][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.228701][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.239545][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.252647][ T3299] hsr_slave_0: entered promiscuous mode [ 37.258638][ T3299] hsr_slave_1: entered promiscuous mode [ 37.264502][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.272161][ T3299] Cannot create hsr debugfs directory [ 37.283192][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.328949][ T3311] hsr_slave_0: entered promiscuous mode [ 37.334808][ T3311] hsr_slave_1: entered promiscuous mode [ 37.340902][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.348496][ T3311] Cannot create hsr debugfs directory [ 37.441079][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.449632][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.459465][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.470827][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.512945][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.521349][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.530754][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.539775][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.573270][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.584087][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.593257][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.603003][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.627371][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.649062][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.658206][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.667633][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.676645][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.698370][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.715474][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.722550][ T2665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.744751][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.770535][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.777677][ T2665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.803964][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.816661][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.823814][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.843331][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.850476][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.861617][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.873069][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.891337][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.910796][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.921836][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.928912][ T2665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.941442][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.948605][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.962051][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.981278][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.988380][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.005178][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.020489][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.038895][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.046008][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.073884][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.080986][ T2665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.097352][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.104447][ T2665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.124720][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.135234][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.194318][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.207466][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.219046][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.248812][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.339140][ T3300] veth0_vlan: entered promiscuous mode [ 38.356634][ T3300] veth1_vlan: entered promiscuous mode [ 38.384841][ T3303] veth0_vlan: entered promiscuous mode [ 38.408701][ T3302] veth0_vlan: entered promiscuous mode [ 38.423682][ T3302] veth1_vlan: entered promiscuous mode [ 38.434479][ T3300] veth0_macvtap: entered promiscuous mode [ 38.448624][ T3299] veth0_vlan: entered promiscuous mode [ 38.456964][ T3311] veth0_vlan: entered promiscuous mode [ 38.462848][ T3299] veth1_vlan: entered promiscuous mode [ 38.471550][ T3303] veth1_vlan: entered promiscuous mode [ 38.480121][ T3300] veth1_macvtap: entered promiscuous mode [ 38.491022][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.505635][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.515919][ T3311] veth1_vlan: entered promiscuous mode [ 38.524390][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.533189][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.541976][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.550755][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.569729][ T3302] veth0_macvtap: entered promiscuous mode [ 38.580193][ T3302] veth1_macvtap: entered promiscuous mode [ 38.594695][ T3303] veth0_macvtap: entered promiscuous mode [ 38.608504][ T3303] veth1_macvtap: entered promiscuous mode [ 38.617326][ T3299] veth0_macvtap: entered promiscuous mode [ 38.633753][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.644311][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.656392][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.657080][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.664359][ T3299] veth1_macvtap: entered promiscuous mode [ 38.689989][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.700535][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.710507][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.720942][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.731654][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.741159][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.751694][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.763118][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.772660][ T3311] veth0_macvtap: entered promiscuous mode [ 38.791503][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.802177][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.812080][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.822624][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.833699][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.843248][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.853790][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.863768][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.874243][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.884088][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.894522][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.905873][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.917049][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.925869][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934555][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.943355][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.954620][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.963505][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.972432][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.981208][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.002824][ T3311] veth1_macvtap: entered promiscuous mode [ 39.011243][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.021747][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.031619][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.042057][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.051954][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.062616][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.074273][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.094812][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.103637][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112436][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.121208][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.154294][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.164967][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.174954][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.185424][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.195564][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.206278][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.216227][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.227366][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.246782][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.265195][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.275754][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.285632][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.296140][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.305990][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.316510][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.326490][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.332263][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 39.332280][ T30] audit: type=1400 audit(1741903594.577:135): avc: denied { read } for pid=3453 comm="syz.0.1" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.336943][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.339282][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.369262][ T30] audit: type=1400 audit(1741903594.617:136): avc: denied { open } for pid=3453 comm="syz.0.1" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.407538][ T30] audit: type=1400 audit(1741903594.617:137): avc: denied { ioctl } for pid=3453 comm="syz.0.1" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.481901][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490815][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499659][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.508479][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.512010][ T30] audit: type=1400 audit(1741903594.757:138): avc: denied { create } for pid=3458 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.545469][ T30] audit: type=1400 audit(1741903594.797:139): avc: denied { ioctl } for pid=3458 comm="syz.2.3" path="socket:[3812]" dev="sockfs" ino=3812 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.571961][ T30] audit: type=1400 audit(1741903594.797:140): avc: denied { create } for pid=3456 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.591820][ T30] audit: type=1400 audit(1741903594.797:141): avc: denied { bind } for pid=3456 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.611277][ T30] audit: type=1400 audit(1741903594.797:142): avc: denied { write } for pid=3456 comm="syz.1.2" path="socket:[4538]" dev="sockfs" ino=4538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.657668][ T30] audit: type=1400 audit(1741903594.907:143): avc: denied { create } for pid=3462 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 39.709116][ T30] audit: type=1400 audit(1741903594.937:144): avc: denied { execute } for pid=3462 comm="syz.0.11" path="/1/pids.events" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.989948][ T3504] syz.0.28 (3504) used greatest stack depth: 10888 bytes left [ 40.050152][ T3514] mmap: syz.2.33 (3514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.071835][ T3515] loop0: detected capacity change from 0 to 2048 [ 40.081528][ T3517] netlink: 'syz.1.35': attribute type 13 has an invalid length. [ 40.089318][ T3517] netlink: 152 bytes leftover after parsing attributes in process `syz.1.35'. [ 40.099514][ T3517] syz_tun: refused to change device tx_queue_len [ 40.105950][ T3517] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 40.163875][ T3515] loop0: p1 < > p4 [ 40.175551][ T3515] loop0: p4 size 8388608 extends beyond EOD, truncated [ 40.197577][ T3525] xt_hashlimit: max too large, truncated to 1048576 [ 40.199708][ T3524] loop1: detected capacity change from 0 to 1024 [ 40.207105][ T3525] xt_limit: Overflow, try lower: 0/0 [ 40.244705][ T3524] ======================================================= [ 40.244705][ T3524] WARNING: The mand mount option has been deprecated and [ 40.244705][ T3524] and is ignored by this kernel. Remove the mand [ 40.244705][ T3524] option from the mount to silence this warning. [ 40.244705][ T3524] ======================================================= [ 40.283041][ T3524] EXT4-fs: Ignoring removed nobh option [ 40.288755][ T3524] EXT4-fs: Ignoring removed bh option [ 40.380251][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.445603][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.502166][ T3540] IPVS: Error connecting to the multicast addr [ 40.662256][ T3550] loop4: detected capacity change from 0 to 256 [ 40.687847][ T3550] syz.4.47: attempt to access beyond end of device [ 40.687847][ T3550] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 40.928605][ T3578] netlink: 76 bytes leftover after parsing attributes in process `syz.2.59'. [ 41.162892][ T3605] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.329057][ T3624] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 41.337356][ T3624] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 41.373364][ T3631] loop3: detected capacity change from 0 to 164 [ 41.380791][ T3631] rock: directory entry would overflow storage [ 41.387136][ T3631] rock: sig=0x4543, size=28, remaining=18 [ 41.435739][ T3638] netlink: 'syz.1.86': attribute type 15 has an invalid length. [ 42.380764][ T3747] loop0: detected capacity change from 0 to 2048 [ 42.426952][ T3747] EXT4-fs (loop0): failed to initialize system zone (-117) [ 42.459290][ T3747] EXT4-fs (loop0): mount failed [ 42.477621][ C1] hrtimer: interrupt took 37162 ns [ 44.113430][ T3916] loop2: detected capacity change from 0 to 164 [ 44.133072][ T3916] process 'syz.2.162' launched '/dev/fd/6' with NULL argv: empty string added [ 44.150821][ T3916] syz.2.162: attempt to access beyond end of device [ 44.150821][ T3916] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.173550][ T3916] syz.2.162: attempt to access beyond end of device [ 44.173550][ T3916] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.341503][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 44.341520][ T30] audit: type=1400 audit(1741903599.587:251): avc: denied { search } for pid=3944 comm="sed" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.375691][ T30] audit: type=1400 audit(1741903599.607:252): avc: denied { append } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.398373][ T30] audit: type=1400 audit(1741903599.627:253): avc: denied { read } for pid=3944 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.420251][ T30] audit: type=1400 audit(1741903599.627:254): avc: denied { open } for pid=3944 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.445142][ T30] audit: type=1400 audit(1741903599.627:255): avc: denied { getattr } for pid=3944 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.478614][ T30] audit: type=1400 audit(1741903599.677:256): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.502833][ T30] audit: type=1400 audit(1741903599.677:257): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.527046][ T30] audit: type=1400 audit(1741903599.677:258): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.583182][ T30] audit: type=1400 audit(1741903599.827:259): avc: denied { prog_load } for pid=3952 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.602201][ T30] audit: type=1400 audit(1741903599.827:260): avc: denied { bpf } for pid=3952 comm="syz.2.170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.675710][ T3964] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 44.683419][ T3964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.173'. [ 44.718019][ T3970] loop1: detected capacity change from 0 to 164 [ 44.744136][ T3970] syz.1.176: attempt to access beyond end of device [ 44.744136][ T3970] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.798621][ T3970] syz.1.176: attempt to access beyond end of device [ 44.798621][ T3970] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.075728][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 45.093086][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.128162][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.225596][ T4023] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 45.233574][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 45.344277][ T3000] udevd[3000]: worker [3505] terminated by signal 33 (Unknown signal 33) [ 45.354636][ T3000] udevd[3000]: worker [3505] failed while handling '/devices/virtual/block/loop1' [ 45.651718][ T4046] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.663714][ T4048] loop4: detected capacity change from 0 to 164 [ 45.679757][ T4048] syz.4.197: attempt to access beyond end of device [ 45.679757][ T4048] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.703059][ T4046] syz.2.198 (4046) used greatest stack depth: 10872 bytes left [ 45.725930][ T4048] syz.4.197: attempt to access beyond end of device [ 45.725930][ T4048] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.807827][ T4060] netlink: 76 bytes leftover after parsing attributes in process `syz.4.203'. [ 46.076573][ T4083] loop4: detected capacity change from 0 to 256 [ 46.117146][ T4088] syz.4.219 uses obsolete (PF_INET,SOCK_PACKET) [ 46.327219][ T4113] loop3: detected capacity change from 0 to 256 [ 46.551739][ T4138] loop3: detected capacity change from 0 to 128 [ 46.584804][ T3311] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 46.593451][ T3311] FAT-fs (loop3): Filesystem has been set read-only [ 47.556514][ T4181] loop2: detected capacity change from 0 to 256 [ 47.594654][ T4181] syz.2.257: attempt to access beyond end of device [ 47.594654][ T4181] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 47.915532][ T4201] loop2: detected capacity change from 0 to 128 [ 47.974595][ T3302] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 47.983232][ T3302] FAT-fs (loop2): Filesystem has been set read-only [ 48.384554][ T4226] loop0: detected capacity change from 0 to 256 [ 48.389583][ T4227] loop4: detected capacity change from 0 to 1024 [ 48.397693][ T4227] EXT4-fs: Ignoring removed nobh option [ 48.403343][ T4227] EXT4-fs: Ignoring removed bh option [ 48.422336][ T4226] syz.0.275: attempt to access beyond end of device [ 48.422336][ T4226] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 48.426644][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.478403][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.975314][ T4245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'. [ 49.120212][ T4264] ipvlan2: entered promiscuous mode [ 49.125565][ T4264] ipvlan2: entered allmulticast mode [ 49.131053][ T4264] bridge0: entered allmulticast mode [ 49.140533][ T4265] loop0: detected capacity change from 0 to 512 [ 49.162741][ T4265] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.167504][ T4264] bridge0: port 3(ipvlan2) entered blocking state [ 49.175870][ T4265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.182401][ T4264] bridge0: port 3(ipvlan2) entered disabled state [ 49.222377][ T4265] EXT4-fs (loop0): 1 truncate cleaned up [ 49.233326][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.252065][ T4265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.402025][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 49.402041][ T30] audit: type=1400 audit(1741903604.647:418): avc: denied { ioctl } for pid=4289 comm="syz.3.304" path="socket:[5990]" dev="sockfs" ino=5990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.435404][ T4290] netlink: 'syz.3.304': attribute type 15 has an invalid length. [ 49.480575][ T30] audit: type=1400 audit(1741903604.717:419): avc: denied { execmem } for pid=4293 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.604822][ T4305] loop2: detected capacity change from 0 to 512 [ 49.630681][ T4305] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.310: corrupted in-inode xattr: invalid ea_ino [ 49.663581][ T4305] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.310: couldn't read orphan inode 15 (err -117) [ 49.678256][ T4305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.709266][ T30] audit: type=1400 audit(1741903604.957:420): avc: denied { mounton } for pid=4304 comm="syz.2.310" path="/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.731587][ T30] audit: type=1400 audit(1741903604.957:421): avc: denied { mount } for pid=4304 comm="syz.2.310" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.786719][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.798133][ T30] audit: type=1400 audit(1741903605.047:422): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.845911][ T4308] loop3: detected capacity change from 0 to 512 [ 49.855657][ T4308] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.893870][ T4313] ipvlan2: entered promiscuous mode [ 49.899285][ T4313] ipvlan2: entered allmulticast mode [ 49.904610][ T4313] bridge0: entered allmulticast mode [ 49.909316][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.914981][ T4308] EXT4-fs (loop3): 1 truncate cleaned up [ 49.917300][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.930328][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.932174][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.938825][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.953158][ T4313] bridge0: port 3(ipvlan2) entered blocking state [ 49.957294][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.963725][ T4313] bridge0: port 3(ipvlan2) entered disabled state [ 49.971158][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.980821][ T4308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.984925][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.001381][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.008830][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.016312][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.023706][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.031250][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.038685][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.046141][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.053727][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.061206][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.068710][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.076243][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.083644][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.091261][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.098687][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.106174][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.113649][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.121399][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.128828][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.136432][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.143850][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.151786][ T3349] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.160798][ T3349] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.171318][ T4323] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 50.179606][ T4323] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 50.260115][ T30] audit: type=1326 audit(1741903605.507:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56f9ad169 code=0x7ffc0000 [ 50.289309][ T30] audit: type=1326 audit(1741903605.507:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56f9ad169 code=0x7ffc0000 [ 50.312683][ T30] audit: type=1326 audit(1741903605.507:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56f9ad169 code=0x7ffc0000 [ 50.335968][ T30] audit: type=1326 audit(1741903605.507:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56f9ad169 code=0x7ffc0000 [ 50.359226][ T30] audit: type=1326 audit(1741903605.507:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56f9ad169 code=0x7ffc0000 [ 50.422333][ T4344] loop2: detected capacity change from 0 to 256 [ 50.429790][ T4344] FAT-fs (loop2): bogus number of FAT sectors [ 50.435928][ T4344] FAT-fs (loop2): Can't find a valid FAT filesystem [ 51.245795][ T4363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.333'. [ 51.254785][ T4363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.333'. [ 51.309515][ T4369] ipvlan2: entered promiscuous mode [ 51.314886][ T4369] ipvlan2: entered allmulticast mode [ 51.320198][ T4369] bridge0: entered allmulticast mode [ 51.331660][ T4369] bridge0: port 3(ipvlan2) entered blocking state [ 51.338200][ T4369] bridge0: port 3(ipvlan2) entered disabled state [ 51.476986][ T4383] loop1: detected capacity change from 0 to 128 [ 51.501199][ T4383] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.517947][ T4383] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.586404][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.748119][ T4417] loop1: detected capacity change from 0 to 512 [ 51.756072][ T4417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.766922][ T4417] EXT4-fs (loop1): 1 truncate cleaned up [ 51.772919][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.786162][ T4417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.848675][ T4424] loop1: detected capacity change from 0 to 512 [ 51.867101][ T4424] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.873967][ T4424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.358: bg 0: block 248: padding at end of block bitmap is not set [ 51.888914][ T4424] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.358: Failed to acquire dquot type 1 [ 51.900904][ T4424] EXT4-fs (loop1): 1 truncate cleaned up [ 51.907470][ T4424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.926280][ T4424] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 51.945492][ T4424] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.358: Failed to acquire dquot type 1 [ 51.957166][ T4424] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 52.003563][ T4424] syz.1.358 (4424) used greatest stack depth: 9368 bytes left [ 52.011504][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.326871][ T4449] loop2: detected capacity change from 0 to 512 [ 52.346855][ T4451] xt_NFQUEUE: number of total queues is 0 [ 52.347035][ T4449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.388913][ T4449] EXT4-fs (loop2): 1 truncate cleaned up [ 52.395278][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.412328][ T4449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.593121][ T4480] netlink: 9 bytes leftover after parsing attributes in process `syz.3.382'. [ 52.607232][ T4476] ipvlan2: entered promiscuous mode [ 52.612523][ T4476] ipvlan2: entered allmulticast mode [ 52.617903][ T4476] bridge0: entered allmulticast mode [ 52.625405][ T4476] bridge0: port 3(ipvlan2) entered blocking state [ 52.631882][ T4476] bridge0: port 3(ipvlan2) entered disabled state [ 52.657598][ T4481] loop4: detected capacity change from 0 to 512 [ 52.664767][ T4481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.676147][ T4480] gretap0: entered promiscuous mode [ 52.685114][ T4481] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 52.706319][ T4485] serio: Serial port ptm0 [ 52.711242][ T4481] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.381: invalid indirect mapped block 4294967295 (level 0) [ 52.726546][ T4481] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.381: invalid indirect mapped block 4294967295 (level 1) [ 52.741188][ T4481] EXT4-fs (loop4): 1 orphan inode deleted [ 52.746988][ T4481] EXT4-fs (loop4): 1 truncate cleaned up [ 52.754761][ T4481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.773461][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 52.797783][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.885622][ T4502] capability: warning: `syz.2.391' uses 32-bit capabilities (legacy support in use) [ 52.887807][ T4504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.905419][ T4504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.907853][ T4499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.916585][ T4504] netlink: 277 bytes leftover after parsing attributes in process `syz.4.392'. [ 52.929750][ T4499] SELinux: failed to load policy [ 52.965295][ T4502] Falling back ldisc for ttyS3. [ 53.054582][ T4518] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.399'. [ 53.128540][ T4528] Zero length message leads to an empty skb [ 53.225287][ T4540] netlink: 148 bytes leftover after parsing attributes in process `syz.0.410'. [ 53.234339][ T4540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'. [ 53.243308][ T4540] netlink: 29 bytes leftover after parsing attributes in process `syz.0.410'. [ 53.262029][ T4542] loop1: detected capacity change from 0 to 164 [ 53.272688][ T4542] syz.1.411: attempt to access beyond end of device [ 53.272688][ T4542] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.287853][ T4542] syz.1.411: attempt to access beyond end of device [ 53.287853][ T4542] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.361529][ T4550] SELinux: security_context_str_to_sid (ÿÿÿÿ) failed with errno=-22 [ 53.414685][ T4558] netlink: 'syz.1.419': attribute type 21 has an invalid length. [ 53.428333][ T4558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.419'. [ 53.437361][ T4558] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 53.554068][ T4573] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 53.568161][ T4573] team0: Device hsr_slave_0 failed to register rx_handler [ 53.581243][ T4575] loop1: detected capacity change from 0 to 512 [ 53.599129][ T4575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.612091][ T4575] EXT4-fs (loop1): 1 truncate cleaned up [ 53.622191][ T4575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.665599][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.697416][ T4583] bond1: entered promiscuous mode [ 53.702492][ T4583] bond1: entered allmulticast mode [ 53.708337][ T4583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.718060][ T4583] bond1 (unregistering): Released all slaves [ 53.913081][ T4611] SELinux: failed to load policy [ 53.936607][ T4613] loop0: detected capacity change from 0 to 512 [ 53.944257][ T4613] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 53.956102][ T4613] EXT4-fs (loop0): invalid journal inode [ 53.961864][ T4613] EXT4-fs (loop0): can't get journal size [ 53.968664][ T4613] EXT4-fs (loop0): 1 truncate cleaned up [ 53.974740][ T4613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.002931][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.132646][ T4630] loop0: detected capacity change from 0 to 512 [ 54.146474][ T4630] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.156367][ T4630] EXT4-fs (loop0): bad geometry: block count 4294967295 exceeds size of device (256 blocks) [ 54.172746][ T4633] loop2: detected capacity change from 0 to 512 [ 54.185301][ T4633] journal_path: Lookup failure for './bus' [ 54.191260][ T4633] EXT4-fs: error: could not find journal device path [ 54.338082][ T4646] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 54.420456][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 54.420475][ T30] audit: type=1400 audit(1741903609.667:658): avc: denied { create } for pid=4656 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.519700][ T30] audit: type=1326 audit(1741903609.767:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.543180][ T30] audit: type=1326 audit(1741903609.767:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.568405][ T30] audit: type=1326 audit(1741903609.767:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.591678][ T30] audit: type=1326 audit(1741903609.767:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.620498][ T30] audit: type=1326 audit(1741903609.817:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.643797][ T30] audit: type=1326 audit(1741903609.817:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.667103][ T30] audit: type=1326 audit(1741903609.817:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.695267][ T30] audit: type=1326 audit(1741903609.867:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.718612][ T30] audit: type=1326 audit(1741903609.937:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce88d169 code=0x7ffc0000 [ 54.824646][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 54.901021][ T4685] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.140306][ T4713] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.235182][ T4725] loop0: detected capacity change from 0 to 1024 [ 55.257374][ T4725] EXT4-fs: Ignoring removed bh option [ 55.280176][ T4725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.319262][ T4725] Invalid ELF header magic: != ELF [ 55.382716][ T4739] loop3: detected capacity change from 0 to 512 [ 55.390883][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.406220][ T4739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.423572][ T4739] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.484011][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.565538][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.580187][ T4762] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.587637][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.800584][ T4784] loop3: detected capacity change from 0 to 1024 [ 55.822186][ T4784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.191268][ T4784] ================================================================== [ 56.199406][ T4784] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 56.206568][ T4784] [ 56.208902][ T4784] write to 0xffff888115ad3424 of 4 bytes by task 4789 on cpu 1: [ 56.216557][ T4784] xas_set_mark+0x131/0x150 [ 56.221112][ T4784] __folio_start_writeback+0x1e8/0x430 [ 56.226613][ T4784] ext4_bio_write_folio+0x591/0x9d0 [ 56.231843][ T4784] mpage_process_page_bufs+0x486/0x5d0 [ 56.237390][ T4784] mpage_prepare_extent_to_map+0x788/0xb80 [ 56.243216][ T4784] ext4_do_writepages+0xa20/0x2130 [ 56.248354][ T4784] ext4_writepages+0x159/0x2e0 [ 56.253141][ T4784] do_writepages+0x1d8/0x480 [ 56.257747][ T4784] file_write_and_wait_range+0x168/0x2f0 [ 56.263420][ T4784] generic_buffers_fsync_noflush+0x46/0x120 [ 56.269351][ T4784] ext4_sync_file+0x1ff/0x6c0 [ 56.274072][ T4784] vfs_fsync_range+0x116/0x130 [ 56.278862][ T4784] ext4_buffered_write_iter+0x358/0x3c0 [ 56.284456][ T4784] ext4_file_write_iter+0x383/0xf20 [ 56.289699][ T4784] iter_file_splice_write+0x5f1/0x980 [ 56.295104][ T4784] direct_splice_actor+0x160/0x2c0 [ 56.300249][ T4784] splice_direct_to_actor+0x302/0x670 [ 56.305657][ T4784] do_splice_direct+0xd7/0x150 [ 56.310459][ T4784] do_sendfile+0x398/0x660 [ 56.314897][ T4784] __x64_sys_sendfile64+0x110/0x150 [ 56.320130][ T4784] x64_sys_call+0xfbd/0x2dc0 [ 56.324748][ T4784] do_syscall_64+0xc9/0x1c0 [ 56.329376][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.335292][ T4784] [ 56.337627][ T4784] read to 0xffff888115ad3424 of 4 bytes by task 4784 on cpu 0: [ 56.345190][ T4784] xas_find_marked+0x608/0x650 [ 56.349992][ T4784] find_get_entry+0x54/0x390 [ 56.354596][ T4784] filemap_get_folios_tag+0x9e/0x210 [ 56.359994][ T4784] mpage_prepare_extent_to_map+0x329/0xb80 [ 56.365824][ T4784] ext4_do_writepages+0xa20/0x2130 [ 56.370977][ T4784] ext4_writepages+0x159/0x2e0 [ 56.375766][ T4784] do_writepages+0x1d8/0x480 [ 56.380385][ T4784] file_write_and_wait_range+0x168/0x2f0 [ 56.386077][ T4784] generic_buffers_fsync_noflush+0x46/0x120 [ 56.391993][ T4784] ext4_sync_file+0x1ff/0x6c0 [ 56.396699][ T4784] vfs_fsync_range+0x116/0x130 [ 56.401484][ T4784] ext4_buffered_write_iter+0x358/0x3c0 [ 56.407057][ T4784] ext4_file_write_iter+0x383/0xf20 [ 56.412296][ T4784] iter_file_splice_write+0x5f1/0x980 [ 56.417692][ T4784] direct_splice_actor+0x160/0x2c0 [ 56.422819][ T4784] splice_direct_to_actor+0x302/0x670 [ 56.428210][ T4784] do_splice_direct+0xd7/0x150 [ 56.432982][ T4784] do_sendfile+0x398/0x660 [ 56.437413][ T4784] __x64_sys_sendfile64+0x110/0x150 [ 56.442627][ T4784] x64_sys_call+0xfbd/0x2dc0 [ 56.447239][ T4784] do_syscall_64+0xc9/0x1c0 [ 56.451768][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.457679][ T4784] [ 56.460019][ T4784] value changed: 0x0a000021 -> 0x04000021 [ 56.465765][ T4784] [ 56.468100][ T4784] Reported by Kernel Concurrency Sanitizer on: [ 56.474274][ T4784] CPU: 0 UID: 0 PID: 4784 Comm: syz.3.520 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 56.484880][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.494953][ T4784] ================================================================== [ 56.631892][ T4789] ================================================================== [ 56.639999][ T4789] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 56.647908][ T4789] [ 56.650243][ T4789] write to 0xffff888115ad3424 of 4 bytes by task 4784 on cpu 1: [ 56.657867][ T4789] xas_set_mark+0x131/0x150 [ 56.662383][ T4789] __folio_start_writeback+0x1e8/0x430 [ 56.667850][ T4789] ext4_bio_write_folio+0x591/0x9d0 [ 56.673090][ T4789] mpage_process_page_bufs+0x486/0x5d0 [ 56.678555][ T4789] mpage_prepare_extent_to_map+0x788/0xb80 [ 56.684366][ T4789] ext4_do_writepages+0x6ea/0x2130 [ 56.689486][ T4789] ext4_writepages+0x159/0x2e0 [ 56.694260][ T4789] do_writepages+0x1d8/0x480 [ 56.698873][ T4789] file_write_and_wait_range+0x168/0x2f0 [ 56.704598][ T4789] generic_buffers_fsync_noflush+0x46/0x120 [ 56.710511][ T4789] ext4_sync_file+0x1ff/0x6c0 [ 56.715201][ T4789] vfs_fsync_range+0x116/0x130 [ 56.720008][ T4789] ext4_buffered_write_iter+0x358/0x3c0 [ 56.725574][ T4789] ext4_file_write_iter+0x383/0xf20 [ 56.730809][ T4789] iter_file_splice_write+0x5f1/0x980 [ 56.736226][ T4789] direct_splice_actor+0x160/0x2c0 [ 56.741353][ T4789] splice_direct_to_actor+0x302/0x670 [ 56.746731][ T4789] do_splice_direct+0xd7/0x150 [ 56.751516][ T4789] do_sendfile+0x398/0x660 [ 56.755935][ T4789] __x64_sys_sendfile64+0x110/0x150 [ 56.761152][ T4789] x64_sys_call+0xfbd/0x2dc0 [ 56.765747][ T4789] do_syscall_64+0xc9/0x1c0 [ 56.770269][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.776172][ T4789] [ 56.778495][ T4789] read to 0xffff888115ad3424 of 4 bytes by task 4789 on cpu 0: [ 56.786036][ T4789] __writeback_single_inode+0x210/0x850 [ 56.791589][ T4789] writeback_single_inode+0x16c/0x3f0 [ 56.796972][ T4789] sync_inode_metadata+0x5c/0x90 [ 56.801927][ T4789] generic_buffers_fsync_noflush+0xd8/0x120 [ 56.807835][ T4789] ext4_sync_file+0x1ff/0x6c0 [ 56.812538][ T4789] vfs_fsync_range+0x116/0x130 [ 56.817314][ T4789] ext4_buffered_write_iter+0x358/0x3c0 [ 56.822882][ T4789] ext4_file_write_iter+0x383/0xf20 [ 56.828092][ T4789] iter_file_splice_write+0x5f1/0x980 [ 56.833475][ T4789] direct_splice_actor+0x160/0x2c0 [ 56.838589][ T4789] splice_direct_to_actor+0x302/0x670 [ 56.843958][ T4789] do_splice_direct+0xd7/0x150 [ 56.848719][ T4789] do_sendfile+0x398/0x660 [ 56.853127][ T4789] __x64_sys_sendfile64+0x110/0x150 [ 56.858334][ T4789] x64_sys_call+0xfbd/0x2dc0 [ 56.862944][ T4789] do_syscall_64+0xc9/0x1c0 [ 56.867468][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.873491][ T4789] [ 56.875811][ T4789] value changed: 0x0a000021 -> 0x04000021 [ 56.881528][ T4789] [ 56.883843][ T4789] Reported by Kernel Concurrency Sanitizer on: [ 56.889983][ T4789] CPU: 0 UID: 0 PID: 4789 Comm: syz.3.520 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 56.900568][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.910621][ T4789] ================================================================== [ 57.002250][ T4784] syz.3.520 (4784) used greatest stack depth: 8880 bytes left [ 57.014424][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.