last executing test programs: 2.168277765s ago: executing program 0 (id=639): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff00000000000000"], 0x98}}, 0x0) 2.141838453s ago: executing program 0 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.51102381s ago: executing program 1 (id=643): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x88) getdents64(r1, &(0x7f0000000040)=""/30, 0x1e) getdents64(r1, &(0x7f0000003640)=""/4096, 0x1000) 1.398135562s ago: executing program 1 (id=646): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.397398271s ago: executing program 1 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000014c0)=""/208, 0xd0}], 0x1, 0x4, 0xfffff25a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.370586848s ago: executing program 4 (id=649): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x5, @private0, 0x1bef8dbe}, {0xa, 0x20, 0x5, @loopback, 0x9}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x6, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) 1.350302297s ago: executing program 1 (id=650): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x2e, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10004}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x8050) epoll_create1(0x0) r5 = signalfd4(r0, &(0x7f0000000680)={[0x1]}, 0x8, 0x80000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYBLOB="4d9412b8f43dd2956b85f524471518894187e194c7d4936383ca763374786e9bfa335273162ea62fc6"], 0x28}}, 0x20048084) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYRESOCT=r7, @ANYRES32=r4, @ANYRES8=r2, @ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x13) setns(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0xfffffffffffffec1, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r9, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r10 = syz_io_uring_setup(0x2586, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x3, 0x8d, 0x0, r5}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe8) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0xa, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1, 0x0, 0x1}) io_uring_enter(r10, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 1.27603124s ago: executing program 4 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x35, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}], 0x58}, 0x0) 1.264324381s ago: executing program 1 (id=653): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x4, 0x6, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) connect(r0, &(0x7f0000001280)=@pppoe={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x80) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x4, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r2, 0x540b, 0x2) 1.217974788s ago: executing program 4 (id=655): timer_create(0x3, &(0x7f0000000100)={0x0, 0x10, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x5, &(0x7f00000001c0)) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000400)) 1.196453574s ago: executing program 0 (id=656): socket(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.084718868s ago: executing program 0 (id=662): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000050000000000000000000000850000002c00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)="1868e2", 0x2, 0x0, 0x4}, 0x50) 1.081849344s ago: executing program 3 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="00fbfddc0bd5e8dee8d286b20b62086ce9b81b1660031b9dcba026117a79eba4a32d50e5c7b14c8e3f4d"], 0x1, 0x3ea, &(0x7f0000000c40)="$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") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.012369954s ago: executing program 0 (id=665): openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) msgctl$IPC_RMID(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r5, 0x25, 0x10, @val=@perf_event={0x1b}}, 0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r6, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/53, 0x35}, 0x64}], 0x1, 0x40010040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') readlinkat(r8, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.002849049s ago: executing program 3 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 904.312845ms ago: executing program 3 (id=668): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000240)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c565a5fc2251eda45a4", 0x34, 0x2) 904.046944ms ago: executing program 3 (id=669): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x88) getdents64(r1, 0x0, 0x0) getdents64(r1, &(0x7f0000003640)=""/4096, 0x1000) 873.216276ms ago: executing program 3 (id=671): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 840.818654ms ago: executing program 3 (id=672): socket(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 713.016233ms ago: executing program 0 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(r0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 679.39708ms ago: executing program 2 (id=680): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 659.864629ms ago: executing program 2 (id=681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x35, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq}]}, 0x0, 0x479, &(0x7f0000001300)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}], 0x58}, 0x0) 396.502964ms ago: executing program 2 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 296.017806ms ago: executing program 4 (id=683): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 223.119191ms ago: executing program 1 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100005705000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x101, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 211.712503ms ago: executing program 2 (id=685): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x4000) 205.525853ms ago: executing program 4 (id=686): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 115.466952ms ago: executing program 2 (id=687): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff00000000000000000100"], 0x98}}, 0x0) 103.598883ms ago: executing program 4 (id=688): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace(0x10, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xa}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 0s ago: executing program 2 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100005705000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x101, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 28.871318][ T29] audit: type=1400 audit(1763527351.209:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.894399][ T29] audit: type=1400 audit(1763527351.229:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.895370][ T3301] cgroup: Unknown subsys name 'net' [ 28.922221][ T29] audit: type=1400 audit(1763527351.269:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.057842][ T3301] cgroup: Unknown subsys name 'cpuset' [ 29.064617][ T3301] cgroup: Unknown subsys name 'rlimit' [ 29.175656][ T29] audit: type=1400 audit(1763527351.509:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.200263][ T29] audit: type=1400 audit(1763527351.509:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.220794][ T29] audit: type=1400 audit(1763527351.509:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.230281][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.241157][ T29] audit: type=1400 audit(1763527351.509:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.270415][ T29] audit: type=1400 audit(1763527351.509:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.295629][ T29] audit: type=1400 audit(1763527351.509:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.305975][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.319189][ T29] audit: type=1400 audit(1763527351.599:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.214131][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 31.308980][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.316130][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.323474][ T3312] bridge_slave_0: entered allmulticast mode [ 31.329927][ T3312] bridge_slave_0: entered promiscuous mode [ 31.340492][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.347619][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.358496][ T3312] bridge_slave_1: entered allmulticast mode [ 31.364929][ T3312] bridge_slave_1: entered promiscuous mode [ 31.396295][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.407685][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.443529][ T3312] team0: Port device team_slave_0 added [ 31.462751][ T3312] team0: Port device team_slave_1 added [ 31.492624][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.499661][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.525705][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.546231][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.553234][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.579363][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.623696][ T3312] hsr_slave_0: entered promiscuous mode [ 31.629931][ T3312] hsr_slave_1: entered promiscuous mode [ 31.709382][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 31.764071][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 31.792416][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.803601][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 31.845588][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.852782][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.860161][ T3326] bridge_slave_0: entered allmulticast mode [ 31.866627][ T3326] bridge_slave_0: entered promiscuous mode [ 31.891246][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.898454][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.905724][ T3326] bridge_slave_1: entered allmulticast mode [ 31.912127][ T3326] bridge_slave_1: entered promiscuous mode [ 31.970692][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.979929][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.987114][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.994647][ T3321] bridge_slave_0: entered allmulticast mode [ 32.001056][ T3321] bridge_slave_0: entered promiscuous mode [ 32.007967][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.015145][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.022439][ T3321] bridge_slave_1: entered allmulticast mode [ 32.029011][ T3321] bridge_slave_1: entered promiscuous mode [ 32.045403][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.052488][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.061858][ T3323] bridge_slave_0: entered allmulticast mode [ 32.068305][ T3323] bridge_slave_0: entered promiscuous mode [ 32.075879][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.085102][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.092187][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.099418][ T3323] bridge_slave_1: entered allmulticast mode [ 32.105974][ T3323] bridge_slave_1: entered promiscuous mode [ 32.124527][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.131841][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.139086][ T3324] bridge_slave_0: entered allmulticast mode [ 32.145524][ T3324] bridge_slave_0: entered promiscuous mode [ 32.173817][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.181015][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.188228][ T3324] bridge_slave_1: entered allmulticast mode [ 32.194766][ T3324] bridge_slave_1: entered promiscuous mode [ 32.214362][ T3326] team0: Port device team_slave_0 added [ 32.221479][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.231217][ T3326] team0: Port device team_slave_1 added [ 32.243632][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.254868][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.265395][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.280277][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.294679][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.309185][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.323931][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.330925][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.356914][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.367742][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.391110][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.398120][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.424283][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.435112][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.444256][ T3321] team0: Port device team_slave_0 added [ 32.455587][ T3323] team0: Port device team_slave_0 added [ 32.465315][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.474955][ T3321] team0: Port device team_slave_1 added [ 32.486416][ T3324] team0: Port device team_slave_0 added [ 32.492717][ T3323] team0: Port device team_slave_1 added [ 32.505593][ T3324] team0: Port device team_slave_1 added [ 32.518099][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.525076][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.551285][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.577799][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.584798][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.610776][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.629659][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.636628][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.662706][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.680282][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.687314][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.713626][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.724938][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.731927][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.758025][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.770946][ T3326] hsr_slave_0: entered promiscuous mode [ 32.776932][ T3326] hsr_slave_1: entered promiscuous mode [ 32.782862][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 32.788672][ T3326] Cannot create hsr debugfs directory [ 32.796045][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.803063][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.829067][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.865351][ T3321] hsr_slave_0: entered promiscuous mode [ 32.871513][ T3321] hsr_slave_1: entered promiscuous mode [ 32.877603][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 32.883348][ T3321] Cannot create hsr debugfs directory [ 32.915227][ T3323] hsr_slave_0: entered promiscuous mode [ 32.921382][ T3323] hsr_slave_1: entered promiscuous mode [ 32.927368][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.933097][ T3323] Cannot create hsr debugfs directory [ 32.973433][ T3324] hsr_slave_0: entered promiscuous mode [ 32.979607][ T3324] hsr_slave_1: entered promiscuous mode [ 32.985390][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 32.991469][ T3324] Cannot create hsr debugfs directory [ 33.137554][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.146652][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.161754][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.170869][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.203021][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.211438][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.220703][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.229686][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.238732][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.267806][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.288782][ T1478] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.295906][ T1478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.308788][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.318077][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.326982][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.337791][ T1478] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.344878][ T1478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.360808][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.387288][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.396096][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.405743][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.415218][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.453062][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.475883][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.486912][ T1478] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.494138][ T1478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.513919][ T1478] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.521010][ T1478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.555803][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.586595][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.599869][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.620476][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.627583][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.636138][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.643204][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.658033][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.669716][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.693377][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.709660][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.738372][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.746360][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.781111][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.788293][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.808108][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.815261][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.835057][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.842249][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.873070][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.880245][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.893648][ T3312] veth0_vlan: entered promiscuous mode [ 33.903581][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.923062][ T3312] veth1_vlan: entered promiscuous mode [ 33.990936][ T3312] veth0_macvtap: entered promiscuous mode [ 34.008487][ T3312] veth1_macvtap: entered promiscuous mode [ 34.040625][ T3326] veth0_vlan: entered promiscuous mode [ 34.055784][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.065751][ T3326] veth1_vlan: entered promiscuous mode [ 34.076328][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.092795][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.107315][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.119033][ T3326] veth0_macvtap: entered promiscuous mode [ 34.137993][ T3326] veth1_macvtap: entered promiscuous mode [ 34.146200][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.155471][ T3321] veth0_vlan: entered promiscuous mode [ 34.167772][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.177766][ T3321] veth1_vlan: entered promiscuous mode [ 34.188777][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.210313][ T3321] veth0_macvtap: entered promiscuous mode [ 34.221347][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.228732][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.238950][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.259509][ T3321] veth1_macvtap: entered promiscuous mode [ 34.276706][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.289192][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.289208][ T29] audit: type=1400 audit(1763527356.629:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.t2g4Mb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.320455][ T29] audit: type=1400 audit(1763527356.629:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.326789][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.342608][ T29] audit: type=1400 audit(1763527356.629:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.t2g4Mb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.342684][ T29] audit: type=1400 audit(1763527356.629:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.352570][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.375186][ T29] audit: type=1400 audit(1763527356.629:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.t2g4Mb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.375223][ T29] audit: type=1400 audit(1763527356.629:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.t2g4Mb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.458365][ T29] audit: type=1400 audit(1763527356.629:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.482354][ T29] audit: type=1400 audit(1763527356.819:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.505129][ T29] audit: type=1400 audit(1763527356.819:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.508201][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.548117][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.559452][ T3324] veth0_vlan: entered promiscuous mode [ 34.569598][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.583442][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.593699][ T3324] veth1_vlan: entered promiscuous mode [ 34.614862][ T3324] veth0_macvtap: entered promiscuous mode [ 34.621917][ T29] audit: type=1400 audit(1763527356.949:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.652897][ T3324] veth1_macvtap: entered promiscuous mode [ 34.691872][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.709281][ T3323] veth0_vlan: entered promiscuous mode [ 34.717171][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.730036][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.746866][ T3323] veth1_vlan: entered promiscuous mode [ 34.757026][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.126434][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.149472][ T3323] veth0_macvtap: entered promiscuous mode [ 35.200387][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.215453][ T3323] veth1_macvtap: entered promiscuous mode [ 35.226158][ T3500] loop1: detected capacity change from 0 to 2048 [ 35.257952][ T1478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.271542][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.317293][ T1478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.326062][ T1478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.335315][ T3306] Alternate GPT is invalid, using primary GPT. [ 35.341745][ T3306] loop1: p1 p2 p3 [ 35.348452][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.365712][ T1478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.378496][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.378731][ T3500] Alternate GPT is invalid, using primary GPT. [ 35.393576][ T3500] loop1: p1 p2 p3 [ 35.415597][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.452461][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.485489][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.516335][ T3512] udevd[3512]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 35.527334][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 35.541739][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 35.589246][ T3515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.813979][ T3524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.863959][ T3532] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 35.874417][ T3532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.883138][ T3532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.910930][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 36.003262][ T3546] loop4: detected capacity change from 0 to 512 [ 36.010435][ T3546] EXT4-fs: dax option not supported [ 36.030640][ T3546] atomic_op ffff88811a28f128 conn xmit_atomic 0000000000000000 [ 36.243151][ T3567] loop3: detected capacity change from 0 to 2048 [ 36.259053][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.271811][ T3567] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.286256][ T3567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.295298][ T3567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.357708][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 36.579083][ T3582] loop1: detected capacity change from 0 to 512 [ 36.592551][ T3582] EXT4-fs: dax option not supported [ 36.631497][ T3582] atomic_op ffff88811a28f128 conn xmit_atomic 0000000000000000 [ 36.706217][ T3602] loop2: detected capacity change from 0 to 512 [ 36.713203][ T3602] EXT4-fs: dax option not supported [ 36.724766][ T3602] atomic_op ffff88811a2e6928 conn xmit_atomic 0000000000000000 [ 36.734563][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.741773][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.804995][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.811901][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.815764][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.825870][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.836206][ T3613] program syz.2.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.884020][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.893739][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.906320][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.915673][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.001526][ T3623] loop2: detected capacity change from 0 to 1024 [ 37.010341][ T3623] ======================================================= [ 37.010341][ T3623] WARNING: The mand mount option has been deprecated and [ 37.010341][ T3623] and is ignored by this kernel. Remove the mand [ 37.010341][ T3623] option from the mount to silence this warning. [ 37.010341][ T3623] ======================================================= [ 37.053903][ T3623] EXT4-fs: Ignoring removed nobh option [ 37.059708][ T3623] EXT4-fs: Ignoring removed bh option [ 37.080921][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.096603][ T3623] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 37.146562][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 37.164671][ T3623] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 37.179729][ T3623] team1: entered promiscuous mode [ 37.184894][ T3623] team1: entered allmulticast mode [ 37.191274][ T3623] Zero length message leads to an empty skb [ 37.222014][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.301263][ C1] hrtimer: interrupt took 28401 ns [ 37.699441][ T3637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.714860][ T3637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.749114][ T3643] netlink: '+}[@': attribute type 4 has an invalid length. [ 37.820813][ T3570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 37.857146][ T3570] EXT4-fs (loop3): Remounting filesystem read-only [ 37.917843][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 37.926621][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 37.952136][ T3653] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 37.980272][ T3654] loop1: detected capacity change from 0 to 512 [ 38.003793][ T3654] EXT4-fs: dax option not supported [ 38.051200][ T3654] atomic_op ffff88811a2e4d28 conn xmit_atomic 0000000000000000 [ 38.284154][ T3672] capability: warning: `syz.4.48' uses deprecated v2 capabilities in a way that may be insecure [ 38.318433][ T3675] loop1: detected capacity change from 0 to 512 [ 38.344482][ T3675] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.49: iget: bad i_size value: 38620345925642 [ 38.407152][ T3675] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.49: couldn't read orphan inode 15 (err -117) [ 38.432425][ T3683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3683 comm=syz.2.52 [ 38.446570][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.552984][ T3695] loop4: detected capacity change from 0 to 512 [ 38.564434][ T3695] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.55: inode has both inline data and extents flags [ 38.578085][ T3695] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.55: couldn't read orphan inode 15 (err -117) [ 38.596141][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.602291][ T3700] loop2: detected capacity change from 0 to 512 [ 38.611957][ T3695] syz_tun: entered allmulticast mode [ 38.627458][ T3700] EXT4-fs: dax option not supported [ 38.635628][ T3700] atomic_op ffff88811e0d3928 conn xmit_atomic 0000000000000000 [ 38.649831][ T3694] syz_tun: left allmulticast mode [ 38.671152][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.212389][ T3731] loop4: detected capacity change from 0 to 128 [ 39.225951][ T3731] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 39.257374][ T3679] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 39.286546][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.301250][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 39.301324][ T29] audit: type=1326 audit(1763527361.639:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 39.338054][ T29] audit: type=1400 audit(1763527361.649:624): avc: denied { connect } for pid=3730 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.357337][ T29] audit: type=1400 audit(1763527361.649:625): avc: denied { ioctl } for pid=3730 comm="syz.4.61" path="socket:[6191]" dev="sockfs" ino=6191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.381576][ T29] audit: type=1400 audit(1763527361.649:626): avc: denied { write } for pid=3730 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.400796][ T29] audit: type=1326 audit(1763527361.679:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 39.442103][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.548404][ T3745] loop0: detected capacity change from 0 to 512 [ 39.580341][ T29] audit: type=1400 audit(1763527361.919:628): avc: denied { mounton } for pid=3747 comm="syz.1.67" path="/proc/35/task" dev="proc" ino=5247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 39.615248][ T3745] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.65: iget: bad i_size value: 38620345925642 [ 39.636444][ T3745] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 39.704840][ T3745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.790213][ T29] audit: type=1400 audit(1763527362.119:629): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.810268][ T3760] loop2: detected capacity change from 0 to 8192 [ 39.927560][ T3760] loop2: p1 p2 p3 p4[DM] [ 39.932055][ T3760] loop2: p1 size 835329 extends beyond EOD, truncated [ 39.956377][ T3760] loop2: p2 size 327680 extends beyond EOD, truncated [ 39.999385][ T3760] loop2: p3 start 1052673 is beyond EOD, truncated [ 40.005947][ T3760] loop2: p4 size 262144 extends beyond EOD, truncated [ 40.083791][ T3781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 40.146610][ T3781] loop2: detected capacity change from 0 to 136 [ 40.158841][ T29] audit: type=1400 audit(1763527362.499:630): avc: denied { mount } for pid=3780 comm="syz.2.80" name="/" dev="loop2" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.182667][ T3781] team0: No ports can be present during mode change [ 40.196733][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.196838][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 40.219094][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 40.240535][ T29] audit: type=1400 audit(1763527362.569:631): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.395388][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.396351][ T3768] loop1: detected capacity change from 0 to 512 [ 40.524890][ T3768] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 40.568493][ T3768] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.661037][ T3815] loop4: detected capacity change from 0 to 512 [ 40.671027][ T3768] EXT4-fs (loop1): mount failed [ 40.727333][ T3815] journal_path: Non-blockdev passed as './bus' [ 40.733795][ T3815] EXT4-fs: error: could not find journal device path [ 40.815056][ T3815] atomic_op ffff88811a297d28 conn xmit_atomic 0000000000000000 [ 41.289277][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 41.298233][ T3851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 41.643869][ T3861] loop2: detected capacity change from 0 to 8192 [ 41.697697][ T3513] loop2: p1 p2 p3 p4[DM] [ 41.702181][ T3513] loop2: p1 size 835329 extends beyond EOD, truncated [ 41.713646][ T3513] loop2: p2 size 327680 extends beyond EOD, truncated [ 41.735356][ T3513] loop2: p3 start 1052673 is beyond EOD, truncated [ 41.741970][ T3513] loop2: p4 size 262144 extends beyond EOD, truncated [ 41.759292][ T3861] loop2: p1 p2 p3 p4[DM] [ 41.765250][ T3861] loop2: p1 size 835329 extends beyond EOD, truncated [ 41.781599][ T3861] loop2: p2 size 327680 extends beyond EOD, truncated [ 41.798605][ T3861] loop2: p3 start 1052673 is beyond EOD, truncated [ 41.805305][ T3861] loop2: p4 size 262144 extends beyond EOD, truncated [ 41.903329][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 41.913874][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 41.925248][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 42.167247][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 42.183758][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.196968][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.659459][ T3904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.310935][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.318234][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.508020][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.593507][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.717887][ T3936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 43.782812][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.812574][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.840295][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.864764][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.977261][ T23] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 44.817773][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.825081][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.896087][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.906555][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.001068][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 45.010165][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.027243][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.036931][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 45.036950][ T29] audit: type=1326 audit(1763527367.359:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.066371][ T29] audit: type=1326 audit(1763527367.359:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.089786][ T29] audit: type=1326 audit(1763527367.359:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.113084][ T29] audit: type=1326 audit(1763527367.359:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.136357][ T29] audit: type=1326 audit(1763527367.359:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.159631][ T29] audit: type=1326 audit(1763527367.359:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.182879][ T29] audit: type=1326 audit(1763527367.359:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24fb77f6c9 code=0x7ffc0000 [ 45.206331][ T29] audit: type=1326 audit(1763527367.359:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24fb7815e7 code=0x7ffc0000 [ 45.206509][ T4024] loop2: detected capacity change from 0 to 136 [ 45.229538][ T29] audit: type=1326 audit(1763527367.359:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f24fb78155c code=0x7ffc0000 [ 45.259176][ T29] audit: type=1326 audit(1763527367.359:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f24fb781494 code=0x7ffc0000 [ 45.302327][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.307335][ T4016] loop1: detected capacity change from 0 to 512 [ 45.312149][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.341197][ T4016] journal_path: Non-blockdev passed as './bus' [ 45.347438][ T4016] EXT4-fs: error: could not find journal device path [ 45.365287][ T4016] atomic_op ffff88810104c528 conn xmit_atomic 0000000000000000 [ 45.388327][ T4014] team0: No ports can be present during mode change [ 46.838193][ T4086] loop3: detected capacity change from 0 to 512 [ 46.847656][ T4086] journal_path: Non-blockdev passed as './bus' [ 46.853884][ T4086] EXT4-fs: error: could not find journal device path [ 46.899963][ T4086] atomic_op ffff88811a295d28 conn xmit_atomic 0000000000000000 [ 47.238935][ T4094] loop3: detected capacity change from 0 to 512 [ 47.381673][ T4094] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.185: inode has both inline data and extents flags [ 47.433624][ T4094] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.185: couldn't read orphan inode 15 (err -117) [ 47.488304][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.519671][ T4094] syz_tun: entered allmulticast mode [ 47.544976][ T4093] syz_tun: left allmulticast mode [ 47.576653][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.930537][ T4210] loop1: detected capacity change from 0 to 512 [ 48.966036][ T4210] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.220: inode has both inline data and extents flags [ 49.050431][ T4210] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.220: couldn't read orphan inode 15 (err -117) [ 49.072945][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.079026][ T4217] loop0: detected capacity change from 0 to 136 [ 49.092669][ T4203] syz_tun: entered allmulticast mode [ 49.110471][ T4202] syz_tun: left allmulticast mode [ 49.144551][ T4217] team0: No ports can be present during mode change [ 49.150045][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.428973][ T4270] loop0: detected capacity change from 0 to 136 [ 49.438266][ T4270] team0: No ports can be present during mode change [ 49.463229][ T4272] loop1: detected capacity change from 0 to 512 [ 49.478840][ T4272] journal_path: Non-blockdev passed as './bus' [ 49.485078][ T4272] EXT4-fs: error: could not find journal device path [ 49.509866][ T4272] atomic_op ffff88811a296528 conn xmit_atomic 0000000000000000 [ 49.605220][ T4292] loop3: detected capacity change from 0 to 512 [ 49.616452][ T4292] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.253: inode has both inline data and extents flags [ 49.629916][ T4292] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.253: couldn't read orphan inode 15 (err -117) [ 49.642272][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.655737][ T4292] syz_tun: entered allmulticast mode [ 49.666454][ T4291] syz_tun: left allmulticast mode [ 49.680705][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.803276][ T4312] loop3: detected capacity change from 0 to 512 [ 49.819892][ T4312] journal_path: Non-blockdev passed as './bus' [ 49.826172][ T4312] EXT4-fs: error: could not find journal device path [ 49.864207][ T4312] atomic_op ffff88811a0f0128 conn xmit_atomic 0000000000000000 [ 49.864756][ T4318] loop2: detected capacity change from 0 to 512 [ 49.881544][ T4318] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.264: inode has both inline data and extents flags [ 49.895390][ T4318] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.264: couldn't read orphan inode 15 (err -117) [ 49.911049][ T4318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.924576][ T4318] syz_tun: entered allmulticast mode [ 49.937162][ T4317] syz_tun: left allmulticast mode [ 49.952753][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.038709][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 50.038727][ T29] audit: type=1326 audit(1763527372.379:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.069039][ T29] audit: type=1326 audit(1763527372.389:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.092572][ T29] audit: type=1326 audit(1763527372.399:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.116149][ T29] audit: type=1326 audit(1763527372.409:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.139495][ T29] audit: type=1326 audit(1763527372.429:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.162779][ T29] audit: type=1326 audit(1763527372.439:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.186222][ T29] audit: type=1326 audit(1763527372.449:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.217693][ T29] audit: type=1326 audit(1763527372.549:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.241458][ T29] audit: type=1326 audit(1763527372.589:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.265097][ T29] audit: type=1326 audit(1763527372.609:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2faf3bf6c9 code=0x7ffc0000 [ 50.321997][ T4349] loop2: detected capacity change from 0 to 512 [ 50.330434][ T4349] journal_path: Non-blockdev passed as './bus' [ 50.336819][ T4349] EXT4-fs: error: could not find journal device path [ 50.347336][ T4349] atomic_op ffff88811a297128 conn xmit_atomic 0000000000000000 [ 50.595339][ T4367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.983191][ T4381] loop1: detected capacity change from 0 to 512 [ 50.991006][ T4381] journal_path: Non-blockdev passed as './bus' [ 50.997301][ T4381] EXT4-fs: error: could not find journal device path [ 51.018231][ T4381] atomic_op ffff88811a297128 conn xmit_atomic 0000000000000000 [ 51.231476][ T4401] loop3: detected capacity change from 0 to 512 [ 51.246645][ T4401] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.299: inode has both inline data and extents flags [ 51.260869][ T4401] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 51.274391][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.288323][ T4401] syz_tun: entered allmulticast mode [ 51.300217][ T4400] syz_tun: left allmulticast mode [ 51.317711][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.442831][ T4413] loop3: detected capacity change from 0 to 512 [ 51.455403][ T4413] journal_path: Non-blockdev passed as './bus' [ 51.461798][ T4413] EXT4-fs: error: could not find journal device path [ 51.467910][ T4417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 51.485683][ T4417] loop4: detected capacity change from 0 to 136 [ 51.495832][ T4413] atomic_op ffff88811a295928 conn xmit_atomic 0000000000000000 [ 51.504494][ T4417] team0: No ports can be present during mode change [ 52.216076][ T4449] lo: Caught tx_queue_len zero misconfig [ 52.221828][ T4449] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.253945][ T4452] loop0: detected capacity change from 0 to 512 [ 52.260668][ T4452] journal_path: Non-blockdev passed as './bus' [ 52.266857][ T4452] EXT4-fs: error: could not find journal device path [ 52.282976][ T4452] atomic_op ffff88811a297128 conn xmit_atomic 0000000000000000 [ 52.570922][ T4475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 52.587375][ T4475] loop0: detected capacity change from 0 to 136 [ 52.610841][ T4475] team0: No ports can be present during mode change [ 53.244100][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 53.259009][ T4520] loop1: detected capacity change from 0 to 512 [ 53.272568][ T4521] loop3: detected capacity change from 0 to 136 [ 53.279838][ T4520] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.347: inode has both inline data and extents flags [ 53.325260][ T4521] team0: No ports can be present during mode change [ 53.493875][ T4520] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.347: couldn't read orphan inode 15 (err -117) [ 53.690542][ T4520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.824356][ T4520] syz_tun: entered allmulticast mode [ 53.837924][ T4517] syz_tun: left allmulticast mode [ 53.868415][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.042051][ T4562] bridge_slave_0: left allmulticast mode [ 54.047780][ T4562] bridge_slave_0: left promiscuous mode [ 54.053487][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.071055][ T4562] bridge_slave_1: left allmulticast mode [ 54.076772][ T4562] bridge_slave_1: left promiscuous mode [ 54.082671][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.090029][ T4568] loop4: detected capacity change from 0 to 136 [ 54.120425][ T4562] bond0: (slave bond_slave_0): Releasing backup interface [ 54.143564][ T4562] bond0: (slave bond_slave_1): Releasing backup interface [ 54.159141][ T4562] team0: Failed to send options change via netlink (err -105) [ 54.166890][ T4562] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 54.176989][ T4562] team0: Port device team_slave_0 removed [ 54.186118][ T4562] team0: Failed to send options change via netlink (err -105) [ 54.194675][ T4562] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 54.205038][ T4562] team0: Port device team_slave_1 removed [ 54.213407][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.220903][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.233445][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.241014][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.251006][ T4562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.292882][ T4568] team0: Failed to send options change via netlink (err -105) [ 54.300478][ T4568] team0: Mode changed to "loadbalance" [ 54.496225][ T4606] loop4: detected capacity change from 0 to 512 [ 54.503060][ T4606] journal_path: Non-blockdev passed as './bus' [ 54.509407][ T4606] EXT4-fs: error: could not find journal device path [ 54.519716][ T4606] atomic_op ffff88811a0f2928 conn xmit_atomic 0000000000000000 [ 54.612307][ T4615] loop3: detected capacity change from 0 to 512 [ 54.623076][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.384: inode has both inline data and extents flags [ 54.653496][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.384: couldn't read orphan inode 15 (err -117) [ 54.656982][ T4624] bridge_slave_0: left allmulticast mode [ 54.671121][ T4624] bridge_slave_0: left promiscuous mode [ 54.676864][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.700267][ T4624] bridge_slave_1: left allmulticast mode [ 54.706056][ T4624] bridge_slave_1: left promiscuous mode [ 54.711841][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.712527][ T4615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.734498][ T4624] bond0: (slave bond_slave_0): Releasing backup interface [ 54.742756][ T4625] loop0: detected capacity change from 0 to 136 [ 54.749637][ T4624] bond0: (slave bond_slave_1): Releasing backup interface [ 54.767397][ T4624] team0: Port device team_slave_0 removed [ 54.778400][ T4624] team0: Port device team_slave_1 removed [ 54.784423][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.797873][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.808453][ T4624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.824571][ T4615] syz_tun: entered allmulticast mode [ 54.831441][ T4625] team0: Failed to send options change via netlink (err -105) [ 54.838977][ T4625] team0: Mode changed to "loadbalance" [ 54.850253][ T4614] syz_tun: left allmulticast mode [ 54.872768][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.966773][ T4640] loop4: detected capacity change from 0 to 512 [ 54.976213][ T4640] journal_path: Non-blockdev passed as './bus' [ 54.982559][ T4640] EXT4-fs: error: could not find journal device path [ 54.994659][ T4640] atomic_op ffff88811a0f2928 conn xmit_atomic 0000000000000000 [ 55.042876][ T4647] loop3: detected capacity change from 0 to 512 [ 55.053397][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 55.053412][ T29] audit: type=1326 audit(1763527377.389:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.084144][ T4647] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.397: iget: bad i_size value: 38620345925642 [ 55.090066][ T29] audit: type=1326 audit(1763527377.399:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.0.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2faf3bf6c9 code=0x0 [ 55.104726][ T4647] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.397: couldn't read orphan inode 15 (err -117) [ 55.119810][ T29] audit: type=1326 audit(1763527377.429:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.134472][ T4647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.168417][ T29] audit: type=1326 audit(1763527377.479:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.191816][ T29] audit: type=1326 audit(1763527377.509:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.215844][ T29] audit: type=1326 audit(1763527377.529:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.239226][ T29] audit: type=1326 audit(1763527377.549:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.265725][ T29] audit: type=1326 audit(1763527377.559:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.289269][ T29] audit: type=1326 audit(1763527377.569:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.301339][ T4655] loop4: detected capacity change from 0 to 512 [ 55.313083][ T29] audit: type=1326 audit(1763527377.589:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcbf188f6c9 code=0x7ffc0000 [ 55.344503][ T4655] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.400: inode has both inline data and extents flags [ 55.367387][ T4655] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.400: couldn't read orphan inode 15 (err -117) [ 55.384186][ T4655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.399741][ T4655] syz_tun: entered allmulticast mode [ 55.411687][ T4654] syz_tun: left allmulticast mode [ 55.429953][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.885136][ T4718] loop0: detected capacity change from 0 to 512 [ 55.895993][ T4718] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.425: inode has both inline data and extents flags [ 55.909709][ T4718] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.425: couldn't read orphan inode 15 (err -117) [ 55.922849][ T4718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.936251][ T4718] syz_tun: entered allmulticast mode [ 55.947099][ T4717] syz_tun: left allmulticast mode [ 55.963497][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.964752][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.049990][ T4735] netlink: 136 bytes leftover after parsing attributes in process `syz.4.430'. [ 56.149243][ T4753] loop4: detected capacity change from 0 to 512 [ 56.156071][ T4753] journal_path: Non-blockdev passed as './bus' [ 56.162328][ T4753] EXT4-fs: error: could not find journal device path [ 56.179920][ T4741] atomic_op ffff88811a296528 conn xmit_atomic 0000000000000000 [ 56.216628][ T4759] loop1: detected capacity change from 0 to 512 [ 56.225886][ T4759] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.437: iget: bad i_size value: 38620345925642 [ 56.239005][ T4759] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.437: couldn't read orphan inode 15 (err -117) [ 56.253453][ T4759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.553350][ T4780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 56.564027][ T4780] loop4: detected capacity change from 0 to 136 [ 56.573899][ T4780] team0: Unable to change to the same mode the team is in [ 57.106102][ T4791] loop3: detected capacity change from 0 to 512 [ 57.114610][ T4791] journal_path: Non-blockdev passed as './bus' [ 57.120867][ T4791] EXT4-fs: error: could not find journal device path [ 57.267953][ T4791] atomic_op ffff8881196ded28 conn xmit_atomic 0000000000000000 [ 57.318882][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.557907][ T4826] loop4: detected capacity change from 0 to 512 [ 57.587493][ T4826] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.458: inode has both inline data and extents flags [ 57.612205][ T4826] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.458: couldn't read orphan inode 15 (err -117) [ 57.624811][ T4826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.697716][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.726828][ T4836] loop1: detected capacity change from 0 to 512 [ 57.733700][ T4836] journal_path: Non-blockdev passed as './bus' [ 57.739959][ T4836] EXT4-fs: error: could not find journal device path [ 57.748698][ T4836] atomic_op ffff8881026a8128 conn xmit_atomic 0000000000000000 [ 57.781416][ T4840] loop1: detected capacity change from 0 to 512 [ 57.793041][ T4840] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.463: iget: bad i_size value: 38620345925642 [ 57.806283][ T4840] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.463: couldn't read orphan inode 15 (err -117) [ 57.823212][ T4840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.011731][ T4854] netlink: 76 bytes leftover after parsing attributes in process `syz.2.467'. [ 58.159735][ T4864] loop3: detected capacity change from 0 to 512 [ 58.187158][ T4864] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.472: inode has both inline data and extents flags [ 58.223898][ T4873] loop4: detected capacity change from 0 to 512 [ 58.241919][ T4864] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.472: couldn't read orphan inode 15 (err -117) [ 58.254704][ T4873] journal_path: Non-blockdev passed as './bus' [ 58.261010][ T4873] EXT4-fs: error: could not find journal device path [ 58.266686][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.278156][ T4873] atomic_op ffff88811a2ef928 conn xmit_atomic 0000000000000000 [ 58.329310][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.371461][ T4888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.481'. [ 58.730583][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.779233][ T4918] loop1: detected capacity change from 0 to 512 [ 58.790527][ T4918] journal_path: Non-blockdev passed as './bus' [ 58.796808][ T4918] EXT4-fs: error: could not find journal device path [ 58.834719][ T4918] atomic_op ffff88811a2e5528 conn xmit_atomic 0000000000000000 [ 58.836158][ T4922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.493'. [ 59.039060][ T4945] loop0: detected capacity change from 0 to 512 [ 59.051320][ T4945] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.503: iget: bad i_size value: 38620345925642 [ 59.084070][ T4945] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.503: couldn't read orphan inode 15 (err -117) [ 59.097510][ T4945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.305800][ T4954] loop3: detected capacity change from 0 to 512 [ 59.312550][ T4954] journal_path: Non-blockdev passed as './bus' [ 59.318845][ T4954] EXT4-fs: error: could not find journal device path [ 59.326928][ T4954] atomic_op ffff88811a28c928 conn xmit_atomic 0000000000000000 [ 59.405160][ T4958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.506'. [ 59.710215][ T4990] netlink: 68 bytes leftover after parsing attributes in process `syz.2.520'. [ 60.155996][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.523347][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 60.523364][ T29] audit: type=1326 audit(1763527382.859:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.599253][ T29] audit: type=1326 audit(1763527382.899:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.622763][ T29] audit: type=1326 audit(1763527382.899:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.646308][ T29] audit: type=1326 audit(1763527382.899:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.669744][ T29] audit: type=1326 audit(1763527382.899:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.679217][ T5026] netlink: 64 bytes leftover after parsing attributes in process `syz.3.534'. [ 60.693122][ T29] audit: type=1326 audit(1763527382.899:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.725402][ T29] audit: type=1326 audit(1763527382.899:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.748746][ T29] audit: type=1326 audit(1763527382.899:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.772007][ T29] audit: type=1326 audit(1763527382.899:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 60.795384][ T29] audit: type=1326 audit(1763527382.899:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cdfb1f6c9 code=0x7ffc0000 [ 61.008703][ T5042] loop4: detected capacity change from 0 to 512 [ 61.017448][ T5042] journal_path: Non-blockdev passed as './bus' [ 61.023659][ T5042] EXT4-fs: error: could not find journal device path [ 61.060890][ T5042] atomic_op ffff88811e0d2928 conn xmit_atomic 0000000000000000 [ 61.297431][ T5063] netlink: 64 bytes leftover after parsing attributes in process `syz.3.548'. [ 61.555752][ T5091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.580417][ T5091] loop0: detected capacity change from 0 to 136 [ 61.652597][ T5098] netlink: 64 bytes leftover after parsing attributes in process `syz.4.562'. [ 61.764260][ T5114] loop2: detected capacity change from 0 to 512 [ 61.813837][ T5114] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.569: iget: bad i_size value: 38620345925642 [ 61.845495][ T5114] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.569: couldn't read orphan inode 15 (err -117) [ 61.858962][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.874464][ T5129] bridge_slave_0: left allmulticast mode [ 61.880194][ T5129] bridge_slave_0: left promiscuous mode [ 61.885981][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.894178][ T5129] bridge_slave_1: left allmulticast mode [ 61.900131][ T5129] bridge_slave_1: left promiscuous mode [ 61.905889][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.914361][ T5129] bond0: (slave bond_slave_0): Releasing backup interface [ 61.922315][ T5129] bond0: (slave bond_slave_1): Releasing backup interface [ 61.931487][ T5129] team0: Port device team_slave_0 removed [ 61.938337][ T5129] team0: Port device team_slave_1 removed [ 61.938554][ T5131] loop3: detected capacity change from 0 to 136 [ 61.944302][ T5129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.959429][ T5129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.967244][ T5129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.227855][ T5166] loop1: detected capacity change from 0 to 512 [ 62.234454][ T5166] journal_path: Non-blockdev passed as './bus' [ 62.240682][ T5166] EXT4-fs: error: could not find journal device path [ 62.249467][ T5166] atomic_op ffff88811e0d3928 conn xmit_atomic 0000000000000000 [ 62.260486][ T5169] loop4: detected capacity change from 0 to 512 [ 62.280921][ T5169] journal_path: Non-blockdev passed as './bus' [ 62.287218][ T5169] EXT4-fs: error: could not find journal device path [ 62.304528][ T5172] loop3: detected capacity change from 0 to 512 [ 62.318283][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.594: inode has both inline data and extents flags [ 62.333829][ T5169] atomic_op ffff88811a27f528 conn xmit_atomic 0000000000000000 [ 62.347601][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.594: couldn't read orphan inode 15 (err -117) [ 62.366837][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.409009][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.418870][ T5181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 62.535745][ T5199] loop4: detected capacity change from 0 to 512 [ 62.551701][ T5199] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.607: inode has both inline data and extents flags [ 62.584673][ T5199] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.607: couldn't read orphan inode 15 (err -117) [ 62.602834][ T5199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.635482][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.698391][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.612'. [ 62.742287][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.838605][ T5227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.905662][ T5233] loop1: detected capacity change from 0 to 512 [ 62.929449][ T5227] loop0: detected capacity change from 0 to 136 [ 62.943704][ T5227] team0: Unable to change to the same mode the team is in [ 62.958562][ T5233] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.622: iget: bad i_size value: 38620345925642 [ 62.981659][ T5233] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.622: couldn't read orphan inode 15 (err -117) [ 63.018750][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.039723][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 63.058399][ T5241] bridge2: entered promiscuous mode [ 63.102629][ T5247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 63.310453][ T5271] loop2: detected capacity change from 0 to 512 [ 63.326673][ T5271] journal_path: Non-blockdev passed as './bus' [ 63.332917][ T5271] EXT4-fs: error: could not find journal device path [ 63.364677][ T5271] atomic_op ffff88811e0d2928 conn xmit_atomic 0000000000000000 [ 63.985373][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.102822][ T5306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.131374][ T5306] loop3: detected capacity change from 0 to 136 [ 64.160377][ T5306] team0: Mode changed to "loadbalance" [ 64.178233][ T5314] loop4: detected capacity change from 0 to 512 [ 64.185009][ T5314] journal_path: Non-blockdev passed as './bus' [ 64.191310][ T5314] EXT4-fs: error: could not find journal device path [ 64.218136][ T5314] atomic_op ffff88810006b528 conn xmit_atomic 0000000000000000 [ 64.230568][ T5317] loop1: detected capacity change from 0 to 512 [ 64.302773][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.653: iget: bad i_size value: 38620345925642 [ 64.318112][ T5317] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.653: couldn't read orphan inode 15 (err -117) [ 64.333403][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.418402][ T5342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.449784][ T5342] loop3: detected capacity change from 0 to 136 [ 64.464075][ T5342] team0: Unable to change to the same mode the team is in [ 64.534860][ T5354] loop2: detected capacity change from 0 to 512 [ 64.552913][ T5354] journal_path: Non-blockdev passed as './bus' [ 64.559254][ T5354] EXT4-fs: error: could not find journal device path [ 64.598289][ T5354] atomic_op ffff888118f1c528 conn xmit_atomic 0000000000000000 [ 64.847875][ T5386] loop2: detected capacity change from 0 to 512 [ 64.855009][ T5386] journal_path: Non-blockdev passed as './bus' [ 64.861306][ T5386] EXT4-fs: error: could not find journal device path [ 64.874460][ T5386] atomic_op ffff888104700528 conn xmit_atomic 0000000000000000 [ 65.458739][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.513046][ T5403] ================================================================== [ 65.521180][ T5403] BUG: KCSAN: data-race in bcmp / stack_map_get_build_id_offset [ 65.528837][ T5403] [ 65.531164][ T5403] write to 0xffffc9000f1c4b40 of 4 bytes by task 5406 on cpu 1: [ 65.538798][ T5403] stack_map_get_build_id_offset+0x46b/0x570 [ 65.544799][ T5403] __bpf_get_stackid+0x617/0x800 [ 65.549765][ T5403] bpf_get_stackid+0xe9/0x120 [ 65.554453][ T5403] bpf_get_stackid_raw_tp+0xf6/0x120 [ 65.559758][ T5403] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 65.565224][ T5403] bpf_trace_run4+0x117/0x1d0 [ 65.569918][ T5403] __traceiter_mm_page_alloc+0x3d/0x60 [ 65.575387][ T5403] __alloc_frozen_pages_noprof+0x32d/0x360 [ 65.581218][ T5403] alloc_pages_mpol+0xb3/0x260 [ 65.585999][ T5403] alloc_pages_noprof+0x90/0x130 [ 65.590967][ T5403] __pmd_alloc+0x47/0x420 [ 65.595331][ T5403] copy_page_range+0x38a3/0x3be0 [ 65.600298][ T5403] dup_mmap+0x885/0xf20 [ 65.604460][ T5403] copy_mm+0x11a/0x370 [ 65.608545][ T5403] copy_process+0xd08/0x2000 [ 65.613150][ T5403] kernel_clone+0x16c/0x5c0 [ 65.617670][ T5403] __x64_sys_clone+0xe6/0x120 [ 65.622366][ T5403] x64_sys_call+0x119c/0x3000 [ 65.627057][ T5403] do_syscall_64+0xd2/0x200 [ 65.631568][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.637469][ T5403] [ 65.639793][ T5403] read to 0xffffc9000f1c4b40 of 1 bytes by task 5403 on cpu 0: [ 65.647335][ T5403] bcmp+0x52/0x90 [ 65.650979][ T5403] __bpf_get_stackid+0x65a/0x800 [ 65.655933][ T5403] bpf_get_stackid+0xe9/0x120 [ 65.660620][ T5403] bpf_get_stackid_raw_tp+0xf6/0x120 [ 65.665924][ T5403] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 65.671386][ T5403] bpf_trace_run4+0x117/0x1d0 [ 65.676078][ T5403] __traceiter_mm_page_alloc+0x3d/0x60 [ 65.681545][ T5403] __alloc_frozen_pages_noprof+0x32d/0x360 [ 65.687371][ T5403] alloc_pages_mpol+0xb3/0x260 [ 65.692143][ T5403] alloc_frozen_pages_noprof+0x90/0x110 [ 65.697698][ T5403] allocate_slab+0x96/0x410 [ 65.702218][ T5403] ___slab_alloc+0x49e/0xb60 [ 65.706818][ T5403] __slab_alloc+0x25/0x50 [ 65.711154][ T5403] kmem_cache_alloc_noprof+0x29a/0x480 [ 65.716642][ T5403] __kernfs_new_node+0x6d/0x350 [ 65.721513][ T5403] kernfs_new_node+0xd0/0x140 [ 65.726209][ T5403] __kernfs_create_file+0x4b/0x180 [ 65.731326][ T5403] sysfs_add_file_mode_ns+0x132/0x1c0 [ 65.736708][ T5403] internal_create_group+0x441/0x9e0 [ 65.742006][ T5403] sysfs_create_groups+0x3f/0xf0 [ 65.746966][ T5403] net_rx_queue_update_kobjects+0x1ce/0x540 [ 65.752880][ T5403] netdev_register_kobject+0x17a/0x220 [ 65.758356][ T5403] register_netdevice+0x931/0xf00 [ 65.763395][ T5403] __ip_tunnel_create+0x328/0x450 [ 65.768437][ T5403] ip_tunnel_init_net+0x1ff/0x480 [ 65.773479][ T5403] vti_init_net+0x39/0xf0 [ 65.777813][ T5403] ops_init+0x22a/0x2e0 [ 65.781981][ T5403] setup_net+0x83/0x210 [ 65.786154][ T5403] copy_net_ns+0x28c/0x3b0 [ 65.790583][ T5403] create_new_namespaces+0x20e/0x3d0 [ 65.795889][ T5403] copy_namespaces+0x1ad/0x210 [ 65.800667][ T5403] copy_process+0xd32/0x2000 [ 65.805271][ T5403] kernel_clone+0x16c/0x5c0 [ 65.809788][ T5403] __x64_sys_clone+0xe6/0x120 [ 65.814489][ T5403] x64_sys_call+0x119c/0x3000 [ 65.819177][ T5403] do_syscall_64+0xd2/0x200 [ 65.823689][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.829591][ T5403] [ 65.831912][ T5403] value changed: 0x01 -> 0x02 [ 65.836585][ T5403] [ 65.838915][ T5403] Reported by Kernel Concurrency Sanitizer on: [ 65.845082][ T5403] CPU: 0 UID: 0 PID: 5403 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.854742][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.864802][ T5403] ================================================================== [ 66.190307][ T5403] syz.2.689 (5403) used greatest stack depth: 9520 bytes left