last executing test programs: 1.293505032s ago: executing program 2 (id=340): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 873.217155ms ago: executing program 2 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 779.375895ms ago: executing program 1 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 778.757506ms ago: executing program 3 (id=353): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}}, &(0x7f0000000440)) 728.413876ms ago: executing program 3 (id=354): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 727.701556ms ago: executing program 0 (id=356): unshare(0x2040600) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) 651.253646ms ago: executing program 0 (id=357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008", @ANYRES64=r1], 0x24}}, 0x4000000) 613.549186ms ago: executing program 4 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 584.035767ms ago: executing program 3 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x880) 552.301647ms ago: executing program 1 (id=362): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 547.910837ms ago: executing program 0 (id=363): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x4) 543.920477ms ago: executing program 3 (id=364): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 534.591687ms ago: executing program 4 (id=365): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 533.198877ms ago: executing program 2 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 454.367497ms ago: executing program 3 (id=367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) 452.470587ms ago: executing program 1 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) 397.900217ms ago: executing program 4 (id=369): unshare(0x2040600) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) 344.630948ms ago: executing program 1 (id=370): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010", 0x25}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b", 0x15}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 344.493718ms ago: executing program 4 (id=371): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x4e22, 0xd1, @mcast1}}, 0x1}, 0x90) 272.035428ms ago: executing program 4 (id=372): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 187.804339ms ago: executing program 0 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) 184.845099ms ago: executing program 1 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008", @ANYRES64=r1], 0x24}}, 0x4000000) 140.068439ms ago: executing program 2 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x880) 137.070159ms ago: executing program 0 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 128.383499ms ago: executing program 3 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 107.471279ms ago: executing program 4 (id=378): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 97.399009ms ago: executing program 1 (id=379): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 86.523399ms ago: executing program 2 (id=380): unshare(0x2040600) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) 40.72163ms ago: executing program 0 (id=381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) 0s ago: executing program 2 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 26.524807][ T29] audit: type=1400 audit(1762454726.361:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.547708][ T29] audit: type=1400 audit(1762454726.381:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.548383][ T3305] cgroup: Unknown subsys name 'net' [ 26.575264][ T29] audit: type=1400 audit(1762454726.411:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.708574][ T3305] cgroup: Unknown subsys name 'cpuset' [ 26.714594][ T3305] cgroup: Unknown subsys name 'rlimit' [ 26.864581][ T29] audit: type=1400 audit(1762454726.701:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.889245][ T29] audit: type=1400 audit(1762454726.701:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.909796][ T29] audit: type=1400 audit(1762454726.701:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.930201][ T29] audit: type=1400 audit(1762454726.701:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.936872][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.950458][ T29] audit: type=1400 audit(1762454726.701:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.983735][ T29] audit: type=1400 audit(1762454726.701:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.006969][ T29] audit: type=1400 audit(1762454726.801:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.074866][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.081550][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.151716][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.164676][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.171897][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.179057][ T3316] bridge_slave_0: entered allmulticast mode [ 28.185324][ T3316] bridge_slave_0: entered promiscuous mode [ 28.192000][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.199072][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.206149][ T3316] bridge_slave_1: entered allmulticast mode [ 28.212614][ T3316] bridge_slave_1: entered promiscuous mode [ 28.238717][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.252464][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.271183][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.299757][ T3316] team0: Port device team_slave_0 added [ 28.322562][ T3316] team0: Port device team_slave_1 added [ 28.357560][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.364629][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.371741][ T3315] bridge_slave_0: entered allmulticast mode [ 28.378181][ T3315] bridge_slave_0: entered promiscuous mode [ 28.394093][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 28.404344][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.411428][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.418576][ T3315] bridge_slave_1: entered allmulticast mode [ 28.424814][ T3315] bridge_slave_1: entered promiscuous mode [ 28.435835][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.442795][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.468758][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.492615][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.499697][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.506846][ T3320] bridge_slave_0: entered allmulticast mode [ 28.513081][ T3320] bridge_slave_0: entered promiscuous mode [ 28.524102][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.531049][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.556926][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.573749][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.584430][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.591458][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.598556][ T3320] bridge_slave_1: entered allmulticast mode [ 28.604811][ T3320] bridge_slave_1: entered promiscuous mode [ 28.616128][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.626160][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.667536][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.692275][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.705815][ T3315] team0: Port device team_slave_0 added [ 28.713009][ T3316] hsr_slave_0: entered promiscuous mode [ 28.719129][ T3316] hsr_slave_1: entered promiscuous mode [ 28.731081][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.738185][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.745276][ T3322] bridge_slave_0: entered allmulticast mode [ 28.751704][ T3322] bridge_slave_0: entered promiscuous mode [ 28.758503][ T3315] team0: Port device team_slave_1 added [ 28.764158][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.771218][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.778336][ T3322] bridge_slave_1: entered allmulticast mode [ 28.784681][ T3322] bridge_slave_1: entered promiscuous mode [ 28.815987][ T3320] team0: Port device team_slave_0 added [ 28.831202][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.845863][ T3320] team0: Port device team_slave_1 added [ 28.851691][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.858632][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.884553][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.896325][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.905708][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.912647][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.938588][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.951999][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.959150][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.966210][ T3314] bridge_slave_0: entered allmulticast mode [ 28.972609][ T3314] bridge_slave_0: entered promiscuous mode [ 28.979264][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.986285][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.993363][ T3314] bridge_slave_1: entered allmulticast mode [ 28.999806][ T3314] bridge_slave_1: entered promiscuous mode [ 29.044104][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.051045][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.077080][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.094144][ T3322] team0: Port device team_slave_0 added [ 29.107324][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.119089][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.126019][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.152027][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.163424][ T3322] team0: Port device team_slave_1 added [ 29.174894][ T3315] hsr_slave_0: entered promiscuous mode [ 29.180951][ T3315] hsr_slave_1: entered promiscuous mode [ 29.186610][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.192337][ T3315] Cannot create hsr debugfs directory [ 29.198709][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.222039][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.228990][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.254862][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.267726][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.274691][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.300602][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.332456][ T3314] team0: Port device team_slave_0 added [ 29.339241][ T3314] team0: Port device team_slave_1 added [ 29.385622][ T3322] hsr_slave_0: entered promiscuous mode [ 29.392332][ T3322] hsr_slave_1: entered promiscuous mode [ 29.398198][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 29.403905][ T3322] Cannot create hsr debugfs directory [ 29.413198][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.420183][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.446067][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.476623][ T3320] hsr_slave_0: entered promiscuous mode [ 29.482560][ T3320] hsr_slave_1: entered promiscuous mode [ 29.488347][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 29.494072][ T3320] Cannot create hsr debugfs directory [ 29.500005][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.506931][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.532871][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.578778][ T3314] hsr_slave_0: entered promiscuous mode [ 29.584612][ T3314] hsr_slave_1: entered promiscuous mode [ 29.590417][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.596117][ T3314] Cannot create hsr debugfs directory [ 29.630202][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.655647][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.677897][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.705072][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.729290][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.748159][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.759995][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.781024][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.806666][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.816909][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.825327][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.837503][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.860664][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.879217][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.894542][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.902965][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.938419][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.947072][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.957086][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.965818][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.981289][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.009632][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.018918][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.031149][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.045784][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.061130][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.070529][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.085025][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.092062][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.114964][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.122019][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.130569][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137669][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.146132][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.153204][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.161777][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.168804][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.184900][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.191964][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.222761][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.234786][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.246699][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.253750][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.264096][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.271121][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.306684][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.318892][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.325928][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.343208][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.350298][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.361343][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.421029][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.439649][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.449842][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.480805][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.565760][ T3315] veth0_vlan: entered promiscuous mode [ 30.576811][ T3315] veth1_vlan: entered promiscuous mode [ 30.587119][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.623948][ T3316] veth0_vlan: entered promiscuous mode [ 30.632973][ T3315] veth0_macvtap: entered promiscuous mode [ 30.652611][ T3315] veth1_macvtap: entered promiscuous mode [ 30.661254][ T3316] veth1_vlan: entered promiscuous mode [ 30.667755][ T3322] veth0_vlan: entered promiscuous mode [ 30.681825][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.694578][ T3316] veth0_macvtap: entered promiscuous mode [ 30.710676][ T3322] veth1_vlan: entered promiscuous mode [ 30.719618][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.729526][ T3316] veth1_macvtap: entered promiscuous mode [ 30.742536][ T1625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.753858][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.766710][ T3320] veth0_vlan: entered promiscuous mode [ 30.777025][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.788364][ T1625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.802074][ T3314] veth0_vlan: entered promiscuous mode [ 30.813949][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823389][ T3322] veth0_macvtap: entered promiscuous mode [ 30.830855][ T3322] veth1_macvtap: entered promiscuous mode [ 30.839198][ T3320] veth1_vlan: entered promiscuous mode [ 30.848457][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.857579][ T3314] veth1_vlan: entered promiscuous mode [ 30.865100][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.884240][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.895663][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.908633][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.919540][ T3314] veth0_macvtap: entered promiscuous mode [ 30.929582][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.939543][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.954622][ T3314] veth1_macvtap: entered promiscuous mode [ 30.965715][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.975404][ T3320] veth0_macvtap: entered promiscuous mode [ 30.991680][ T3320] veth1_macvtap: entered promiscuous mode [ 30.998319][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.012378][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.035488][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.048437][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.055861][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.074266][ T3493] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.085163][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.093765][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114046][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.121315][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.156258][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192071][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.208404][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.228859][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237715][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248611][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257746][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.332376][ T3514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13'. [ 31.383171][ T3522] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 31.486508][ T3536] xt_TPROXY: Can be used only with -p tcp or -p udp [ 31.497874][ T3538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.26'. [ 31.555493][ T3545] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 31.588985][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 31.588997][ T29] audit: type=1400 audit(1762454731.431:127): avc: denied { allowed } for pid=3547 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.652421][ T29] audit: type=1400 audit(1762454731.441:128): avc: denied { create } for pid=3547 comm="syz.3.31" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.674197][ T29] audit: type=1400 audit(1762454731.511:129): avc: denied { append } for pid=3554 comm="syz.3.36" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.753552][ T3557] netlink: 'syz.2.33': attribute type 21 has an invalid length. [ 31.770078][ T29] audit: type=1326 audit(1762454731.611:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657eb7f6c9 code=0x7ffc0000 [ 31.793411][ T29] audit: type=1326 audit(1762454731.611:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f657eb7f6c9 code=0x7ffc0000 [ 31.816490][ T29] audit: type=1326 audit(1762454731.611:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657eb7f6c9 code=0x7ffc0000 [ 31.903919][ T3582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3582 comm=syz.2.46 [ 31.931814][ T29] audit: type=1400 audit(1762454731.761:133): avc: denied { audit_write } for pid=3578 comm="syz.2.46" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.952761][ T29] audit: type=1107 audit(1762454731.761:134): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 31.971056][ T3585] loop3: detected capacity change from 0 to 128 [ 32.024767][ T3590] raw_sendmsg: syz.0.50 forgot to set AF_INET. Fix it! [ 32.033852][ T29] audit: type=1400 audit(1762454731.831:135): avc: denied { mount } for pid=3584 comm="syz.3.47" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.055604][ T29] audit: type=1400 audit(1762454731.861:136): avc: denied { create } for pid=3586 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.154655][ T3597] syz.2.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.205180][ T3601] Zero length message leads to an empty skb [ 32.231422][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.231422][ T58] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 32.249993][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.249993][ T58] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 32.278629][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.278629][ T58] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 32.293171][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.293171][ T58] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 32.310262][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.310262][ T58] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 32.323613][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.323613][ T58] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 32.361408][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.361408][ T58] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 32.406118][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.406118][ T58] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 32.431201][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.431201][ T58] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 32.444893][ T58] kworker/u8:4: attempt to access beyond end of device [ 32.444893][ T58] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 32.484712][ C0] hrtimer: interrupt took 41994 ns [ 32.546584][ T3614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 32.555506][ T3614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 32.623220][ T3625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 32.629745][ T3625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 32.637453][ T3625] vhci_hcd vhci_hcd.0: Device attached [ 32.676806][ T3631] vhci_hcd: connection closed [ 32.677277][ T31] vhci_hcd: stop threads [ 32.686258][ T31] vhci_hcd: release socket [ 32.690690][ T31] vhci_hcd: disconnect device [ 32.845133][ T3649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 32.854615][ T3649] IPVS: Error connecting to the multicast addr [ 32.919014][ T3653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'. [ 32.952055][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 32.973698][ T3660] loop0: detected capacity change from 0 to 1024 [ 32.981378][ T3660] ======================================================= [ 32.981378][ T3660] WARNING: The mand mount option has been deprecated and [ 32.981378][ T3660] and is ignored by this kernel. Remove the mand [ 32.981378][ T3660] option from the mount to silence this warning. [ 32.981378][ T3660] ======================================================= [ 33.017631][ T3660] EXT4-fs: Ignoring removed bh option [ 33.054631][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.070251][ T3665] loop2: detected capacity change from 0 to 512 [ 33.093548][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.109392][ T3667] vhci_hcd: invalid port number 96 [ 33.114584][ T3667] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 33.136539][ T3665] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.147070][ T3671] loop1: detected capacity change from 0 to 512 [ 33.160546][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.194939][ T3671] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.242612][ T3671] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.287090][ T3671] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.83: bg 0: block 248: padding at end of block bitmap is not set [ 33.305044][ T3671] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.83: Failed to acquire dquot type 1 [ 33.331164][ T3671] EXT4-fs (loop1): 1 truncate cleaned up [ 33.348788][ T3671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 33.392139][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.421804][ T3671] syz.1.83 (3671) used greatest stack depth: 9392 bytes left [ 33.431251][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 33.448254][ T1764] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 33.461340][ T3695] loop3: detected capacity change from 0 to 512 [ 33.480933][ T3697] netlink: 268 bytes leftover after parsing attributes in process `syz.0.98'. [ 33.481970][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.634411][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.655745][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 33.703419][ T3727] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 33.711178][ T3727] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 33.803986][ T3739] loop0: detected capacity change from 0 to 512 [ 33.812010][ T3739] EXT4-fs (loop0): failed to initialize system zone (-117) [ 33.819375][ T3739] EXT4-fs (loop0): mount failed [ 33.952336][ T3763] IPv6: Can't replace route, no match found [ 34.059855][ T3778] loop2: detected capacity change from 0 to 128 [ 34.087759][ T3778] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.115253][ T3778] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.167267][ T3788] loop0: detected capacity change from 0 to 256 [ 34.174561][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.208702][ T3788] FAT-fs (loop0): Directory bread(block 1285) failed [ 34.223670][ T3788] FAT-fs (loop0): Directory bread(block 1285) failed [ 34.242525][ T3788] FAT-fs (loop0): Directory bread(block 1285) failed [ 34.249348][ T3788] FAT-fs (loop0): Directory bread(block 1285) failed [ 34.415795][ T3822] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 34.430974][ T3826] loop0: detected capacity change from 0 to 128 [ 34.438785][ T3824] loop1: detected capacity change from 0 to 1024 [ 34.472633][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.502595][ T3835] capability: warning: `syz.4.152' uses 32-bit capabilities (legacy support in use) [ 34.543352][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.561545][ T3844] loop4: detected capacity change from 0 to 512 [ 34.574813][ T3844] EXT4-fs: Ignoring removed oldalloc option [ 34.593415][ T3844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.158: Parent and EA inode have the same ino 15 [ 34.607385][ T3844] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.634806][ T3844] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.158: Parent and EA inode have the same ino 15 [ 34.651023][ T3844] EXT4-fs (loop4): 1 orphan inode deleted [ 34.657437][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.699487][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.880213][ T3889] loop3: detected capacity change from 0 to 512 [ 34.910881][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.924659][ T3889] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.964752][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.069269][ T3910] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 35.080643][ T3910] bond1 (unregistering): Released all slaves [ 35.183520][ T3924] syz.3.183 (3924) used greatest stack depth: 8824 bytes left [ 35.223338][ T3933] loop3: detected capacity change from 0 to 512 [ 35.251289][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.297525][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.346146][ T3945] random: crng reseeded on system resumption [ 35.405051][ T3955] loop3: detected capacity change from 0 to 512 [ 35.414259][ T3955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.427359][ T3955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.441184][ T3955] EXT4-fs (loop3): 1 truncate cleaned up [ 35.447287][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.485358][ T3962] loop4: detected capacity change from 0 to 1024 [ 35.509441][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.519799][ T3962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.531986][ T3962] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.572410][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.868268][ T4017] loop1: detected capacity change from 0 to 1024 [ 35.888211][ T4017] EXT4-fs: Ignoring removed orlov option [ 35.920469][ T4017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.133887][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.240956][ T4065] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 36.257913][ T4065] bond1 (unregistering): Released all slaves [ 36.325926][ T4081] loop2: detected capacity change from 0 to 1024 [ 36.332850][ T4081] EXT4-fs: Ignoring removed orlov option [ 36.349373][ T4081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.500545][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.615758][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 36.615772][ T29] audit: type=1400 audit(1762454736.451:273): avc: denied { create } for pid=4118 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.654018][ T29] audit: type=1400 audit(1762454736.481:274): avc: denied { write } for pid=4118 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.792737][ T4145] loop4: detected capacity change from 0 to 512 [ 36.801052][ T4145] EXT4-fs: Ignoring removed bh option [ 36.828593][ T29] audit: type=1400 audit(1762454736.671:275): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.848545][ T4145] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.857556][ T4145] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 36.913885][ T29] audit: type=1326 audit(1762454736.671:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681712f6c9 code=0x7ffc0000 [ 36.937154][ T29] audit: type=1326 audit(1762454736.671:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f681712f6c9 code=0x7ffc0000 [ 36.960647][ T29] audit: type=1326 audit(1762454736.671:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681712f6c9 code=0x7ffc0000 [ 36.960918][ T4145] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 36.983967][ T29] audit: type=1326 audit(1762454736.711:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681712f6c9 code=0x7ffc0000 [ 37.017273][ T4145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 37.027405][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.101995][ T29] audit: type=1326 audit(1762454736.941:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657eb7f6c9 code=0x7ffc0000 [ 37.125266][ T29] audit: type=1326 audit(1762454736.941:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657eb7f6c9 code=0x7ffc0000 [ 37.152844][ T4145] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.154966][ T29] audit: type=1400 audit(1762454736.981:282): avc: denied { associate } for pid=4168 comm="syz.3.289" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.293386][ T4179] __nla_validate_parse: 5 callbacks suppressed [ 37.293406][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 37.337430][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.557761][ T4210] loop0: detected capacity change from 0 to 512 [ 37.566058][ T4210] EXT4-fs: Ignoring removed bh option [ 37.598777][ T4210] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.607834][ T4210] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 37.649025][ T4210] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 37.661004][ T4210] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 37.670753][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.686269][ T4210] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.771212][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.041945][ T4256] process 'syz.3.331' launched './file0' with NULL argv: empty string added [ 38.054106][ T4254] loop1: detected capacity change from 0 to 512 [ 38.069022][ T4254] EXT4-fs: Ignoring removed bh option [ 38.078953][ T4254] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.087999][ T4254] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 38.095361][ T4260] loop4: detected capacity change from 0 to 2048 [ 38.104332][ T4254] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 38.122638][ T4254] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 38.139271][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.169316][ T4254] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.186968][ T4270] 9pnet_fd: p9_fd_create_unix (4270): problem connecting socket: ./file0: -2 [ 38.196810][ T3836] GPT:first_usable_lbas don't match. [ 38.202127][ T3836] GPT:34 != 290 [ 38.205653][ T3836] GPT: Use GNU Parted to correct GPT errors. [ 38.211806][ T3836] loop4: p1 p2 p3 [ 38.238656][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.251234][ T4260] GPT:first_usable_lbas don't match. [ 38.256551][ T4260] GPT:34 != 290 [ 38.260286][ T4260] GPT: Use GNU Parted to correct GPT errors. [ 38.266387][ T4260] loop4: p1 p2 p3 [ 38.316507][ T4282] loop1: detected capacity change from 0 to 512 [ 38.380519][ T3836] udevd[3836]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.397316][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 38.402037][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.438418][ T4282] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.446381][ T4282] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.455500][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 38.459203][ T3836] udevd[3836]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.478647][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.507907][ T4292] loop3: detected capacity change from 0 to 2048 [ 38.526233][ T4282] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.342: corrupted inode contents [ 38.549562][ T4291] GPT:first_usable_lbas don't match. [ 38.554840][ T4291] GPT:34 != 290 [ 38.558343][ T4291] GPT: Use GNU Parted to correct GPT errors. [ 38.564486][ T4291] loop3: p1 p2 p3 [ 38.574020][ T4282] EXT4-fs (loop1): Remounting filesystem read-only [ 38.606774][ T4282] EXT4-fs (loop1): 1 truncate cleaned up [ 38.612588][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.623126][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.649150][ T58] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 38.669548][ T4282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.691438][ T4292] GPT:first_usable_lbas don't match. [ 38.696722][ T4292] GPT:34 != 290 [ 38.700246][ T4292] GPT: Use GNU Parted to correct GPT errors. [ 38.706357][ T4292] loop3: p1 p2 p3 [ 38.713715][ T4307] loop2: detected capacity change from 0 to 512 [ 38.718029][ T4303] 9pnet_fd: p9_fd_create_unix (4303): problem connecting socket: ./file0: -2 [ 38.728367][ T4307] EXT4-fs: Ignoring removed bh option [ 38.758222][ T4307] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.767263][ T4307] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 38.786441][ T4310] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 38.794209][ T4310] netlink: 168 bytes leftover after parsing attributes in process `syz.4.352'. [ 38.808614][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.817878][ T4307] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 38.839826][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.840630][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 38.854186][ T4310] team0: Port device syz_tun added [ 38.865932][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 38.878331][ T4307] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 38.892377][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.907802][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 38.929528][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 38.954311][ T4307] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.033161][ T4332] xt_hashlimit: max too large, truncated to 1048576 [ 39.041644][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.093055][ T4338] loop2: detected capacity change from 0 to 2048 [ 39.111989][ T4343] loop3: detected capacity change from 0 to 512 [ 39.133419][ T4345] 9pnet_fd: p9_fd_create_unix (4345): problem connecting socket: ./file0: -2 [ 39.155677][ T4343] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.169963][ T4290] GPT:first_usable_lbas don't match. [ 39.175246][ T4290] GPT:34 != 290 [ 39.178828][ T4290] GPT: Use GNU Parted to correct GPT errors. [ 39.184928][ T4290] loop2: p1 p2 p3 [ 39.198984][ T4343] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.215514][ T4343] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.367: corrupted inode contents [ 39.233577][ T4356] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 39.241315][ T4356] netlink: 168 bytes leftover after parsing attributes in process `syz.1.370'. [ 39.260831][ T4338] GPT:first_usable_lbas don't match. [ 39.266125][ T4338] GPT:34 != 290 [ 39.269605][ T4338] GPT: Use GNU Parted to correct GPT errors. [ 39.275773][ T4338] loop2: p1 p2 p3 [ 39.291266][ T4343] EXT4-fs (loop3): Remounting filesystem read-only [ 39.306214][ T4356] team0: Port device syz_tun added [ 39.308340][ T4343] EXT4-fs (loop3): 1 truncate cleaned up [ 39.317170][ T1764] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.327762][ T1764] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.345830][ T1764] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.356510][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.405260][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 39.427408][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.460073][ T4368] xt_hashlimit: max too large, truncated to 1048576 [ 39.504775][ T4373] loop3: detected capacity change from 0 to 512 [ 39.547144][ T4373] EXT4-fs: Ignoring removed bh option [ 39.571846][ T4373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.580895][ T4373] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 39.592312][ T3005] ================================================================== [ 39.600388][ T3005] BUG: KCSAN: data-race in d_delete / lookup_fast [ 39.606801][ T3005] [ 39.609107][ T3005] read-write to 0xffff888106ed9180 of 4 bytes by task 3836 on cpu 1: [ 39.617152][ T3005] d_delete+0x15a/0x180 [ 39.621294][ T3005] d_delete_notify+0x32/0x100 [ 39.625961][ T3005] vfs_unlink+0x30b/0x420 [ 39.630281][ T3005] do_unlinkat+0x24e/0x480 [ 39.634684][ T3005] __x64_sys_unlink+0x2e/0x40 [ 39.639352][ T3005] x64_sys_call+0x2dcf/0x3000 [ 39.644016][ T3005] do_syscall_64+0xd2/0x200 [ 39.648506][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.654385][ T3005] [ 39.656693][ T3005] read to 0xffff888106ed9180 of 4 bytes by task 3005 on cpu 0: [ 39.664216][ T3005] lookup_fast+0xf0/0x320 [ 39.668545][ T3005] walk_component+0x3f/0x220 [ 39.673131][ T3005] path_lookupat+0xfe/0x2a0 [ 39.677627][ T3005] filename_lookup+0x147/0x340 [ 39.682385][ T3005] do_readlinkat+0x7d/0x320 [ 39.686878][ T3005] __x64_sys_readlink+0x47/0x60 [ 39.691711][ T3005] x64_sys_call+0x28de/0x3000 [ 39.696377][ T3005] do_syscall_64+0xd2/0x200 [ 39.700868][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.706745][ T3005] [ 39.709050][ T3005] value changed: 0x00300180 -> 0x00004080 [ 39.714746][ T3005] [ 39.717051][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 39.723192][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.732474][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.742520][ T3005] ================================================================== [ 39.766762][ T4373] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 39.776201][ T4373] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 39.777235][ T4384] 9pnet_fd: p9_fd_create_unix (4384): problem connecting socket: ./file0: -2 [ 39.785081][ T4373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.829241][ T4373] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.844919][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.