last executing test programs: 4m14.11255947s ago: executing program 32 (id=172): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x507, &(0x7f0000000b40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m7.052792994s ago: executing program 33 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) 3m9.361375258s ago: executing program 34 (id=2365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r1, 0x16) 2m46.079491912s ago: executing program 35 (id=3138): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'vcan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) close(r0) 2m32.236432069s ago: executing program 36 (id=3697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m56.473329995s ago: executing program 7 (id=4968): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xd61c}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) 1m56.399737395s ago: executing program 7 (id=4970): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1m56.348189705s ago: executing program 7 (id=4973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x30}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f0000000040)="ea", 0x1, 0x20004c51, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c) 1m56.259588545s ago: executing program 7 (id=4978): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x408, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) creat(&(0x7f0000000600)='./file1\x00', 0xd931d3864d39dc57) 1m56.012216794s ago: executing program 7 (id=4988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r2) 1m55.670867904s ago: executing program 7 (id=5002): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1m55.658351233s ago: executing program 37 (id=5002): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1m48.748247577s ago: executing program 0 (id=5185): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dade51306"], 0xffdd) 1m48.396290636s ago: executing program 0 (id=5195): r0 = syz_io_uring_setup(0x7a8e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000"], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0xebc0, 0x20, 0x0, 0x0) 1m48.346567416s ago: executing program 0 (id=5196): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/153, 0x99}], 0x1) 1m47.462123354s ago: executing program 0 (id=5221): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m47.413110804s ago: executing program 0 (id=5222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) 1m47.237659443s ago: executing program 0 (id=5229): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m47.217299913s ago: executing program 38 (id=5229): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m20.2712612s ago: executing program 8 (id=6190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8) 1m19.986856319s ago: executing program 8 (id=6197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.883179108s ago: executing program 8 (id=6202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) 1m19.882661258s ago: executing program 8 (id=6203): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) 1m19.813755109s ago: executing program 8 (id=6206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m19.576478398s ago: executing program 8 (id=6214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1m19.576157588s ago: executing program 39 (id=6214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1m5.295885634s ago: executing program 5 (id=6666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 1m5.240990544s ago: executing program 5 (id=6669): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000006, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m4.880626193s ago: executing program 5 (id=6671): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 1m4.773905913s ago: executing program 5 (id=6676): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x2000410, &(0x7f0000000140), 0x1, 0x7b1, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1m4.581780322s ago: executing program 5 (id=6686): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m4.178359362s ago: executing program 5 (id=6696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m4.178078431s ago: executing program 40 (id=6696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 33.688230919s ago: executing program 1 (id=7714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x82d00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40107446, 0x20000000) 33.546307819s ago: executing program 1 (id=7724): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x29, 0xfffffffe, 0xfffffffa}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) unshare(0x68040200) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) 33.292792199s ago: executing program 1 (id=7730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mq_open(0x0, 0x40, 0xb0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 33.268751138s ago: executing program 1 (id=7731): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271) 33.224222638s ago: executing program 1 (id=7734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000600)=0x6db7, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 33.055721818s ago: executing program 1 (id=7743): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0x74) write$qrtrtun(r0, &(0x7f0000000540)="9d8d645e53b6183d874f9e06a18dd009a0d07d18950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bfd9a315544fa0a1622d749faba7978890835497c9b7ab548704e680dae25bc94962f5fce4", 0x53) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 33.014040968s ago: executing program 41 (id=7743): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0x74) write$qrtrtun(r0, &(0x7f0000000540)="9d8d645e53b6183d874f9e06a18dd009a0d07d18950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bfd9a315544fa0a1622d749faba7978890835497c9b7ab548704e680dae25bc94962f5fce4", 0x53) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.994010217s ago: executing program 9 (id=8782): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 2.112136935s ago: executing program 9 (id=8816): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) 2.046583895s ago: executing program 9 (id=8820): r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.968688655s ago: executing program 9 (id=8825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) 1.860317894s ago: executing program 9 (id=8829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 1.697301354s ago: executing program 6 (id=8832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utimes(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) 1.647944184s ago: executing program 4 (id=8833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000007d00000a20000000000a03000000000060000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d05000d"], 0x8c}}, 0x20050800) 1.528705824s ago: executing program 6 (id=8836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffc, 0x3bd}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.527677804s ago: executing program 4 (id=8837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='cpu>00\t||') 1.455268024s ago: executing program 4 (id=8838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x6c}, 0x1, 0xba01}, 0x0) 1.267999283s ago: executing program 6 (id=8842): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x100, 0x0) 1.210980283s ago: executing program 4 (id=8844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) 1.197876273s ago: executing program 6 (id=8846): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000002c0)='./bus/file0\x00', 0x40) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) 1.179705123s ago: executing program 2 (id=8848): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x1000, 0x8}}) write$cgroup_subtree(r1, 0x0, 0x0) 1.120002483s ago: executing program 3 (id=8849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) 1.119471583s ago: executing program 6 (id=8850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) 1.061634512s ago: executing program 2 (id=8851): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1.061353212s ago: executing program 3 (id=8852): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x104) creat(0x0, 0x49) setgroups(0xfffffffffffffc2a, 0x0) 1.060389712s ago: executing program 4 (id=8861): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x3, 0xe76a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 1.058090872s ago: executing program 3 (id=8862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) 1.017404432s ago: executing program 2 (id=8853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x64, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.017078502s ago: executing program 3 (id=8854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 982.200332ms ago: executing program 9 (id=8855): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x80000, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0xa, 0x1}, {0x1, 0xffe0}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000010) 973.960742ms ago: executing program 2 (id=8856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 663.413271ms ago: executing program 3 (id=8857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 76.13509ms ago: executing program 2 (id=8858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x40) 75.74996ms ago: executing program 3 (id=8859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0xf72}], 0x1}}], 0x1, 0x140, 0x0) 56.60865ms ago: executing program 4 (id=8860): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0xffa4}, 0x3) 50.34654ms ago: executing program 6 (id=8863): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 2 (id=8864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) kernel console output (not intermixed with test programs): 22[21788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.242782][T13598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.341283][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7133'. [ 242.699613][T21838] loop6: detected capacity change from 0 to 764 [ 242.777640][T21851] netlink: 'syz.6.7150': attribute type 2 has an invalid length. [ 242.785606][T21851] netlink: 199412 bytes leftover after parsing attributes in process `syz.6.7150'. [ 242.818518][T21858] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7153'. [ 242.896219][T21853] loop9: detected capacity change from 0 to 8192 [ 242.925072][T21853] syz.9.7151: attempt to access beyond end of device [ 242.925072][T21853] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 242.959951][T21853] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 242.967889][T21853] FAT-fs (loop9): Filesystem has been set read-only [ 242.985606][T21853] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 242.995660][T21853] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 243.368229][T13589] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 243.368247][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.425955][T21889] Set syz1 is full, maxelem 65536 reached [ 243.446467][T21909] SELinux: syz.1.7173 (21909) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 243.460603][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.515856][T21920] ref_ctr_offset mismatch. inode: 0x673 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 243.655536][T21934] batadv_slave_1: entered promiscuous mode [ 243.750574][T21933] batadv_slave_1: left promiscuous mode [ 243.780662][T21943] random: crng reseeded on system resumption [ 243.969297][ T3374] kernel write not supported for file /vcsa (pid: 3374 comm: kworker/0:3) [ 244.374988][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 244.375007][ T29] audit: type=1326 audit(1736582864.156:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.405353][ T29] audit: type=1326 audit(1736582864.156:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.434623][ T29] audit: type=1326 audit(1736582864.156:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.439204][T22001] SELinux: policydb version 0 does not match my version range 15-33 [ 244.458263][ T29] audit: type=1326 audit(1736582864.156:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.489831][ T29] audit: type=1326 audit(1736582864.156:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.492356][T22001] SELinux: failed to load policy [ 244.513400][ T29] audit: type=1326 audit(1736582864.216:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.513450][ T29] audit: type=1326 audit(1736582864.216:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.542688][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.565654][ T29] audit: type=1326 audit(1736582864.216:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.596848][ T29] audit: type=1326 audit(1736582864.216:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.620539][ T29] audit: type=1326 audit(1736582864.216:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21998 comm="syz.4.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 244.646950][T22007] loop6: detected capacity change from 0 to 128 [ 244.648410][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.659185][T22007] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.680274][T22007] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.747373][T19583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.751140][T22019] loop1: detected capacity change from 0 to 512 [ 244.764637][T22019] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7222: Invalid inode bitmap blk 4 in block_group 0 [ 244.787089][T22019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.818578][T22022] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 244.830481][T22019] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 244.880793][T22029] __nla_validate_parse: 8 callbacks suppressed [ 244.880909][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7227'. [ 244.891551][T18105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.908610][T22031] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.204942][T22074] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7248'. [ 245.249037][T22080] bpf_get_probe_write_proto: 6 callbacks suppressed [ 245.249064][T22080] syz.1.7250[22080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.251655][T22074] netlink: 'syz.9.7248': attribute type 10 has an invalid length. [ 245.256093][T22079] bond_slave_1: entered promiscuous mode [ 245.277440][T22080] syz.1.7250[22080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.281003][T22080] syz.1.7250[22080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.293360][T22079] bond_slave_1: left promiscuous mode [ 245.330904][T22074] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 245.544832][T22095] loop9: detected capacity change from 0 to 8192 [ 245.566287][T22095] syz.9.7258: attempt to access beyond end of device [ 245.566287][T22095] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 245.603640][T22095] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 245.611645][T22095] FAT-fs (loop9): Filesystem has been set read-only [ 245.628537][T22095] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 245.648695][T22095] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 245.702557][T22117] netlink: 'syz.6.7269': attribute type 1 has an invalid length. [ 245.710394][T22117] netlink: 'syz.6.7269': attribute type 4 has an invalid length. [ 245.718203][T22117] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.7269'. [ 245.738542][T13595] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.760438][T11552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.762758][T22121] vlan2: entered allmulticast mode [ 245.771521][T22125] syz.1.7272[22125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.773569][T22125] syz.1.7272[22125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.785209][T22125] syz.1.7272[22125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.907389][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7280'. [ 245.939403][T22139] erspan0: entered promiscuous mode [ 245.944759][T22139] macvtap1: entered promiscuous mode [ 245.950272][T22139] macvtap1: entered allmulticast mode [ 245.955702][T22139] erspan0: entered allmulticast mode [ 245.956442][T22149] syz.4.7284[22149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.962720][T22149] syz.4.7284[22149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.974455][T22149] syz.4.7284[22149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.986143][T22150] erspan0: left allmulticast mode [ 246.002982][T22150] erspan0: left promiscuous mode [ 246.136124][T22169] pimreg: entered allmulticast mode [ 246.143860][T22169] pimreg: left allmulticast mode [ 246.150290][T22171] SELinux: syz.6.7292 (22171) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.197755][T22177] vlan2: entered promiscuous mode [ 246.313334][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7302'. [ 246.705312][T22203] SELinux: syz.4.7305 (22203) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.843049][T22225] syzkaller0: entered allmulticast mode [ 246.858530][T11535] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.878358][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.894086][T22228] syz.4.7315[22228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.026522][T22238] netlink: 'syz.4.7320': attribute type 4 has an invalid length. [ 247.096021][T22246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7323'. [ 247.123194][T22246] erspan0: entered promiscuous mode [ 247.132631][T22246] macvtap1: entered promiscuous mode [ 247.138098][T22246] macvtap1: entered allmulticast mode [ 247.143510][T22246] erspan0: entered allmulticast mode [ 247.169730][T22249] erspan0: left allmulticast mode [ 247.174852][T22249] erspan0: left promiscuous mode [ 247.334858][T22264] loop6: detected capacity change from 0 to 1024 [ 247.368356][T22264] EXT4-fs: Ignoring removed orlov option [ 247.374089][T22264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.412041][T22264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0082] [ 247.437322][T22264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.585200][T22274] loop9: detected capacity change from 0 to 256 [ 247.592680][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.772048][T22289] tipc: Started in network mode [ 247.776965][T22289] tipc: Node identity ac14140f, cluster identity 4711 [ 247.787275][T22289] tipc: New replicast peer: 255.255.255.255 [ 247.793499][T22289] tipc: Enabled bearer , priority 10 [ 247.949600][T22302] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7346'. [ 247.959833][T22302] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7346'. [ 247.968971][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.018364][T13595] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.697909][T22297] Set syz1 is full, maxelem 65536 reached [ 248.717489][T22304] Set syz1 is full, maxelem 65536 reached [ 248.831711][T22333] bond1: entered promiscuous mode [ 248.836833][T22333] bond1: entered allmulticast mode [ 248.845451][T22333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.867910][T22333] bond1 (unregistering): Released all slaves [ 248.918345][ T8] tipc: Node number set to 2886997007 [ 248.974510][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7363'. [ 249.088732][T13595] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.103823][T22350] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7368'. [ 249.114293][T22350] netlink: 'syz.6.7368': attribute type 10 has an invalid length. [ 249.131883][T22350] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.148605][T13589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.185694][ T1035] IPVS: starting estimator thread 0... [ 249.207468][T22360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22360 comm=syz.1.7372 [ 249.299753][T22356] IPVS: using max 2448 ests per chain, 122400 per kthread [ 249.612047][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 249.612065][ T29] audit: type=1326 audit(1736582869.396:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.642321][ T29] audit: type=1326 audit(1736582869.396:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.666114][ T29] audit: type=1326 audit(1736582869.396:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.689702][ T29] audit: type=1326 audit(1736582869.396:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.713357][ T29] audit: type=1326 audit(1736582869.396:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.737070][ T29] audit: type=1326 audit(1736582869.396:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.760714][ T29] audit: type=1326 audit(1736582869.396:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.784546][ T29] audit: type=1326 audit(1736582869.396:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.808122][ T29] audit: type=1326 audit(1736582869.396:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.831781][ T29] audit: type=1326 audit(1736582869.396:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.9.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 249.881548][T22416] loop9: detected capacity change from 0 to 1024 [ 249.892065][T22416] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 249.903033][T22416] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 249.919460][T22416] JBD2: no valid journal superblock found [ 249.925285][T22416] EXT4-fs (loop9): Could not load journal inode [ 249.955289][T22424] __nla_validate_parse: 1 callbacks suppressed [ 249.955308][T22424] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7401'. [ 249.998976][T22428] loop9: detected capacity change from 0 to 764 [ 250.048980][T22432] sit0 speed is unknown, defaulting to 1000 [ 250.081449][T22432] lo speed is unknown, defaulting to 1000 [ 250.198251][T13595] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.211880][T22448] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7411'. [ 250.239590][T22448] veth3: entered promiscuous mode [ 250.321258][T13595] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.497430][T22481] loop6: detected capacity change from 0 to 512 [ 250.524174][T22481] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7426: bg 0: block 248: padding at end of block bitmap is not set [ 250.554383][T22481] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.7426: Failed to acquire dquot type 1 [ 250.566490][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7430'. [ 250.587721][T22493] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7432'. [ 250.601491][T22481] EXT4-fs (loop6): 1 truncate cleaned up [ 250.608535][T22481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.622011][T22481] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.721807][T22504] bpf_get_probe_write_proto: 8 callbacks suppressed [ 250.721829][T22504] syz.2.7438[22504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.729382][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.754096][T22504] syz.2.7438[22504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.754198][T22504] syz.2.7438[22504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.813160][T22511] netem: change failed [ 250.838226][T22508] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 250.855718][T22512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7440'. [ 250.874018][T22514] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22514 comm=syz.1.7442 [ 250.886688][T22514] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22514 comm=syz.1.7442 [ 250.952703][T22522] loop1: detected capacity change from 0 to 512 [ 250.964283][T22522] EXT4-fs (loop1): failed to initialize system zone (-117) [ 250.971862][T22522] EXT4-fs (loop1): mount failed [ 251.120408][T22536] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7451'. [ 251.164766][T22538] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 251.188136][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.348727][T11551] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.458224][T11502] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.714965][T22566] program syz.4.7468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.885224][T22568] sit0 speed is unknown, defaulting to 1000 [ 251.901886][T22587] loop4: detected capacity change from 0 to 512 [ 251.956200][T22568] lo speed is unknown, defaulting to 1000 [ 251.978531][T22587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.016615][T22587] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.069016][T22596] bond4 (unregistering): Released all slaves [ 252.113947][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.135286][T22568] chnl_net:caif_netlink_parms(): no params data found [ 252.217021][T22568] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.224319][T22568] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.242700][T22568] bridge_slave_0: entered allmulticast mode [ 252.250240][T22568] bridge_slave_0: entered promiscuous mode [ 252.258491][T22568] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.265640][T22568] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.288342][T22568] bridge_slave_1: entered allmulticast mode [ 252.305008][T22568] bridge_slave_1: entered promiscuous mode [ 252.340718][T22568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.361895][T22568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.418656][T22568] team0: Port device team_slave_0 added [ 252.425534][T22568] team0: Port device team_slave_1 added [ 252.469388][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.478570][T22568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.485681][T22568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.511674][T22568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.523509][T22568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.530491][T22568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.544664][T22641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22641 comm=syz.4.7494 [ 252.556478][T22568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.587288][T11509] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.599655][T22568] hsr_slave_0: entered promiscuous mode [ 252.608284][T22568] hsr_slave_1: entered promiscuous mode [ 252.615800][T22568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.630579][T22568] Cannot create hsr debugfs directory [ 252.717024][T22658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22658 comm=syz.4.7510 [ 252.729617][T22658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22658 comm=syz.4.7510 [ 252.746157][T22660] loop9: detected capacity change from 0 to 512 [ 252.770558][T22568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.792319][T22660] EXT4-fs (loop9): orphan cleanup on readonly fs [ 252.799615][T22660] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 252.815926][T22660] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 252.823929][T22660] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #13: comm syz.9.7502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 252.842476][T22660] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.7502: couldn't read orphan inode 13 (err -117) [ 252.857325][T22660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.913476][T22660] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 252.934665][T22660] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 2 [ 252.949070][T22568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.005733][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.049539][T22568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.059553][T22683] loop4: detected capacity change from 0 to 8192 [ 253.073841][T22683] syz.4.7514: attempt to access beyond end of device [ 253.073841][T22683] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 253.124013][T22568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.128703][T22683] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 253.142336][T22683] FAT-fs (loop4): Filesystem has been set read-only [ 253.196175][T22683] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 253.227284][T22568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.241082][T22683] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 253.287629][T22568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.310235][T22568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.329322][T22568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.438481][T22568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.451366][T22568] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.461021][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.468111][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.483976][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.491139][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.547953][T22568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.558355][T22568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.589630][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.694007][T22568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.714410][T22750] syz.4.7543[22750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.714570][T22750] syz.4.7543[22750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.750780][T22754] syz.2.7544[22754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.753352][T22750] syz.4.7543[22750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.778972][T22754] syz.2.7544[22754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.792444][T22754] syz.2.7544[22754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.842540][T22568] veth0_vlan: entered promiscuous mode [ 253.867852][T22568] veth1_vlan: entered promiscuous mode [ 253.889402][T22568] veth0_macvtap: entered promiscuous mode [ 253.895587][T22770] netlink: 'syz.2.7549': attribute type 1 has an invalid length. [ 253.897489][T22568] veth1_macvtap: entered promiscuous mode [ 253.915106][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.925670][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.935717][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.946296][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.956327][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.966816][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.976937][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.987568][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.997526][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.007997][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.018955][T22568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.027490][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.038227][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.048188][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.058748][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.068881][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.079562][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.089429][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.099888][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.109797][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.120430][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.131514][T22568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.147070][T22568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.155948][T22568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.164731][T22568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.173481][T22568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.272507][T22792] netlink: 'syz.1.7556': attribute type 4 has an invalid length. [ 254.381361][T22804] ebtables: ebtables: counters copy to user failed while replacing table [ 254.444336][T22811] netlink: 'syz.2.7564': attribute type 3 has an invalid length. [ 254.482248][T22808] loop1: detected capacity change from 0 to 8192 [ 254.498096][T22808] syz.1.7563: attempt to access beyond end of device [ 254.498096][T22808] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 254.515658][T22808] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 254.523550][T22808] FAT-fs (loop1): Filesystem has been set read-only [ 254.534589][T22808] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 254.545140][T22808] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 254.748455][ T4851] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 254.748474][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.858216][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.910032][T22849] smc: net device bond0 applied user defined pnetid S [ 254.917051][T22849] smc: net device bond0 erased user defined pnetid S [ 254.962126][T22853] vlan2: entered allmulticast mode [ 255.051308][T22857] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 255.076474][T22859] netlink: 'syz.4.7585': attribute type 3 has an invalid length. [ 255.084397][T22859] netlink: 'syz.4.7585': attribute type 3 has an invalid length. [ 255.092247][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7585'. [ 255.245270][T22870] loop9: detected capacity change from 0 to 512 [ 255.279995][T22870] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7591: bg 0: block 248: padding at end of block bitmap is not set [ 255.301460][T22870] __quota_error: 316 callbacks suppressed [ 255.301480][T22870] Quota error (device loop9): write_blk: dquota write failed [ 255.314779][T22870] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 255.324806][T22870] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.7591: Failed to acquire dquot type 1 [ 255.355725][T22870] EXT4-fs (loop9): 1 truncate cleaned up [ 255.361971][T22885] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 255.364307][T22870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.387447][T22886] rdma_op ffff888127e07580 conn xmit_rdma 0000000000000000 [ 255.397467][T22870] ext4 filesystem being mounted at /752/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.416213][ T29] audit: type=1400 audit(1736582875.196:8609): avc: denied { bind } for pid=22889 comm="syz.4.7599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.435752][ T29] audit: type=1400 audit(1736582875.196:8610): avc: denied { name_bind } for pid=22889 comm="syz.4.7599" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 255.456576][ T29] audit: type=1400 audit(1736582875.196:8611): avc: denied { node_bind } for pid=22889 comm="syz.4.7599" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 255.478227][ T29] audit: type=1400 audit(1736582875.256:8612): avc: denied { setopt } for pid=22889 comm="syz.4.7599" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.511549][ T29] audit: type=1326 audit(1736582875.286:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22869 comm="syz.9.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 255.535160][ T29] audit: type=1326 audit(1736582875.286:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22869 comm="syz.9.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 255.574433][ T29] audit: type=1326 audit(1736582875.296:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22869 comm="syz.9.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 255.598205][ T29] audit: type=1326 audit(1736582875.296:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22869 comm="syz.9.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d4355d29 code=0x7ffc0000 [ 255.628581][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.668118][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.702214][T22906] loop6: detected capacity change from 0 to 512 [ 255.725960][T22906] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7607: bg 0: block 248: padding at end of block bitmap is not set [ 255.771289][T22906] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.7607: Failed to acquire dquot type 1 [ 255.795720][T22906] EXT4-fs (loop6): 1 truncate cleaned up [ 255.807960][T22906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.825443][T22906] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.854759][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.874553][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.917266][T22926] veth0_to_team: entered promiscuous mode [ 255.923174][T22926] veth0_to_team: entered allmulticast mode [ 255.969833][T11509] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.034261][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7617'. [ 256.168118][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7626'. [ 256.641172][T22956] Set syz1 is full, maxelem 65536 reached [ 256.715703][T22984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7642'. [ 257.008350][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.107469][T23022] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 257.129641][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.174151][T23028] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 257.203830][T23035] syz.9.7664[23035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.204013][T23035] syz.9.7664[23035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.221241][T23035] syz.9.7664[23035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.377604][T23060] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7674'. [ 257.490162][T23071] loop4: detected capacity change from 0 to 8192 [ 257.580585][T23085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.589440][T23085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.610104][T23087] netlink: 'syz.9.7687': attribute type 1 has an invalid length. [ 257.627362][T23089] netlink: 664 bytes leftover after parsing attributes in process `syz.1.7688'. [ 257.873244][T23110] Process accounting resumed [ 257.896207][T23114] rdma_op ffff888102f19180 conn xmit_rdma 0000000000000000 [ 257.987873][T23121] syzkaller0: entered promiscuous mode [ 258.132915][T11509] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.248294][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.316121][T23163] sit0 speed is unknown, defaulting to 1000 [ 258.324975][T23165] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 258.332899][T23165] SELinux: failed to load policy [ 258.371368][T23163] lo speed is unknown, defaulting to 1000 [ 258.382725][T23171] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 258.495673][T23175] syz.9.7727[23175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.495752][T23175] syz.9.7727[23175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.519580][T23175] syz.9.7727[23175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.786016][T23209] syz.6.7745[23209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.812076][T23209] syz.6.7745[23209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.836649][T11523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.858986][T23209] syz.6.7745[23209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.902712][T23221] loop6: detected capacity change from 0 to 256 [ 258.925712][T23221] FAT-fs (loop6): bogus number of FAT sectors [ 258.931881][T23221] FAT-fs (loop6): Can't find a valid FAT filesystem [ 258.945786][T11523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.025267][T23235] syz.2.7755[23235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.031920][T11523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.162829][T11523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.202811][T23220] sit0 speed is unknown, defaulting to 1000 [ 259.249123][T13587] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.280819][T11523] bridge_slave_1: left allmulticast mode [ 259.286551][T11523] bridge_slave_1: left promiscuous mode [ 259.292278][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.321145][T23268] loop9: detected capacity change from 0 to 512 [ 259.343930][T11523] bridge_slave_0: left allmulticast mode [ 259.349877][T11523] bridge_slave_0: left promiscuous mode [ 259.355646][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.366832][T23268] EXT4-fs (loop9): blocks per group (71) and clusters per group (32768) inconsistent [ 259.444158][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7769'. [ 259.513068][T11523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.535019][T11523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.559381][T11523] bond0 (unregistering): Released all slaves [ 259.577510][T23220] lo speed is unknown, defaulting to 1000 [ 259.696595][T11523] hsr_slave_0: left promiscuous mode [ 259.728081][T11523] hsr_slave_1: left promiscuous mode [ 259.749090][T11523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.756629][T11523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.776427][T11523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.783963][T11523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.808256][T11523] veth1_macvtap: left promiscuous mode [ 259.813782][T11523] veth0_macvtap: left promiscuous mode [ 259.819391][T11523] veth1_vlan: left promiscuous mode [ 259.824722][T11523] veth0_vlan: left promiscuous mode [ 260.018921][T11523] team0 (unregistering): Port device team_slave_1 removed [ 260.029143][T11523] team0 (unregistering): Port device team_slave_0 removed [ 260.132026][T23300] loop9: detected capacity change from 0 to 512 [ 260.154652][T23300] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 260.209915][T23300] EXT4-fs (loop9): 1 truncate cleaned up [ 260.216338][T23300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.230690][T23220] chnl_net:caif_netlink_parms(): no params data found [ 260.250916][T23300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.317023][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7788'. [ 260.368655][ T4851] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 260.368669][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.391110][T23220] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.398292][T23220] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.422742][T23220] bridge_slave_0: entered allmulticast mode [ 260.446521][T23220] bridge_slave_0: entered promiscuous mode [ 260.458840][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 260.458856][ T29] audit: type=1400 audit(1736582880.246:8765): avc: denied { create } for pid=23337 comm="syz.6.7796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.462357][T23343] loop4: detected capacity change from 0 to 512 [ 260.465414][ T29] audit: type=1400 audit(1736582880.246:8766): avc: denied { bind } for pid=23337 comm="syz.6.7796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.487041][T23220] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.519637][T23220] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.523638][ T28] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.537552][T23220] bridge_slave_1: entered allmulticast mode [ 260.544227][T23220] bridge_slave_1: entered promiscuous mode [ 260.580997][T23351] loop9: detected capacity change from 0 to 512 [ 260.593354][T23351] EXT4-fs: Ignoring removed i_version option [ 260.599437][T23351] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.624327][T23351] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 260.626384][T23343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.649225][T23358] xt_connbytes: Forcing CT accounting to be enabled [ 260.652731][T23343] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.655837][T23358] Cannot find set identified by id 0 to match [ 260.682675][T23351] EXT4-fs (loop9): 1 truncate cleaned up [ 260.690066][T23220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.700769][T23220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.714844][T23351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.728785][ T29] audit: type=1400 audit(1736582880.506:8767): avc: denied { execute } for pid=23338 comm="syz.4.7795" path="/202/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 260.738720][T23351] EXT4-fs error (device loop9): ext4_search_dir:1505: inode #12: block 7: comm syz.9.7801: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 260.810215][T23220] team0: Port device team_slave_0 added [ 260.829209][T23220] team0: Port device team_slave_1 added [ 260.834149][ T29] audit: type=1326 audit(1736582880.596:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.858432][ T29] audit: type=1326 audit(1736582880.596:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.882042][ T29] audit: type=1326 audit(1736582880.596:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.905561][ T29] audit: type=1326 audit(1736582880.596:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.929076][ T29] audit: type=1326 audit(1736582880.596:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.952579][ T29] audit: type=1326 audit(1736582880.596:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 260.976122][ T29] audit: type=1326 audit(1736582880.596:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.2.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 261.008494][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.018177][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.038949][T23220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.046011][T23220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.072084][T23220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.083570][T23220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.090635][T23220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.116711][T23220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.119595][T23378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7810'. [ 261.157916][T23220] hsr_slave_0: entered promiscuous mode [ 261.168842][T23220] hsr_slave_1: entered promiscuous mode [ 261.175182][T23220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.183396][T23220] Cannot create hsr debugfs directory [ 261.210446][T23389] xt_hashlimit: size too large, truncated to 1048576 [ 261.384840][T23220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.477487][T23220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.548181][ T4851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.561814][T23220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.657132][T23220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.668255][T11523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.782013][T23220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.800655][T23220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.813910][T23220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.828021][T23220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.856874][T23428] loop6: detected capacity change from 0 to 2048 [ 261.908230][T23220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.920101][T23428] loop6: p1 < > p4 [ 261.922198][T23220] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.931950][T23428] loop6: p4 size 8388608 extends beyond EOD, truncated [ 261.944678][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.951784][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.991300][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.998420][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.101535][T23220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.125294][T23438] loop6: detected capacity change from 0 to 164 [ 262.161705][T23438] Unable to read rock-ridge attributes [ 262.176229][T23438] Unable to read rock-ridge attributes [ 262.191375][T23448] loop9: detected capacity change from 0 to 2048 [ 262.216476][T23220] veth0_vlan: entered promiscuous mode [ 262.225540][T23220] veth1_vlan: entered promiscuous mode [ 262.238807][T23448] Alternate GPT is invalid, using primary GPT. [ 262.245182][T23448] loop9: p2 p3 p7 [ 262.258181][T23220] veth0_macvtap: entered promiscuous mode [ 262.266351][T23220] veth1_macvtap: entered promiscuous mode [ 262.278195][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.288693][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.298578][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.309081][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.319009][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.329454][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.339392][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.349910][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.359811][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.370305][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.381203][T23220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.399634][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.410138][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.419986][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.430494][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.440454][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.450939][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.460839][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.471352][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.481232][T23220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.483387][T23460] loop4: detected capacity change from 0 to 512 [ 262.491700][T23220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.509127][T23220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.521296][T23460] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.7843: casefold flag without casefold feature [ 262.540633][T23460] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.7843: couldn't read orphan inode 15 (err -117) [ 262.544861][T23220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.556251][T23460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.561336][T23220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.582498][T23220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.591252][T23220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.658882][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.718277][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.768309][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.848246][T23487] Falling back ldisc for ttyS3. [ 262.880272][T23498] bpf_get_probe_write_proto: 11 callbacks suppressed [ 262.880293][T23498] syz.6.7857[23498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.904988][T23498] syz.6.7857[23498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.928157][T23498] syz.6.7857[23498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.163158][T23529] loop9: detected capacity change from 0 to 1024 [ 263.208440][T23529] EXT4-fs: Ignoring removed nobh option [ 263.214061][T23529] EXT4-fs: Ignoring removed bh option [ 263.240901][T23529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.363475][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.781476][T11523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.888351][ T3397] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.909220][T23635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7876'. [ 263.978255][T23638] netlink: zone id is out of range [ 264.026250][T23644] vlan2: entered allmulticast mode [ 264.106009][T23653] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.135129][T23655] IPVS: stopping master sync thread 23658 ... [ 264.141496][T23658] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 264.162034][T23653] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.229429][T23653] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.295346][T23672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.315088][T23677] loop4: detected capacity change from 0 to 512 [ 264.328375][T23677] EXT4-fs: Ignoring removed bh option [ 264.336352][T23653] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.377060][T23677] EXT4-fs error (device loop4): ext4_quota_enable:7112: comm syz.4.7897: inode #33554432: comm syz.4.7897: iget: illegal inode # [ 264.403980][T23677] EXT4-fs (loop4): Remounting filesystem read-only [ 264.410579][T23677] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 264.432886][T23677] EXT4-fs (loop4): mount failed [ 264.433613][T23653] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.462087][T23653] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.477292][T23653] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.498650][T23653] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.581965][T23698] netlink: 'syz.4.7905': attribute type 7 has an invalid length. [ 264.759731][T23713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.778453][T23713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.794081][T23715] syz.2.7911[23715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.794173][T23715] syz.2.7911[23715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.818652][T23715] syz.2.7911[23715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.938158][T13584] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.994108][T23723] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 265.058532][ T28] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.229794][T23735] syz.2.7920[23735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.229931][T23735] syz.2.7920[23735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.255173][T23735] syz.2.7920[23735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.273812][T23741] SELinux: syz.3.7924 (23741) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.323072][T23745] loop6: detected capacity change from 0 to 512 [ 265.393221][T23757] syz.2.7931[23757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.517834][T23774] netlink: 268 bytes leftover after parsing attributes in process `syz.6.7940'. [ 265.518089][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 265.518105][ T29] audit: type=1326 audit(1736582885.296:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.569078][ T29] audit: type=1326 audit(1736582885.316:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.592731][ T29] audit: type=1326 audit(1736582885.316:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.616401][ T29] audit: type=1326 audit(1736582885.316:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.649140][ T29] audit: type=1326 audit(1736582885.356:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.672817][ T29] audit: type=1326 audit(1736582885.356:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.696901][ T29] audit: type=1326 audit(1736582885.356:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.720458][ T29] audit: type=1326 audit(1736582885.406:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.743956][ T29] audit: type=1326 audit(1736582885.406:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 265.767560][ T29] audit: type=1326 audit(1736582885.406:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23778 comm="syz.2.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f3108b95d29 code=0x7ffc0000 [ 266.066973][T23817] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 266.094004][T23819] loop4: detected capacity change from 0 to 2048 [ 266.108687][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.148820][T23819] loop4: p1 < > p4 [ 266.153983][T23819] loop4: p4 size 8388608 extends beyond EOD, truncated [ 266.218120][T11501] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.231463][T23834] loop6: detected capacity change from 0 to 512 [ 266.241789][T23834] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.7968: casefold flag without casefold feature [ 266.255114][T23834] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.7968: couldn't read orphan inode 15 (err -117) [ 266.270895][T23834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.423076][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.457975][T23848] sit0 speed is unknown, defaulting to 1000 [ 266.552952][T23848] lo speed is unknown, defaulting to 1000 [ 266.563824][T23864] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.650702][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7982'. [ 266.710663][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7984'. [ 266.893122][T23892] sit0 speed is unknown, defaulting to 1000 [ 266.936071][T23896] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 266.970199][T23892] lo speed is unknown, defaulting to 1000 [ 267.227743][T23926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.237002][T11501] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.252366][T23926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.275216][T23929] loop6: detected capacity change from 0 to 164 [ 267.338484][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.524370][T23955] loop6: detected capacity change from 0 to 512 [ 267.539142][T23955] EXT4-fs: Ignoring removed bh option [ 267.560292][T23955] EXT4-fs error (device loop6): ext4_quota_enable:7112: comm syz.6.8006: inode #33554432: comm syz.6.8006: iget: illegal inode # [ 267.587085][T23955] EXT4-fs (loop6): Remounting filesystem read-only [ 267.593800][T23955] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 267.616055][T23955] EXT4-fs (loop6): mount failed [ 267.820113][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8011'. [ 267.872546][T24006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8011'. [ 268.072596][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8017'. [ 268.108275][T24049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.115878][T24049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.134386][T24049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.141939][T24049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.176279][T24067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8017'. [ 268.331616][T24084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.347988][T24084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.368652][T24088] bpf_get_probe_write_proto: 5 callbacks suppressed [ 268.368672][T24088] syz.2.8031[24088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.375527][T24088] syz.2.8031[24088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.387418][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.389097][T24088] syz.2.8031[24088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.489612][T20801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.565841][T24114] netlink: 'syz.6.8044': attribute type 10 has an invalid length. [ 268.573781][T24114] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8044'. [ 268.592367][T24114] bond0: entered promiscuous mode [ 268.597460][T24114] bond_slave_0: entered promiscuous mode [ 268.603293][T24114] bond_slave_1: entered promiscuous mode [ 268.609197][T24114] dummy0: entered promiscuous mode [ 268.615048][T24114] bridge0: port 3(bond0) entered blocking state [ 268.621398][T24114] bridge0: port 3(bond0) entered disabled state [ 268.632746][T24114] bond0: entered allmulticast mode [ 268.637914][T24114] bond_slave_0: entered allmulticast mode [ 268.643795][T24114] bond_slave_1: entered allmulticast mode [ 268.649635][T24114] dummy0: entered allmulticast mode [ 268.659650][T24114] bridge0: port 3(bond0) entered blocking state [ 268.666043][T24114] bridge0: port 3(bond0) entered forwarding state [ 268.666359][T24124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.685538][T24126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8047'. [ 268.698403][T24124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.993517][T24155] netlink: 268 bytes leftover after parsing attributes in process `syz.2.8060'. [ 269.011514][T24157] syz.9.8061[24157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.011653][T24157] syz.9.8061[24157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.031479][T24157] syz.9.8061[24157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.234343][T24184] netlink: 'syz.6.8073': attribute type 1 has an invalid length. [ 269.253699][T24184] netlink: 'syz.6.8073': attribute type 4 has an invalid length. [ 269.462269][T24203] loop6: detected capacity change from 0 to 8192 [ 269.471753][T24203] syz.6.8082: attempt to access beyond end of device [ 269.471753][T24203] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 269.510248][T24203] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 269.518192][T24203] FAT-fs (loop6): Filesystem has been set read-only [ 269.528082][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.536685][T24203] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 269.544943][T24203] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 269.562120][T24210] sd 0:0:1:0: device reset [ 269.630049][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.641549][T24224] smc: net device bond0 applied user defined pnetid SYZ0 [ 269.649312][T24224] smc: net device bond0 erased user defined pnetid SYZ0 [ 269.776776][T24242] netlink: 'syz.2.8100': attribute type 1 has an invalid length. [ 269.806947][T24242] bond3: (slave ip6erspan0): making interface the new active one [ 269.815208][T24242] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 269.966089][T24276] syz.3.8115[24276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.966151][T24276] syz.3.8115[24276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.977761][T24276] syz.3.8115[24276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.060086][T24288] syz.3.8120[24288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.354863][T24306] netlink: 'syz.9.8128': attribute type 39 has an invalid length. [ 270.530531][T24317] loop4: detected capacity change from 0 to 512 [ 270.540423][T24317] EXT4-fs (loop4): orphan cleanup on readonly fs [ 270.547452][T24317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8133: bg 0: block 248: padding at end of block bitmap is not set [ 270.562421][T24317] __quota_error: 205 callbacks suppressed [ 270.562437][T24317] Quota error (device loop4): write_blk: dquota write failed [ 270.575700][T24317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 270.585650][T24317] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8133: Failed to acquire dquot type 1 [ 270.597895][T24317] EXT4-fs (loop4): 1 truncate cleaned up [ 270.604336][T24317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.649123][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.658349][T11554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.675112][ T29] audit: type=1326 audit(1736582890.456:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.698752][ T29] audit: type=1326 audit(1736582890.456:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.724388][ T29] audit: type=1326 audit(1736582890.456:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.748115][ T29] audit: type=1326 audit(1736582890.456:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.771842][ T29] audit: type=1326 audit(1736582890.456:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.780040][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.795918][ T29] audit: type=1326 audit(1736582890.456:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.827132][ T29] audit: type=1326 audit(1736582890.456:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 270.850728][ T29] audit: type=1326 audit(1736582890.516:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24327 comm="syz.4.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e8a55d29 code=0x7ffc0000 [ 271.027218][T24364] IPv6: Can't replace route, no match found [ 271.135967][T24375] IPVS: stopping master sync thread 24376 ... [ 271.138073][T24376] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 271.204025][T24383] loop9: detected capacity change from 0 to 512 [ 271.226873][T24383] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino [ 271.243346][T24383] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 15 (err -117) [ 271.255878][T24383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.309649][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.535531][T24407] loop4: detected capacity change from 0 to 512 [ 271.550576][T24407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.556187][T24409] vlan2: entered allmulticast mode [ 271.593438][T24407] EXT4-fs (loop4): 1 truncate cleaned up [ 271.599648][T24407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.657271][T24416] dvmrp0: entered allmulticast mode [ 271.664912][T24416] dvmrp0: left allmulticast mode [ 271.673646][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.823741][T24433] __nla_validate_parse: 4 callbacks suppressed [ 271.823778][T24433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8183'. [ 271.848498][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.900578][T24441] loop4: detected capacity change from 0 to 764 [ 271.909072][T11554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.939865][T24441] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 272.104903][T24464] netlink: 'syz.6.8197': attribute type 10 has an invalid length. [ 272.214322][T24479] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 272.241149][T24481] loop6: detected capacity change from 0 to 164 [ 272.256203][T24481] +}[@: attempt to access beyond end of device [ 272.256203][T24481] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 272.278481][T24481] +}[@: attempt to access beyond end of device [ 272.278481][T24481] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.460035][T24500] sit0 speed is unknown, defaulting to 1000 [ 272.492248][T24504] Cannot find del_set index 0 as target [ 272.585490][T24500] lo speed is unknown, defaulting to 1000 [ 272.993228][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.028254][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.123953][T24549] loop4: detected capacity change from 0 to 8192 [ 273.162523][T24549] syz.4.8234: attempt to access beyond end of device [ 273.162523][T24549] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 273.199679][T24549] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 273.207585][T24549] FAT-fs (loop4): Filesystem has been set read-only [ 273.216095][T24549] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 273.239529][T24549] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 273.274345][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.281830][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.289364][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.297139][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.304598][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.312165][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.319603][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.327082][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.334643][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.342126][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.349532][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.356914][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.364353][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.371749][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.379215][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.386629][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.394530][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.402008][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.409501][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.417119][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.424568][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.432209][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.439666][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.447070][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.454523][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.462108][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.469533][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.476939][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.484707][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.492250][ T3372] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 273.501017][ T3372] hid-generic 0000:0000:0000.000B: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 273.545584][T24585] netlink: 'syz.9.8252': attribute type 1 has an invalid length. [ 273.617901][T24598] loop4: detected capacity change from 0 to 512 [ 273.625926][T24598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.649545][T24598] EXT4-fs (loop4): 1 truncate cleaned up [ 273.655953][T24598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.701052][T20773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.707503][T24602] loop9: detected capacity change from 0 to 8192 [ 273.728577][T24602] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 273.805881][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8268'. [ 273.815582][T24619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.826616][T24619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.866400][T24624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8268'. [ 273.955305][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8273'. [ 274.095341][T24645] bpf_get_probe_write_proto: 11 callbacks suppressed [ 274.095362][T24645] syz.2.8278[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.102323][T24645] syz.2.8278[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.113977][T24645] syz.2.8278[24645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.127769][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.155403][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.512288][T24677] syz.2.8292[24677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.512419][T24677] syz.2.8292[24677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.524113][T24677] syz.2.8292[24677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.541042][T24671] loop9: detected capacity change from 0 to 8192 [ 274.642737][T24692] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 274.673860][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8300'. [ 274.675196][T24674] sit0 speed is unknown, defaulting to 1000 [ 274.683014][T24698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 274.713663][T24696] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8299'. [ 274.716724][T24674] lo speed is unknown, defaulting to 1000 [ 274.753713][T24702] loop9: detected capacity change from 0 to 256 [ 274.762123][T24702] FAT-fs (loop9): bogus number of FAT sectors [ 274.768412][T24702] FAT-fs (loop9): Can't find a valid FAT filesystem [ 274.791102][T24674] chnl_net:caif_netlink_parms(): no params data found [ 274.865369][T24674] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.874534][T24674] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.887051][T24674] bridge_slave_0: entered allmulticast mode [ 274.893821][T24674] bridge_slave_0: entered promiscuous mode [ 274.901419][T24674] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.908558][T24674] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.916101][T24674] bridge_slave_1: entered allmulticast mode [ 274.922879][T24674] bridge_slave_1: entered promiscuous mode [ 274.945236][T24674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.955963][T24674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.976689][T24674] team0: Port device team_slave_0 added [ 274.983723][T24674] team0: Port device team_slave_1 added [ 275.001318][T24674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.008444][T24674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.034478][T24674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.051570][T24674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.058612][T24674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.084690][T24674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.104685][T24725] 9pnet_fd: Insufficient options for proto=fd [ 275.133732][T24674] hsr_slave_0: entered promiscuous mode [ 275.140206][T24674] hsr_slave_1: entered promiscuous mode [ 275.146241][T24674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.153918][T24674] Cannot create hsr debugfs directory [ 275.224773][T24727] syzkaller0: entered promiscuous mode [ 275.230441][T24727] syzkaller0: entered allmulticast mode [ 275.269423][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.279156][T20801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.410858][T24674] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.482398][T24674] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.540523][T24674] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.651806][T24674] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.688929][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 275.688944][ T29] audit: type=1326 audit(1736582895.476:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.718778][ T29] audit: type=1326 audit(1736582895.486:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.742201][ T29] audit: type=1326 audit(1736582895.486:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.765860][ T29] audit: type=1326 audit(1736582895.486:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.789393][ T29] audit: type=1326 audit(1736582895.486:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.813469][ T29] audit: type=1326 audit(1736582895.596:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.847274][ T29] audit: type=1400 audit(1736582895.596:9356): avc: denied { name_bind } for pid=24779 comm="syz.2.8330" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 275.869142][ T29] audit: type=1400 audit(1736582895.596:9357): avc: denied { node_bind } for pid=24779 comm="syz.2.8330" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 275.874058][T24674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.890354][ T29] audit: type=1326 audit(1736582895.606:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24775 comm="syz.6.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d9bc5d29 code=0x7ffc0000 [ 275.927691][T24674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.933709][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8332'. [ 275.945304][T24674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.960033][T24674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.023183][T24792] syz_tun: entered allmulticast mode [ 276.029506][T24790] syz_tun: left allmulticast mode [ 276.043122][T24674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.057295][T24674] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.067640][T11559] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.074759][T11559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.086871][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.093952][T11559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.172249][T24674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.268097][ T29] audit: type=1400 audit(1736582896.046:9359): avc: denied { read append } for pid=24808 comm="syz.6.8347" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 276.314072][T24674] veth0_vlan: entered promiscuous mode [ 276.324835][T24674] veth1_vlan: entered promiscuous mode [ 276.347638][T24674] veth0_macvtap: entered promiscuous mode [ 276.352277][T24810] loop6: detected capacity change from 0 to 512 [ 276.356846][T24674] veth1_macvtap: entered promiscuous mode [ 276.367387][T24810] EXT4-fs (loop6): blocks per group (71) and clusters per group (32768) inconsistent [ 276.385333][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.395918][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.405837][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.408327][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.416320][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.425189][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.433864][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.452147][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.461997][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.472451][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.482292][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.493201][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.504519][T24674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.522599][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.533239][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.543089][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.553624][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.563517][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.573968][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.583879][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.594334][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.604242][T24674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.614709][T24674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.632721][T24674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.646883][T24674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.655698][T24674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.664548][T24674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.673350][T24674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.747243][T24829] netlink: 'syz.4.8297': attribute type 1 has an invalid length. [ 276.911128][T24845] 9pnet_fd: Insufficient options for proto=fd [ 276.925105][T24849] loop6: detected capacity change from 0 to 512 [ 276.953060][T24849] EXT4-fs: Ignoring removed i_version option [ 276.959224][T24849] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.969887][T24849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 276.995381][T24856] syz.4.8357[24856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.995470][T24856] syz.4.8357[24856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.001134][T24855] ALSA: seq fatal error: cannot create timer (-19) [ 277.022830][T24856] syz.4.8357[24856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.034903][T24861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24861 comm=syz.9.8359 [ 277.039414][T24849] EXT4-fs (loop6): 1 truncate cleaned up [ 277.046379][T24861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24861 comm=syz.9.8359 [ 277.063712][T24849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.098583][T24849] EXT4-fs error (device loop6): ext4_search_dir:1505: inode #12: block 7: comm syz.6.8354: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 277.165850][T24871] netlink: 'syz.3.8362': attribute type 1 has an invalid length. [ 277.176688][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.205628][T24880] loop9: detected capacity change from 0 to 256 [ 277.215026][T24875] netlink: 'syz.4.8366': attribute type 10 has an invalid length. [ 277.226807][T24875] team0: Device hsr_slave_0 failed to register rx_handler [ 277.252457][T24871] bond1: (slave ip6erspan0): making interface the new active one [ 277.260749][T24880] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.272821][T24871] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 277.295640][T24880] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8368'. [ 277.347436][ T3375] kernel write not supported for file /14/attr/exec (pid: 3375 comm: kworker/1:5) [ 277.444636][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8373'. [ 277.556188][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.588313][T24902] syz.6.8379[24902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.660743][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.085365][T24966] pimreg: entered allmulticast mode [ 278.094222][T24966] pimreg: left allmulticast mode [ 278.342948][T24983] loop6: detected capacity change from 0 to 164 [ 278.378970][T24983] syz.6.8415: attempt to access beyond end of device [ 278.378970][T24983] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.396514][T24983] syz.6.8415: attempt to access beyond end of device [ 278.396514][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.414378][T24983] syz.6.8415: attempt to access beyond end of device [ 278.414378][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.427923][T24983] syz.6.8415: attempt to access beyond end of device [ 278.427923][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.455931][T24983] syz.6.8415: attempt to access beyond end of device [ 278.455931][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.497030][T24983] syz.6.8415: attempt to access beyond end of device [ 278.497030][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.517186][T24983] syz.6.8415: attempt to access beyond end of device [ 278.517186][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.536267][T24983] syz.6.8415: attempt to access beyond end of device [ 278.536267][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.557545][T24983] syz.6.8415: attempt to access beyond end of device [ 278.557545][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.576451][T24983] syz.6.8415: attempt to access beyond end of device [ 278.576451][T24983] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.678375][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.722137][T25007] netlink: 'syz.2.8426': attribute type 1 has an invalid length. [ 278.789188][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.968148][T25015] loop4: detected capacity change from 0 to 2048 [ 279.001650][T25015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.093310][T11558] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 279.151344][T11558] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 279.163863][T11558] EXT4-fs (loop4): This should not happen!! Data will be lost [ 279.163863][T11558] [ 279.173626][T11558] EXT4-fs (loop4): Total free blocks count 0 [ 279.179662][T11558] EXT4-fs (loop4): Free/Dirty block details [ 279.185564][T11558] EXT4-fs (loop4): free_blocks=2415919104 [ 279.191334][T11558] EXT4-fs (loop4): dirty_blocks=16 [ 279.196529][T11558] EXT4-fs (loop4): Block reservation details [ 279.202560][T11558] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 279.229718][T24674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.443413][T25042] loop6: detected capacity change from 0 to 256 [ 279.453542][T25042] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.506166][T25046] $Hÿ: renamed from bond0 (while UP) [ 279.518276][T25046] bridge0: port 3($Hÿ) entered disabled state [ 279.774723][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8454'. [ 279.784468][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8454'. [ 279.789031][T25069] sd 0:0:1:0: device reset [ 279.798677][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.838442][T25072] macsec1: entered allmulticast mode [ 279.843780][T25072] syz_tun: entered allmulticast mode [ 279.853620][T25072] syz_tun: left allmulticast mode [ 279.881444][T25076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.934819][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.119522][T25102] loop9: detected capacity change from 0 to 512 [ 280.143935][T25102] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.8469: bad orphan inode 17 [ 280.162078][T25102] ext4_test_bit(bit=16, block=4) = 1 [ 280.167409][T25102] is_bad_inode(inode)=0 [ 280.171704][T25102] NEXT_ORPHAN(inode)=0 [ 280.175902][T25102] max_ino=32 [ 280.179130][T25102] i_nlink=1 [ 280.182670][T25102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.243240][T12890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.285972][T25112] .: renamed from bond0 [ 280.346606][T25118] netlink: 'syz.9.8475': attribute type 1 has an invalid length. [ 280.354425][T25118] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8475'. [ 280.373473][T25120] xt_hashlimit: size too large, truncated to 1048576 [ 280.715521][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 280.715539][ T29] audit: type=1400 audit(1736582900.496:9556): avc: denied { mount } for pid=25141 comm="syz.9.8485" name="/" dev="ramfs" ino=74492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 280.764449][ T29] audit: type=1400 audit(1736582900.546:9557): avc: denied { write } for pid=25145 comm="syz.3.8487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.795929][T25148] netlink: 'syz.9.8488': attribute type 1 has an invalid length. [ 280.803811][T25148] netlink: 'syz.9.8488': attribute type 4 has an invalid length. [ 280.811723][T25148] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.8488'. [ 280.885132][ T29] audit: type=1400 audit(1736582900.656:9558): avc: denied { read } for pid=25149 comm="syz.4.8489" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.909587][ T29] audit: type=1400 audit(1736582900.656:9559): avc: denied { open } for pid=25149 comm="syz.4.8489" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.934399][ T29] audit: type=1400 audit(1736582900.656:9560): avc: denied { ioctl } for pid=25149 comm="syz.4.8489" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.960989][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.968855][ T29] audit: type=1400 audit(1736582900.666:9561): avc: denied { create } for pid=25152 comm="syz.3.8490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.997202][ T29] audit: type=1400 audit(1736582900.776:9562): avc: denied { read } for pid=25155 comm="syz.2.8492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.000172][T25160] SELinux: policydb version 0 does not match my version range 15-33 [ 281.030627][T25160] SELinux: failed to load policy [ 281.038549][ T29] audit: type=1400 audit(1736582900.786:9563): avc: denied { load_policy } for pid=25159 comm="syz.3.8494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 281.068368][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.076140][ T29] audit: type=1400 audit(1736582900.846:9564): avc: denied { create } for pid=25161 comm="syz.9.8495" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 281.112733][ T29] audit: type=1400 audit(1736582900.886:9565): avc: denied { create } for pid=25165 comm="syz.6.8497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 281.299050][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8507'. [ 281.357222][T25194] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 281.374181][T25197] SELinux: policydb version 0 does not match my version range 15-33 [ 281.393367][T25197] SELinux: failed to load policy [ 281.431759][T25204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8515'. [ 281.725331][T25234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8528'. [ 281.845602][T25238] loop4: detected capacity change from 0 to 512 [ 281.860161][T25238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.890857][T25238] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.896718][T25244] pim6reg1: entered allmulticast mode [ 281.930787][T24674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.068631][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.122341][T25278] bpf_get_probe_write_proto: 5 callbacks suppressed [ 282.122435][T25278] syz.4.8549[25278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.129412][T25278] syz.4.8549[25278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.141093][T25278] syz.4.8549[25278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.156004][T25278] netem: change failed [ 282.179230][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.225234][T25283] program syz.4.8551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.331267][T25293] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.357858][T25297] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 282.396564][T25299] xt_CT: No such helper "snmp_trap" [ 282.424813][T25306] loop6: detected capacity change from 0 to 164 [ 282.687664][T25332] rdma_op ffff888154659d80 conn xmit_rdma 0000000000000000 [ 282.777964][T25343] loop4: detected capacity change from 0 to 512 [ 282.784713][T25343] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.791609][T25343] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 282.804613][T25343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 282.812989][T25343] System zones: 1-12 [ 282.817573][T25343] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8579: corrupted in-inode xattr: e_value size too large [ 282.835681][T25343] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.8579: couldn't read orphan inode 15 (err -117) [ 282.852416][T25343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.931916][T24674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.975092][T25354] sit0 speed is unknown, defaulting to 1000 [ 282.990174][T25359] random: crng reseeded on system resumption [ 283.041515][T25354] lo speed is unknown, defaulting to 1000 [ 283.062140][T25364] syz.2.8587[25364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.062250][T25364] syz.2.8587[25364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.085827][T25364] syz.2.8587[25364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.185557][T25375] netlink: 596 bytes leftover after parsing attributes in process `syz.9.8592'. [ 283.245723][T11554] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 283.245755][T11554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.368197][T11554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.608947][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.616393][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.623941][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.635336][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.642888][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.650526][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.656337][T25418] syz.6.8610[25418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.657961][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.666704][T25418] syz.6.8610[25418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.669387][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.690062][T25418] syz.6.8610[25418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.695653][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.695678][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.695699][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.695720][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.695744][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.744356][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.751872][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.759329][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.766792][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.774229][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.781720][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.789138][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.796575][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.804032][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.811608][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.819077][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.826468][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.834326][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.841974][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.849413][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.856810][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.864360][ T3372] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.874709][ T3372] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 283.885537][T25422] uprobe: syz.6.8612:25422 failed to unregister, leaking uprobe [ 283.948961][T25421] uprobe: syz.6.8612:25421 failed to unregister, leaking uprobe [ 284.058474][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8620'. [ 284.358392][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.426159][T25474] loop6: detected capacity change from 0 to 1024 [ 284.473227][T25474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.485869][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.503414][T25482] pimreg: entered allmulticast mode [ 284.511732][T25482] pimreg: left allmulticast mode [ 284.536735][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.612992][T25490] syz.3.8644[25490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.614215][T25487] ref_ctr_offset mismatch. inode: 0x9ca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 285.038181][T25501] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 285.350104][T25510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.381751][T25490] syz.3.8644 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 285.395961][T25490] CPU: 1 UID: 0 PID: 25490 Comm: syz.3.8644 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 285.406741][T25490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.416860][T25490] Call Trace: [ 285.420155][T25490] [ 285.423103][T25490] dump_stack_lvl+0xf2/0x150 [ 285.427742][T25490] dump_stack+0x15/0x1a [ 285.431961][T25490] dump_header+0x83/0x2d0 [ 285.436398][T25490] oom_kill_process+0x341/0x4c0 [ 285.441359][T25490] out_of_memory+0x9af/0xbe0 [ 285.446000][T25490] ? css_next_descendant_pre+0x11c/0x140 [ 285.451712][T25490] mem_cgroup_out_of_memory+0x13e/0x190 [ 285.457349][T25490] try_charge_memcg+0x508/0x7f0 [ 285.462323][T25490] obj_cgroup_charge_pages+0xbd/0x1a0 [ 285.467803][T25490] __memcg_kmem_charge_page+0x9d/0x170 [ 285.473292][T25490] __alloc_pages_noprof+0x1bc/0x340 [ 285.478593][T25490] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 285.484051][T25490] alloc_pages_noprof+0xe1/0x100 [ 285.489022][T25490] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 285.494871][T25490] __kvmalloc_node_noprof+0x121/0x170 [ 285.500287][T25490] ? ip_set_alloc+0x1f/0x30 [ 285.504822][T25490] ip_set_alloc+0x1f/0x30 [ 285.509239][T25490] hash_netiface_create+0x273/0x730 [ 285.514590][T25490] ? __nla_parse+0x40/0x60 [ 285.519097][T25490] ? __pfx_hash_netiface_create+0x10/0x10 [ 285.524921][T25490] ip_set_create+0x359/0x8a0 [ 285.529566][T25490] ? strnstr+0xe1/0x100 [ 285.533769][T25490] ? __nla_parse+0x40/0x60 [ 285.538221][T25490] nfnetlink_rcv_msg+0x4a9/0x570 [ 285.543285][T25490] netlink_rcv_skb+0x12c/0x230 [ 285.548097][T25490] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 285.553715][T25490] nfnetlink_rcv+0x16c/0x15d0 [ 285.558452][T25490] ? kmem_cache_free+0xdc/0x2d0 [ 285.563347][T25490] ? nlmon_xmit+0x51/0x60 [ 285.567779][T25490] ? __kfree_skb+0x102/0x150 [ 285.572427][T25490] ? consume_skb+0x49/0x160 [ 285.576951][T25490] ? nlmon_xmit+0x51/0x60 [ 285.581309][T25490] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 285.586696][T25490] ? __dev_queue_xmit+0xb6e/0x2090 [ 285.591841][T25490] ? ref_tracker_free+0x3a5/0x410 [ 285.596915][T25490] ? __dev_queue_xmit+0x186/0x2090 [ 285.602063][T25490] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 285.607643][T25490] netlink_unicast+0x599/0x670 [ 285.612478][T25490] netlink_sendmsg+0x5cc/0x6e0 [ 285.617289][T25490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.622605][T25490] __sock_sendmsg+0x140/0x180 [ 285.627315][T25490] ____sys_sendmsg+0x312/0x410 [ 285.632174][T25490] __sys_sendmsg+0x19d/0x230 [ 285.636889][T25490] __x64_sys_sendmsg+0x46/0x50 [ 285.641773][T25490] x64_sys_call+0x2734/0x2dc0 [ 285.646536][T25490] do_syscall_64+0xc9/0x1c0 [ 285.651115][T25490] ? clear_bhb_loop+0x55/0xb0 [ 285.655874][T25490] ? clear_bhb_loop+0x55/0xb0 [ 285.660580][T25490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.666603][T25490] RIP: 0033:0x7fe518395d29 [ 285.671045][T25490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.690718][T25490] RSP: 002b:00007fe516a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.699208][T25490] RAX: ffffffffffffffda RBX: 00007fe518585fa0 RCX: 00007fe518395d29 [ 285.707210][T25490] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 285.715205][T25490] RBP: 00007fe518411b08 R08: 0000000000000000 R09: 0000000000000000 [ 285.723233][T25490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.731276][T25490] R13: 0000000000000000 R14: 00007fe518585fa0 R15: 00007ffe14389be8 [ 285.739313][T25490] [ 285.742687][T25490] memory: usage 307200kB, limit 307200kB, failcnt 1835 [ 285.750299][T25490] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 285.758258][T25490] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 285.765561][T25490] Memory cgroup stats for /syz3: [ 285.768126][T25490] cache 0 [ 285.776209][T25490] rss 0 [ 285.779019][T25490] shmem 0 [ 285.782026][T25490] mapped_file 0 [ 285.785498][T25490] dirty 0 [ 285.788521][T25490] writeback 0 [ 285.791990][T25490] workingset_refault_anon 78 [ 285.796751][T25490] workingset_refault_file 128 [ 285.801559][T25490] swap 385024 [ 285.804852][T25490] swapcached 4096 [ 285.808596][T25490] pgpgin 152871 [ 285.812199][T25490] pgpgout 152870 [ 285.815772][T25490] pgfault 167668 [ 285.819359][T25490] pgmajfault 72 [ 285.822949][T25490] inactive_anon 0 [ 285.826622][T25490] active_anon 4096 [ 285.830396][T25490] inactive_file 0 [ 285.834042][T25490] active_file 0 [ 285.837507][T25490] unevictable 0 [ 285.841011][T25490] hierarchical_memory_limit 314572800 [ 285.846389][T25490] hierarchical_memsw_limit 9223372036854771712 [ 285.852575][T25490] total_cache 0 [ 285.856045][T25490] total_rss 0 [ 285.859371][T25490] total_shmem 0 [ 285.862836][T25490] total_mapped_file 0 [ 285.866823][T25490] total_dirty 0 [ 285.867665][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.870320][T25490] total_writeback 0 [ 285.881887][T25490] total_workingset_refault_anon 78 [ 285.882926][T25524] loop6: detected capacity change from 0 to 512 [ 285.887163][T25490] total_workingset_refault_file 128 [ 285.898698][T25490] total_swap 385024 [ 285.902530][T25490] total_swapcached 4096 [ 285.906690][T25490] total_pgpgin 152871 [ 285.910703][T25490] total_pgpgout 152870 [ 285.914789][T25490] total_pgfault 167668 [ 285.918937][T25490] total_pgmajfault 72 [ 285.922936][T25490] total_inactive_anon 0 [ 285.923177][T25524] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.927086][T25490] total_active_anon 4096 [ 285.927098][T25490] total_inactive_file 0 [ 285.927109][T25490] total_active_file 0 [ 285.948736][T25490] total_unevictable 0 [ 285.952721][T25490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8644,pid=25489,uid=0 [ 285.967496][T25490] Memory cgroup out of memory: Killed process 25489 (syz.3.8644) total-vm:93516kB, anon-rss:788kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 285.989416][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.002325][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 286.002342][ T29] audit: type=1400 audit(1736582905.786:9803): avc: denied { create } for pid=25525 comm="syz.9.8660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.049263][T25524] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #17: comm syz.6.8659: iget: bad i_size value: -6917529027641081756 [ 286.078301][ T29] audit: type=1400 audit(1736582905.866:9804): avc: denied { bind } for pid=25525 comm="syz.9.8660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.108271][T25524] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.8659: couldn't read orphan inode 17 (err -117) [ 286.122310][ T29] audit: type=1400 audit(1736582905.886:9805): avc: denied { listen } for pid=25525 comm="syz.9.8660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.142047][ T29] audit: type=1400 audit(1736582905.886:9806): avc: denied { read } for pid=25525 comm="syz.9.8660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.172155][T25524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.194991][ T29] audit: type=1400 audit(1736582905.976:9807): avc: denied { setattr } for pid=25523 comm="syz.6.8659" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.299783][T25524] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8659: bg 0: block 65: padding at end of block bitmap is not set [ 286.305803][T25490] syz.3.8644 (25490) used greatest stack depth: 6288 bytes left [ 286.319204][T25524] Quota error (device loop6): write_blk: dquota write failed [ 286.329835][T25524] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 286.343595][T25524] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.8659: Failed to acquire dquot type 0 [ 286.383005][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.402694][ T29] audit: type=1400 audit(1736582906.186:9808): avc: denied { create } for pid=25538 comm="syz.3.8666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 286.456195][ T29] audit: type=1400 audit(1736582906.206:9809): avc: denied { sys_admin } for pid=25538 comm="syz.3.8666" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 286.477348][ T29] audit: type=1400 audit(1736582906.206:9810): avc: denied { checkpoint_restore } for pid=25538 comm="syz.3.8666" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.594892][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8672'. [ 286.625441][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8675'. [ 286.641009][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8675'. [ 286.687259][T25574] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 286.697154][T25571] IPVS: stopping master sync thread 25574 ... [ 286.789049][T25584] loop4: detected capacity change from 0 to 256 [ 286.834776][T25590] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8687'. [ 286.844636][T25584] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.856827][T25590] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8687'. [ 286.877304][T25584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8684'. [ 286.929705][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8690'. [ 286.943383][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8690'. [ 287.028536][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.062408][T25617] loop4: detected capacity change from 0 to 128 [ 287.074803][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.111983][T25617] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.124539][T25617] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.187883][T24674] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.199588][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.259010][T25640] loop6: detected capacity change from 0 to 1024 [ 287.265863][T25640] EXT4-fs: Ignoring removed bh option [ 287.296284][T25640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.329274][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.356504][T25649] loop4: detected capacity change from 0 to 1024 [ 287.370813][T25649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.399384][T24674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.439908][T25659] .: renamed from bond0 (while UP) [ 287.498910][T25665] loop6: detected capacity change from 0 to 2048 [ 287.521678][T25665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.582423][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.619964][T25675] loop4: detected capacity change from 0 to 1024 [ 287.627359][T25675] EXT4-fs: Ignoring removed bh option [ 287.633249][T25678] hsr_slave_0: left promiscuous mode [ 287.642402][T25678] hsr_slave_1: left promiscuous mode [ 287.673174][T25675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.710614][T24674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.804327][T25698] loop6: detected capacity change from 0 to 2048 [ 287.840486][T25702] loop4: detected capacity change from 0 to 512 [ 287.848679][T25698] loop6: p1 < > p4 [ 287.853965][T25698] loop6: p4 size 8388608 extends beyond EOD, truncated [ 287.858779][T25702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.885158][T25702] EXT4-fs (loop4): 1 truncate cleaned up [ 287.891364][T25702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.913946][T25702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.038259][T25715] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.227315][T11544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.338885][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.726963][T25795] loop6: detected capacity change from 0 to 512 [ 288.745061][T25795] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.8778: bad orphan inode 17 [ 288.758106][T25795] ext4_test_bit(bit=16, block=4) = 1 [ 288.763496][T25795] is_bad_inode(inode)=0 [ 288.767683][T25795] NEXT_ORPHAN(inode)=0 [ 288.771814][T25795] max_ino=32 [ 288.775012][T25795] i_nlink=1 [ 288.778599][T25795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.813518][T19583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.221491][T25841] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.229047][T25841] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 289.348146][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.468502][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.691646][T25888] loop6: detected capacity change from 0 to 8192 [ 289.702133][T25888] bio_check_eod: 7681 callbacks suppressed [ 289.702150][T25888] syz.6.8812: attempt to access beyond end of device [ 289.702150][T25888] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 289.731180][T25888] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 289.739149][T25888] FAT-fs (loop6): Filesystem has been set read-only [ 289.771755][T25888] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 289.782283][T25888] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 289.889936][T25916] SELinux: policydb table sizes (149,0) do not match mine (8,7) [ 289.922063][T25916] SELinux: failed to load policy [ 289.923421][T25921] sit0 speed is unknown, defaulting to 1000 [ 289.941856][T25924] netlink: 'syz.6.8827': attribute type 3 has an invalid length. [ 290.007232][T25921] lo speed is unknown, defaulting to 1000 [ 290.463010][T25952] bridge0: port 3(vlan2) entered blocking state [ 290.469452][T25952] bridge0: port 3(vlan2) entered disabled state [ 290.478559][T11554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.481716][T25952] vlan2: entered allmulticast mode [ 290.502990][T25952] vlan2: left allmulticast mode [ 290.560707][T25962] bpf_get_probe_write_proto: 2 callbacks suppressed [ 290.560723][T25962] syz.6.8842[25962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.575186][T25962] syz.6.8842[25962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.579930][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.604513][T25962] syz.6.8842[25962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.656298][T25968] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 290.656298][T25968] n'º|$@OOݱµ’-®+·el' [ 291.622137][ T29] kauditd_printk_skb: 785 callbacks suppressed [ 291.622153][ T29] audit: type=1400 audit(1736582911.406:10596): avc: denied { read } for pid=25996 comm="syz.3.8857" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 291.651958][ T29] audit: type=1400 audit(1736582911.406:10597): avc: denied { open } for pid=25996 comm="syz.3.8857" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 291.676844][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.779408][T11559] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.866995][ C1] ================================================================== [ 291.875145][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 291.881891][ C1] [ 291.884225][ C1] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 0: [ 291.892301][ C1] can_receive+0x4e/0x1f0 [ 291.896671][ C1] can_rcv+0xe7/0x180 [ 291.900689][ C1] __netif_receive_skb+0x123/0x280 [ 291.905827][ C1] process_backlog+0x22e/0x440 [ 291.910628][ C1] __napi_poll+0x63/0x3c0 [ 291.914980][ C1] net_rx_action+0x3a1/0x7f0 [ 291.919635][ C1] handle_softirqs+0xbf/0x280 [ 291.924351][ C1] do_softirq+0x5e/0x90 [ 291.928543][ C1] __local_bh_enable_ip+0x6e/0x70 [ 291.933601][ C1] netif_rx+0x83/0x240 [ 291.937687][ C1] can_send+0x586/0x6d0 [ 291.941874][ C1] isotp_sendmsg+0x9ab/0xc00 [ 291.946486][ C1] __sock_sendmsg+0x140/0x180 [ 291.951217][ C1] ____sys_sendmsg+0x312/0x410 [ 291.956016][ C1] __sys_sendmsg+0x19d/0x230 [ 291.960633][ C1] __x64_sys_sendmsg+0x46/0x50 [ 291.965417][ C1] x64_sys_call+0x2734/0x2dc0 [ 291.970130][ C1] do_syscall_64+0xc9/0x1c0 [ 291.974660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.980596][ C1] [ 291.982926][ C1] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 1: [ 291.991010][ C1] can_receive+0x4e/0x1f0 [ 291.995379][ C1] can_rcv+0xe7/0x180 [ 291.999391][ C1] __netif_receive_skb+0x123/0x280 [ 292.004527][ C1] process_backlog+0x22e/0x440 [ 292.009320][ C1] __napi_poll+0x63/0x3c0 [ 292.013674][ C1] net_rx_action+0x3a1/0x7f0 [ 292.018297][ C1] handle_softirqs+0xbf/0x280 [ 292.023005][ C1] run_ksoftirqd+0x1c/0x30 [ 292.027434][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 292.032413][ C1] kthread+0x1d1/0x210 [ 292.036494][ C1] ret_from_fork+0x4b/0x60 [ 292.040928][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.045725][ C1] [ 292.048056][ C1] value changed: 0x000000000001566d -> 0x000000000001566e [ 292.055169][ C1] [ 292.057501][ C1] Reported by Kernel Concurrency Sanitizer on: [ 292.063663][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 292.074279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.084450][ C1] ================================================================== [ 292.094492][ C1] ================================================================== [ 292.102602][ C1] BUG: KCSAN: data-race in can_send / can_send [ 292.108810][ C1] [ 292.111142][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 0: [ 292.119223][ C1] can_send+0x5a2/0x6d0 [ 292.123418][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 292.128117][ C1] can_rcv_filter+0x225/0x4c0 [ 292.132830][ C1] can_receive+0x182/0x1f0 [ 292.137283][ C1] can_rcv+0xe7/0x180 [ 292.141296][ C1] __netif_receive_skb+0x123/0x280 [ 292.146443][ C1] process_backlog+0x22e/0x440 [ 292.151260][ C1] __napi_poll+0x63/0x3c0 [ 292.155626][ C1] net_rx_action+0x3a1/0x7f0 [ 292.160256][ C1] handle_softirqs+0xbf/0x280 [ 292.164970][ C1] do_softirq+0x5e/0x90 [ 292.169165][ C1] __local_bh_enable_ip+0x6e/0x70 [ 292.174293][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 292.179263][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 292.184929][ C1] process_scheduled_works+0x483/0x9a0 [ 292.190434][ C1] worker_thread+0x51d/0x6f0 [ 292.195055][ C1] kthread+0x1d1/0x210 [ 292.199145][ C1] ret_from_fork+0x4b/0x60 [ 292.203582][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.208368][ C1] [ 292.210715][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 1: [ 292.218807][ C1] can_send+0x5a2/0x6d0 [ 292.223035][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 292.227740][ C1] can_rcv_filter+0x225/0x4c0 [ 292.232461][ C1] can_receive+0x182/0x1f0 [ 292.236916][ C1] can_rcv+0xe7/0x180 [ 292.240946][ C1] __netif_receive_skb+0x123/0x280 [ 292.246088][ C1] process_backlog+0x22e/0x440 [ 292.250895][ C1] __napi_poll+0x63/0x3c0 [ 292.255257][ C1] net_rx_action+0x3a1/0x7f0 [ 292.259881][ C1] handle_softirqs+0xbf/0x280 [ 292.264590][ C1] run_ksoftirqd+0x1c/0x30 [ 292.269040][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 292.274013][ C1] kthread+0x1d1/0x210 [ 292.278108][ C1] ret_from_fork+0x4b/0x60 [ 292.282545][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.287329][ C1] [ 292.289661][ C1] value changed: 0x000000000001a18d -> 0x000000000001a18e [ 292.296782][ C1] [ 292.299115][ C1] Reported by Kernel Concurrency Sanitizer on: [ 292.305272][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 292.315882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.325954][ C1] ================================================================== [ 292.371541][ C0] ================================================================== [ 292.379671][ C0] BUG: KCSAN: data-race in can_send / can_send [ 292.385881][ C0] [ 292.388216][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 1: [ 292.396303][ C0] can_send+0x5b6/0x6d0 [ 292.400491][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 292.405188][ C0] can_rcv_filter+0x225/0x4c0 [ 292.409900][ C0] can_receive+0x182/0x1f0 [ 292.414358][ C0] can_rcv+0xe7/0x180 [ 292.418374][ C0] __netif_receive_skb+0x123/0x280 [ 292.423508][ C0] process_backlog+0x22e/0x440 [ 292.428300][ C0] __napi_poll+0x63/0x3c0 [ 292.432646][ C0] net_rx_action+0x3a1/0x7f0 [ 292.437270][ C0] handle_softirqs+0xbf/0x280 [ 292.441981][ C0] run_ksoftirqd+0x1c/0x30 [ 292.446416][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 292.451387][ C0] kthread+0x1d1/0x210 [ 292.455474][ C0] ret_from_fork+0x4b/0x60 [ 292.459908][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.464690][ C0] [ 292.467023][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 0: [ 292.475103][ C0] can_send+0x5b6/0x6d0 [ 292.479291][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 292.483994][ C0] can_rcv_filter+0x225/0x4c0 [ 292.488708][ C0] can_receive+0x182/0x1f0 [ 292.493159][ C0] can_rcv+0xe7/0x180 [ 292.497176][ C0] __netif_receive_skb+0x123/0x280 [ 292.502314][ C0] process_backlog+0x22e/0x440 [ 292.507137][ C0] __napi_poll+0x63/0x3c0 [ 292.511494][ C0] net_rx_action+0x3a1/0x7f0 [ 292.516106][ C0] handle_softirqs+0xbf/0x280 [ 292.520818][ C0] __irq_exit_rcu+0x3a/0xc0 [ 292.525352][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 292.531013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.537017][ C0] pskb_expand_head+0x152/0xa00 [ 292.541899][ C0] __pskb_pull_tail+0xb8/0xb80 [ 292.546706][ C0] skb_ensure_writable+0x1d5/0x210 [ 292.551835][ C0] sk_skb_pull_data+0x61/0x80 [ 292.556529][ C0] bpf_prog_119110c7debceb57+0x23/0x25 [ 292.562004][ C0] sk_psock_verdict_recv+0x138/0x4b0 [ 292.567666][ C0] unix_stream_read_skb+0xb9/0x1e0 [ 292.572798][ C0] sk_psock_verdict_data_ready+0x77/0x220 [ 292.578549][ C0] unix_stream_sendmsg+0x530/0x8a0 [ 292.583672][ C0] __sock_sendmsg+0x140/0x180 [ 292.588377][ C0] ____sys_sendmsg+0x312/0x410 [ 292.593165][ C0] __sys_sendmsg+0x19d/0x230 [ 292.597775][ C0] __x64_sys_sendmsg+0x46/0x50 [ 292.602580][ C0] x64_sys_call+0x2734/0x2dc0 [ 292.607291][ C0] do_syscall_64+0xc9/0x1c0 [ 292.611848][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.617779][ C0] [ 292.620114][ C0] value changed: 0x000000000000bac1 -> 0x000000000000bac2 [ 292.627250][ C0] [ 292.629588][ C0] Reported by Kernel Concurrency Sanitizer on: [ 292.635747][ C0] CPU: 0 UID: 0 PID: 26003 Comm: syz.4.8860 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 292.646534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.656605][ C0] ================================================================== [ 292.862854][ C0] ================================================================== [ 292.870984][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 292.878246][ C0] [ 292.880588][ C0] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 1: [ 292.888658][ C0] can_rcv_filter+0x237/0x4c0 [ 292.893372][ C0] can_receive+0x182/0x1f0 [ 292.897818][ C0] can_rcv+0xe7/0x180 [ 292.901833][ C0] __netif_receive_skb+0x123/0x280 [ 292.906979][ C0] process_backlog+0x22e/0x440 [ 292.911768][ C0] __napi_poll+0x63/0x3c0 [ 292.916134][ C0] net_rx_action+0x3a1/0x7f0 [ 292.920764][ C0] handle_softirqs+0xbf/0x280 [ 292.925482][ C0] run_ksoftirqd+0x1c/0x30 [ 292.929917][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 292.934894][ C0] kthread+0x1d1/0x210 [ 292.938985][ C0] ret_from_fork+0x4b/0x60 [ 292.943452][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.948232][ C0] [ 292.950569][ C0] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 0: [ 292.958647][ C0] can_rcv_filter+0x237/0x4c0 [ 292.963366][ C0] can_receive+0x182/0x1f0 [ 292.967902][ C0] can_rcv+0xe7/0x180 [ 292.971913][ C0] __netif_receive_skb+0x123/0x280 [ 292.977059][ C0] process_backlog+0x22e/0x440 [ 292.981856][ C0] __napi_poll+0x63/0x3c0 [ 292.986213][ C0] net_rx_action+0x3a1/0x7f0 [ 292.990844][ C0] handle_softirqs+0xbf/0x280 [ 292.995556][ C0] do_softirq+0x5e/0x90 [ 292.999746][ C0] __local_bh_enable_ip+0x6e/0x70 [ 293.004808][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 293.009766][ C0] wg_packet_encrypt_worker+0x188/0xbb0 [ 293.015341][ C0] process_scheduled_works+0x483/0x9a0 [ 293.020842][ C0] worker_thread+0x51d/0x6f0 [ 293.025472][ C0] kthread+0x1d1/0x210 [ 293.029557][ C0] ret_from_fork+0x4b/0x60 [ 293.033991][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.038775][ C0] [ 293.041110][ C0] value changed: 0x0000000000025307 -> 0x0000000000025308 [ 293.048227][ C0] [ 293.050590][ C0] Reported by Kernel Concurrency Sanitizer on: [ 293.056759][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 293.067364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.077455][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 293.083985][ C0] ================================================================== [ 293.098553][ C1] ================================================================== [ 293.106687][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 293.113929][ C1] [ 293.116262][ C1] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 0: [ 293.124346][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 293.129067][ C1] can_rcv_filter+0x225/0x4c0 [ 293.133778][ C1] can_receive+0x182/0x1f0 [ 293.138232][ C1] can_rcv+0xe7/0x180 [ 293.142244][ C1] __netif_receive_skb+0x123/0x280 [ 293.147383][ C1] process_backlog+0x22e/0x440 [ 293.152174][ C1] __napi_poll+0x63/0x3c0 [ 293.156525][ C1] net_rx_action+0x3a1/0x7f0 [ 293.161142][ C1] handle_softirqs+0xbf/0x280 [ 293.165853][ C1] run_ksoftirqd+0x1c/0x30 [ 293.170288][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 293.175259][ C1] kthread+0x1d1/0x210 [ 293.179351][ C1] ret_from_fork+0x4b/0x60 [ 293.183787][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.188575][ C1] [ 293.190914][ C1] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 1: [ 293.198995][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 293.203703][ C1] can_rcv_filter+0x225/0x4c0 [ 293.208418][ C1] can_receive+0x182/0x1f0 [ 293.212866][ C1] can_rcv+0xe7/0x180 [ 293.216881][ C1] __netif_receive_skb+0x123/0x280 [ 293.222028][ C1] process_backlog+0x22e/0x440 [ 293.226828][ C1] __napi_poll+0x63/0x3c0 [ 293.231178][ C1] net_rx_action+0x3a1/0x7f0 [ 293.235792][ C1] handle_softirqs+0xbf/0x280 [ 293.240506][ C1] do_softirq+0x5e/0x90 [ 293.244697][ C1] __local_bh_enable_ip+0x6e/0x70 [ 293.249761][ C1] _raw_read_unlock_bh+0x1b/0x20 [ 293.254724][ C1] wg_socket_send_skb_to_peer+0x109/0x130 [ 293.260465][ C1] wg_packet_tx_worker+0x127/0x360 [ 293.265600][ C1] process_scheduled_works+0x483/0x9a0 [ 293.271177][ C1] worker_thread+0x51d/0x6f0 [ 293.275793][ C1] kthread+0x1d1/0x210 [ 293.279882][ C1] ret_from_fork+0x4b/0x60 [ 293.284321][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.289110][ C1] [ 293.291455][ C1] value changed: 0x00029b41 -> 0x00029b42 [ 293.297187][ C1] [ 293.299522][ C1] Reported by Kernel Concurrency Sanitizer on: [ 293.305692][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 293.316305][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.326384][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 293.332476][ C1] ================================================================== [ 293.344497][ C1] ================================================================== [ 293.352606][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 293.359334][ C1] [ 293.361664][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 0: [ 293.369748][ C1] can_receive+0x1ca/0x1f0 [ 293.374502][ C1] can_rcv+0xe7/0x180 [ 293.378513][ C1] __netif_receive_skb+0x123/0x280 [ 293.383650][ C1] process_backlog+0x22e/0x440 [ 293.388436][ C1] __napi_poll+0x63/0x3c0 [ 293.392790][ C1] net_rx_action+0x3a1/0x7f0 [ 293.397406][ C1] handle_softirqs+0xbf/0x280 [ 293.402118][ C1] do_softirq+0x5e/0x90 [ 293.406305][ C1] __local_bh_enable_ip+0x6e/0x70 [ 293.411356][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 293.416320][ C1] batadv_nc_purge_paths+0x220/0x270 [ 293.421641][ C1] batadv_nc_worker+0x3db/0xad0 [ 293.426517][ C1] process_scheduled_works+0x483/0x9a0 [ 293.432003][ C1] worker_thread+0x51d/0x6f0 [ 293.436623][ C1] kthread+0x1d1/0x210 [ 293.440720][ C1] ret_from_fork+0x4b/0x60 [ 293.445152][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.449940][ C1] [ 293.452326][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 1: [ 293.460490][ C1] can_receive+0x1ca/0x1f0 [ 293.464949][ C1] can_rcv+0xe7/0x180 [ 293.468980][ C1] __netif_receive_skb+0x123/0x280 [ 293.474221][ C1] process_backlog+0x22e/0x440 [ 293.479009][ C1] __napi_poll+0x63/0x3c0 [ 293.483361][ C1] net_rx_action+0x3a1/0x7f0 [ 293.487989][ C1] handle_softirqs+0xbf/0x280 [ 293.492702][ C1] do_softirq+0x5e/0x90 [ 293.496890][ C1] __local_bh_enable_ip+0x6e/0x70 [ 293.501958][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 293.506927][ C1] wg_packet_encrypt_worker+0xb6b/0xbb0 [ 293.512495][ C1] process_scheduled_works+0x483/0x9a0 [ 293.517985][ C1] worker_thread+0x51d/0x6f0 [ 293.522613][ C1] kthread+0x1d1/0x210 [ 293.526701][ C1] ret_from_fork+0x4b/0x60 [ 293.531135][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.535917][ C1] [ 293.538257][ C1] value changed: 0x000000000000d00b -> 0x000000000000d00d [ 293.545372][ C1] [ 293.547705][ C1] Reported by Kernel Concurrency Sanitizer on: [ 293.553867][ C1] CPU: 1 UID: 0 PID: 3375 Comm: kworker/1:5 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 293.564652][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.574730][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 293.581254][ C1] ================================================================== [ 293.592341][ C0] ================================================================== [ 293.600456][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 293.607187][ C0] [ 293.609517][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 1: [ 293.617594][ C0] can_receive+0x62/0x1f0 [ 293.621957][ C0] can_rcv+0xe7/0x180 [ 293.625967][ C0] __netif_receive_skb+0x123/0x280 [ 293.631103][ C0] process_backlog+0x22e/0x440 [ 293.635889][ C0] __napi_poll+0x63/0x3c0 [ 293.640238][ C0] net_rx_action+0x3a1/0x7f0 [ 293.644844][ C0] handle_softirqs+0xbf/0x280 [ 293.649557][ C0] run_ksoftirqd+0x1c/0x30 [ 293.654079][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 293.659049][ C0] kthread+0x1d1/0x210 [ 293.663133][ C0] ret_from_fork+0x4b/0x60 [ 293.667576][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.672366][ C0] [ 293.674700][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 0: [ 293.682778][ C0] can_receive+0x62/0x1f0 [ 293.687142][ C0] can_rcv+0xe7/0x180 [ 293.691160][ C0] __netif_receive_skb+0x123/0x280 [ 293.696301][ C0] process_backlog+0x22e/0x440 [ 293.701078][ C0] __napi_poll+0x63/0x3c0 [ 293.705430][ C0] net_rx_action+0x3a1/0x7f0 [ 293.710046][ C0] handle_softirqs+0xbf/0x280 [ 293.714740][ C0] do_softirq+0x5e/0x90 [ 293.718913][ C0] __local_bh_enable_ip+0x6e/0x70 [ 293.723951][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 293.728903][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 293.734552][ C0] process_scheduled_works+0x483/0x9a0 [ 293.740034][ C0] worker_thread+0x51d/0x6f0 [ 293.744650][ C0] kthread+0x1d1/0x210 [ 293.748725][ C0] ret_from_fork+0x4b/0x60 [ 293.753153][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.757935][ C0] [ 293.760254][ C0] value changed: 0x0000000000012104 -> 0x0000000000012106 [ 293.767358][ C0] [ 293.769695][ C0] Reported by Kernel Concurrency Sanitizer on: [ 293.775843][ C0] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:4 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 293.786610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.796675][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 293.803460][ C0] ================================================================== [ 293.830174][ C0] ================================================================== [ 293.838284][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 293.845013][ C0] [ 293.847349][ C0] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 1: [ 293.855433][ C0] can_receive+0x1b6/0x1f0 [ 293.859889][ C0] can_rcv+0xe7/0x180 [ 293.863991][ C0] __netif_receive_skb+0x123/0x280 [ 293.869130][ C0] process_backlog+0x22e/0x440 [ 293.873915][ C0] __napi_poll+0x63/0x3c0 [ 293.878267][ C0] net_rx_action+0x3a1/0x7f0 [ 293.882882][ C0] handle_softirqs+0xbf/0x280 [ 293.887593][ C0] do_softirq+0x5e/0x90 [ 293.891788][ C0] __local_bh_enable_ip+0x6e/0x70 [ 293.896841][ C0] wg_timers_any_authenticated_packet_traversal+0xe5/0x110 [ 293.904080][ C0] wg_packet_handshake_send_worker+0xd7/0x150 [ 293.910169][ C0] process_scheduled_works+0x483/0x9a0 [ 293.915654][ C0] worker_thread+0x51d/0x6f0 [ 293.920273][ C0] kthread+0x1d1/0x210 [ 293.924355][ C0] ret_from_fork+0x4b/0x60 [ 293.928786][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.933566][ C0] [ 293.935900][ C0] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 0: [ 293.943980][ C0] can_receive+0x1b6/0x1f0 [ 293.948430][ C0] can_rcv+0xe7/0x180 [ 293.952443][ C0] __netif_receive_skb+0x123/0x280 [ 293.957840][ C0] process_backlog+0x22e/0x440 [ 293.962628][ C0] __napi_poll+0x63/0x3c0 [ 293.966981][ C0] net_rx_action+0x3a1/0x7f0 [ 293.971594][ C0] handle_softirqs+0xbf/0x280 [ 293.976309][ C0] do_softirq+0x5e/0x90 [ 293.980500][ C0] __local_bh_enable_ip+0x6e/0x70 [ 293.985641][ C0] copy_fpstate_to_sigframe+0x31d/0x7e0 [ 293.991226][ C0] get_sigframe+0x2f3/0x430 [ 293.995767][ C0] x64_setup_rt_frame+0xad/0x590 [ 294.000760][ C0] arch_do_signal_or_restart+0x287/0x4b0 [ 294.006434][ C0] syscall_exit_to_user_mode+0x62/0x120 [ 294.012016][ C0] do_syscall_64+0xd6/0x1c0 [ 294.016623][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.019041][ T29] audit: type=1326 audit(1736582913.376:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26008 comm="syz.3.8874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe518395d29 code=0x0 [ 294.022529][ C0] [ 294.022537][ C0] value changed: 0x000000000003701b -> 0x000000000003701c [ 294.055053][ C0] [ 294.057386][ C0] Reported by Kernel Concurrency Sanitizer on: [ 294.063547][ C0] CPU: 0 UID: 0 PID: 16977 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 294.074504][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.084576][ C0] ================================================================== [ 294.636541][T11558] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.881330][ C0] ================================================================== [ 294.889463][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 294.896193][ C0] [ 294.898527][ C0] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 1: [ 294.906609][ C0] can_receive+0x4e/0x1f0 [ 294.910975][ C0] can_rcv+0xe7/0x180 [ 294.914991][ C0] __netif_receive_skb+0x123/0x280 [ 294.920131][ C0] process_backlog+0x22e/0x440 [ 294.924925][ C0] __napi_poll+0x63/0x3c0 [ 294.929275][ C0] net_rx_action+0x3a1/0x7f0 [ 294.933904][ C0] handle_softirqs+0xbf/0x280 [ 294.938615][ C0] do_softirq+0x5e/0x90 [ 294.942804][ C0] __local_bh_enable_ip+0x6e/0x70 [ 294.947858][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 294.952825][ C0] lock_sock_nested+0x10f/0x140 [ 294.957707][ C0] tcp_close+0x1b/0xd0 [ 294.961947][ C0] inet_release+0xce/0xf0 [ 294.966319][ C0] sock_release+0x48/0xe0 [ 294.970683][ C0] rds_tcp_conn_path_connect+0x279/0x440 [ 294.976355][ C0] rds_connect_worker+0x12c/0x1b0 [ 294.981406][ C0] process_scheduled_works+0x483/0x9a0 [ 294.986895][ C0] worker_thread+0x51d/0x6f0 [ 294.991525][ C0] kthread+0x1d1/0x210 [ 294.995647][ C0] ret_from_fork+0x4b/0x60 [ 295.000092][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.004881][ C0] [ 295.007228][ C0] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 0: [ 295.015306][ C0] can_receive+0x4e/0x1f0 [ 295.019674][ C0] can_rcv+0xe7/0x180 [ 295.023696][ C0] __netif_receive_skb+0x123/0x280 [ 295.028862][ C0] process_backlog+0x22e/0x440 [ 295.033656][ C0] __napi_poll+0x63/0x3c0 [ 295.038011][ C0] net_rx_action+0x3a1/0x7f0 [ 295.042632][ C0] handle_softirqs+0xbf/0x280 [ 295.047345][ C0] run_ksoftirqd+0x1c/0x30 [ 295.051788][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 295.056761][ C0] kthread+0x1d1/0x210 [ 295.060847][ C0] ret_from_fork+0x4b/0x60 [ 295.065287][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.070069][ C0] [ 295.072400][ C0] value changed: 0x0000000000054d40 -> 0x0000000000054d41 [ 295.076328][T20801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.079501][ C0] [ 295.079507][ C0] Reported by Kernel Concurrency Sanitizer on: [ 295.079517][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 295.079546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.116385][ C0] ================================================================== [ 295.132275][ C1] ================================================================== [ 295.140392][ C1] BUG: KCSAN: data-race in can_send / can_send [ 295.146597][ C1] [ 295.148948][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 0: [ 295.157045][ C1] can_send+0x5a2/0x6d0 [ 295.161329][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 295.166061][ C1] can_rcv_filter+0x225/0x4c0 [ 295.170776][ C1] can_receive+0x182/0x1f0 [ 295.175229][ C1] can_rcv+0xe7/0x180 [ 295.179250][ C1] __netif_receive_skb+0x123/0x280 [ 295.184483][ C1] process_backlog+0x22e/0x440 [ 295.189277][ C1] __napi_poll+0x63/0x3c0 [ 295.193637][ C1] net_rx_action+0x3a1/0x7f0 [ 295.198250][ C1] handle_softirqs+0xbf/0x280 [ 295.202962][ C1] run_ksoftirqd+0x1c/0x30 [ 295.207398][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 295.212369][ C1] kthread+0x1d1/0x210 [ 295.216452][ C1] ret_from_fork+0x4b/0x60 [ 295.220900][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.225703][ C1] [ 295.228044][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 1: [ 295.236157][ C1] can_send+0x5a2/0x6d0 [ 295.240347][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 295.245048][ C1] can_rcv_filter+0x225/0x4c0 [ 295.249760][ C1] can_receive+0x182/0x1f0 [ 295.254212][ C1] can_rcv+0xe7/0x180 [ 295.258232][ C1] __netif_receive_skb+0x123/0x280 [ 295.263452][ C1] process_backlog+0x22e/0x440 [ 295.268245][ C1] __napi_poll+0x63/0x3c0 [ 295.272599][ C1] net_rx_action+0x3a1/0x7f0 [ 295.277217][ C1] handle_softirqs+0xbf/0x280 [ 295.281934][ C1] do_softirq+0x5e/0x90 [ 295.286128][ C1] __local_bh_enable_ip+0x6e/0x70 [ 295.291197][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 295.296168][ C1] inet_csk_get_port+0xe42/0x1070 [ 295.301219][ C1] __inet_bind+0x469/0x5c0 [ 295.305675][ C1] inet_bind+0x96/0xb0 [ 295.309779][ C1] kernel_bind+0x91/0xc0 [ 295.314052][ C1] rds_tcp_conn_path_connect+0x2f7/0x440 [ 295.319730][ C1] rds_connect_worker+0x12c/0x1b0 [ 295.324788][ C1] process_scheduled_works+0x483/0x9a0 [ 295.330276][ C1] worker_thread+0x51d/0x6f0 [ 295.334898][ C1] kthread+0x1d1/0x210 [ 295.338991][ C1] ret_from_fork+0x4b/0x60 [ 295.343435][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.348224][ C1] [ 295.350563][ C1] value changed: 0x000000000005e21b -> 0x000000000005e21c [ 295.357677][ C1] [ 295.360006][ C1] Reported by Kernel Concurrency Sanitizer on: [ 295.366168][ C1] CPU: 1 UID: 0 PID: 13584 Comm: kworker/u8:49 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 295.377206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.387276][ C1] Workqueue: krdsd rds_connect_worker [ 295.392692][ C1] ================================================================== [ 295.422692][ C0] ================================================================== [ 295.430824][ C0] BUG: KCSAN: data-race in can_send / can_send [ 295.437043][ C0] [ 295.439374][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 1: [ 295.447453][ C0] can_send+0x5b6/0x6d0 [ 295.451640][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 295.456349][ C0] can_rcv_filter+0x225/0x4c0 [ 295.461064][ C0] can_receive+0x182/0x1f0 [ 295.465517][ C0] can_rcv+0xe7/0x180 [ 295.469543][ C0] __netif_receive_skb+0x123/0x280 [ 295.474682][ C0] process_backlog+0x22e/0x440 [ 295.479482][ C0] __napi_poll+0x63/0x3c0 [ 295.483839][ C0] net_rx_action+0x3a1/0x7f0 [ 295.488477][ C0] handle_softirqs+0xbf/0x280 [ 295.493210][ C0] do_softirq+0x5e/0x90 [ 295.497406][ C0] __local_bh_enable_ip+0x6e/0x70 [ 295.502462][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 295.507425][ C0] release_sock+0x117/0x150 [ 295.511953][ C0] sockopt_release_sock+0x42/0x50 [ 295.516998][ C0] do_ip_getsockopt+0xcb4/0x11a0 [ 295.521973][ C0] ip_getsockopt+0x5c/0x170 [ 295.526510][ C0] tcp_getsockopt+0xaa/0xe0 [ 295.531030][ C0] sock_common_getsockopt+0x5b/0x70 [ 295.536262][ C0] do_sock_getsockopt+0x1ca/0x260 [ 295.541309][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 295.546533][ C0] x64_sys_call+0x1288/0x2dc0 [ 295.551228][ C0] do_syscall_64+0xc9/0x1c0 [ 295.555757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.561688][ C0] [ 295.564022][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 0: [ 295.572105][ C0] can_send+0x5b6/0x6d0 [ 295.576294][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 295.581003][ C0] can_rcv_filter+0x225/0x4c0 [ 295.585717][ C0] can_receive+0x182/0x1f0 [ 295.590175][ C0] can_rcv+0xe7/0x180 [ 295.594188][ C0] __netif_receive_skb+0x123/0x280 [ 295.599342][ C0] process_backlog+0x22e/0x440 [ 295.604137][ C0] __napi_poll+0x63/0x3c0 [ 295.608497][ C0] net_rx_action+0x3a1/0x7f0 [ 295.613118][ C0] handle_softirqs+0xbf/0x280 [ 295.617833][ C0] run_ksoftirqd+0x1c/0x30 [ 295.622267][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 295.627242][ C0] kthread+0x1d1/0x210 [ 295.631342][ C0] ret_from_fork+0x4b/0x60 [ 295.635781][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.640565][ C0] [ 295.642902][ C0] value changed: 0x000000000002e9ed -> 0x000000000002e9ee [ 295.650018][ C0] [ 295.652351][ C0] Reported by Kernel Concurrency Sanitizer on: [ 295.658514][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 295.669123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.679195][ C0] ================================================================== [ 295.869022][ C1] ================================================================== [ 295.877155][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 295.884411][ C1] [ 295.886743][ C1] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 0: [ 295.894818][ C1] can_rcv_filter+0x237/0x4c0 [ 295.899522][ C1] can_receive+0x182/0x1f0 [ 295.903989][ C1] can_rcv+0xe7/0x180 [ 295.908000][ C1] __netif_receive_skb+0x123/0x280 [ 295.913132][ C1] process_backlog+0x22e/0x440 [ 295.917913][ C1] __napi_poll+0x63/0x3c0 [ 295.922280][ C1] net_rx_action+0x3a1/0x7f0 [ 295.926909][ C1] handle_softirqs+0xbf/0x280 [ 295.931627][ C1] run_ksoftirqd+0x1c/0x30 [ 295.936066][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 295.941038][ C1] kthread+0x1d1/0x210 [ 295.945143][ C1] ret_from_fork+0x4b/0x60 [ 295.949594][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.954391][ C1] [ 295.956721][ C1] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 1: [ 295.964789][ C1] can_rcv_filter+0x237/0x4c0 [ 295.969497][ C1] can_receive+0x182/0x1f0 [ 295.974035][ C1] can_rcv+0xe7/0x180 [ 295.978047][ C1] __netif_receive_skb+0x123/0x280 [ 295.983185][ C1] process_backlog+0x22e/0x440 [ 295.987988][ C1] __napi_poll+0x63/0x3c0 [ 295.992340][ C1] net_rx_action+0x3a1/0x7f0 [ 295.996960][ C1] handle_softirqs+0xbf/0x280 [ 296.001664][ C1] do_softirq+0x5e/0x90 [ 296.005861][ C1] __local_bh_enable_ip+0x6e/0x70 [ 296.010927][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 296.015896][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 296.021567][ C1] process_scheduled_works+0x483/0x9a0 [ 296.027067][ C1] worker_thread+0x51d/0x6f0 [ 296.031690][ C1] kthread+0x1d1/0x210 [ 296.035777][ C1] ret_from_fork+0x4b/0x60 [ 296.040212][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.045008][ C1] [ 296.047337][ C1] value changed: 0x000000000006cf08 -> 0x000000000006cf0b [ 296.054712][ C1] [ 296.057038][ C1] Reported by Kernel Concurrency Sanitizer on: [ 296.063188][ C1] CPU: 1 UID: 0 PID: 11554 Comm: kworker/u8:36 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 296.074224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.084294][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 296.091084][ C1] ================================================================== [ 296.112961][ C0] ================================================================== [ 296.121087][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 296.128378][ C0] [ 296.130709][ C0] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 1: [ 296.138789][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 296.143669][ C0] can_rcv_filter+0x225/0x4c0 [ 296.148383][ C0] can_receive+0x182/0x1f0 [ 296.152837][ C0] can_rcv+0xe7/0x180 [ 296.156851][ C0] __netif_receive_skb+0x123/0x280 [ 296.161992][ C0] process_backlog+0x22e/0x440 [ 296.166786][ C0] __napi_poll+0x63/0x3c0 [ 296.171137][ C0] net_rx_action+0x3a1/0x7f0 [ 296.175760][ C0] handle_softirqs+0xbf/0x280 [ 296.180470][ C0] do_softirq+0x5e/0x90 [ 296.184661][ C0] __local_bh_enable_ip+0x6e/0x70 [ 296.189723][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 296.194691][ C0] lock_sock_nested+0x10f/0x140 [ 296.199643][ C0] sockopt_lock_sock+0x42/0x50 [ 296.204421][ C0] do_ip_getsockopt+0xb57/0x11a0 [ 296.209389][ C0] ip_getsockopt+0x5c/0x170 [ 296.213917][ C0] tcp_getsockopt+0xaa/0xe0 [ 296.218440][ C0] sock_common_getsockopt+0x5b/0x70 [ 296.223675][ C0] do_sock_getsockopt+0x1ca/0x260 [ 296.228729][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 296.234032][ C0] x64_sys_call+0x1288/0x2dc0 [ 296.238730][ C0] do_syscall_64+0xc9/0x1c0 [ 296.243260][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.249294][ C0] [ 296.251626][ C0] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 0: [ 296.259725][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 296.264428][ C0] can_rcv_filter+0x225/0x4c0 [ 296.269138][ C0] can_receive+0x182/0x1f0 [ 296.273596][ C0] can_rcv+0xe7/0x180 [ 296.277612][ C0] __netif_receive_skb+0x123/0x280 [ 296.282749][ C0] process_backlog+0x22e/0x440 [ 296.287534][ C0] __napi_poll+0x63/0x3c0 [ 296.291889][ C0] net_rx_action+0x3a1/0x7f0 [ 296.296505][ C0] handle_softirqs+0xbf/0x280 [ 296.301224][ C0] run_ksoftirqd+0x1c/0x30 [ 296.305660][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 296.310633][ C0] kthread+0x1d1/0x210 [ 296.314723][ C0] ret_from_fork+0x4b/0x60 [ 296.319161][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.323949][ C0] [ 296.326370][ C0] value changed: 0x00071a7b -> 0x00071a7c [ 296.332229][ C0] [ 296.334564][ C0] Reported by Kernel Concurrency Sanitizer on: [ 296.340734][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 296.351346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.361411][ C0] ================================================================== [ 296.371244][ C1] ================================================================== [ 296.379378][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 296.386114][ C1] [ 296.388455][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 0: [ 296.396536][ C1] can_receive+0x1ca/0x1f0 [ 296.400992][ C1] can_rcv+0xe7/0x180 [ 296.405002][ C1] __netif_receive_skb+0x123/0x280 [ 296.410146][ C1] process_backlog+0x22e/0x440 [ 296.414939][ C1] __napi_poll+0x63/0x3c0 [ 296.419317][ C1] net_rx_action+0x3a1/0x7f0 [ 296.423947][ C1] handle_softirqs+0xbf/0x280 [ 296.428654][ C1] run_ksoftirqd+0x1c/0x30 [ 296.433092][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 296.438073][ C1] kthread+0x1d1/0x210 [ 296.442163][ C1] ret_from_fork+0x4b/0x60 [ 296.446602][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.451391][ C1] [ 296.453724][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 1: [ 296.461803][ C1] can_receive+0x1ca/0x1f0 [ 296.466254][ C1] can_rcv+0xe7/0x180 [ 296.470270][ C1] __netif_receive_skb+0x123/0x280 [ 296.475407][ C1] process_backlog+0x22e/0x440 [ 296.480192][ C1] __napi_poll+0x63/0x3c0 [ 296.484543][ C1] net_rx_action+0x3a1/0x7f0 [ 296.489181][ C1] handle_softirqs+0xbf/0x280 [ 296.493898][ C1] do_softirq+0x5e/0x90 [ 296.498079][ C1] __local_bh_enable_ip+0x6e/0x70 [ 296.503138][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 296.508099][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 296.514196][ C1] process_scheduled_works+0x483/0x9a0 [ 296.519685][ C1] worker_thread+0x51d/0x6f0 [ 296.524319][ C1] kthread+0x1d1/0x210 [ 296.528402][ C1] ret_from_fork+0x4b/0x60 [ 296.532833][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.537646][ C1] [ 296.539985][ C1] value changed: 0x000000000001133a -> 0x000000000001133c [ 296.547097][ C1] [ 296.549421][ C1] Reported by Kernel Concurrency Sanitizer on: [ 296.555596][ C1] CPU: 1 UID: 0 PID: 11559 Comm: kworker/u8:39 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 296.566639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.576708][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 296.583506][ C1] ================================================================== [ 296.603697][ C0] ================================================================== [ 296.611818][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 296.618560][ C0] [ 296.620895][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 1: [ 296.628976][ C0] can_receive+0x62/0x1f0 [ 296.633343][ C0] can_rcv+0xe7/0x180 [ 296.637361][ C0] __netif_receive_skb+0x123/0x280 [ 296.642498][ C0] process_backlog+0x22e/0x440 [ 296.647289][ C0] __napi_poll+0x63/0x3c0 [ 296.651647][ C0] net_rx_action+0x3a1/0x7f0 [ 296.656260][ C0] handle_softirqs+0xbf/0x280 [ 296.660968][ C0] do_softirq+0x5e/0x90 [ 296.665156][ C0] __local_bh_enable_ip+0x6e/0x70 [ 296.670220][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 296.675185][ C0] bond_3ad_state_machine_handler+0x2a3c/0x2c20 [ 296.681463][ C0] process_scheduled_works+0x483/0x9a0 [ 296.686972][ C0] worker_thread+0x51d/0x6f0 [ 296.691612][ C0] kthread+0x1d1/0x210 [ 296.695733][ C0] ret_from_fork+0x4b/0x60 [ 296.700185][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.704969][ C0] [ 296.707302][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 0: [ 296.715378][ C0] can_receive+0x62/0x1f0 [ 296.719742][ C0] can_rcv+0xe7/0x180 [ 296.723764][ C0] __netif_receive_skb+0x123/0x280 [ 296.728909][ C0] process_backlog+0x22e/0x440 [ 296.733700][ C0] __napi_poll+0x63/0x3c0 [ 296.738053][ C0] net_rx_action+0x3a1/0x7f0 [ 296.742675][ C0] handle_softirqs+0xbf/0x280 [ 296.747382][ C0] run_ksoftirqd+0x1c/0x30 [ 296.751817][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 296.756794][ C0] kthread+0x1d1/0x210 [ 296.760879][ C0] ret_from_fork+0x4b/0x60 [ 296.765313][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.770096][ C0] [ 296.772429][ C0] value changed: 0x0000000000000f0a -> 0x0000000000000f0b [ 296.779543][ C0] [ 296.781879][ C0] Reported by Kernel Concurrency Sanitizer on: [ 296.788033][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 296.798651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.808725][ C0] ================================================================== [ 296.846473][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.865046][ C1] ================================================================== [ 296.873159][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 296.879879][ C1] [ 296.882207][ C1] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 0: [ 296.890289][ C1] can_receive+0x1b6/0x1f0 [ 296.894734][ C1] can_rcv+0xe7/0x180 [ 296.898755][ C1] __netif_receive_skb+0x123/0x280 [ 296.903888][ C1] process_backlog+0x22e/0x440 [ 296.908673][ C1] __napi_poll+0x63/0x3c0 [ 296.913036][ C1] net_rx_action+0x3a1/0x7f0 [ 296.917644][ C1] handle_softirqs+0xbf/0x280 [ 296.922353][ C1] do_softirq+0x5e/0x90 [ 296.926562][ C1] __local_bh_enable_ip+0x6e/0x70 [ 296.931626][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 296.936680][ C1] neigh_periodic_work+0x605/0x6b0 [ 296.941804][ C1] process_scheduled_works+0x483/0x9a0 [ 296.947303][ C1] worker_thread+0x51d/0x6f0 [ 296.951927][ C1] kthread+0x1d1/0x210 [ 296.956014][ C1] ret_from_fork+0x4b/0x60 [ 296.960450][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.965237][ C1] [ 296.967569][ C1] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 1: [ 296.975648][ C1] can_receive+0x1b6/0x1f0 [ 296.980097][ C1] can_rcv+0xe7/0x180 [ 296.984108][ C1] __netif_receive_skb+0x123/0x280 [ 296.989247][ C1] process_backlog+0x22e/0x440 [ 296.994032][ C1] __napi_poll+0x63/0x3c0 [ 296.998382][ C1] net_rx_action+0x3a1/0x7f0 [ 297.003013][ C1] handle_softirqs+0xbf/0x280 [ 297.007720][ C1] run_ksoftirqd+0x1c/0x30 [ 297.012154][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 297.017128][ C1] kthread+0x1d1/0x210 [ 297.021206][ C1] ret_from_fork+0x4b/0x60 [ 297.025644][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.030427][ C1] [ 297.032761][ C1] value changed: 0x0000000000081e76 -> 0x0000000000081e78 [ 297.039876][ C1] [ 297.042206][ C1] Reported by Kernel Concurrency Sanitizer on: [ 297.048359][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 297.058966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.069037][ C1] ================================================================== [ 297.907534][ C1] ================================================================== [ 297.915657][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 297.922394][ C1] [ 297.924725][ C1] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 0: [ 297.932799][ C1] can_receive+0x4e/0x1f0 [ 297.937158][ C1] can_rcv+0xe7/0x180 [ 297.941168][ C1] __netif_receive_skb+0x123/0x280 [ 297.946309][ C1] process_backlog+0x22e/0x440 [ 297.951097][ C1] __napi_poll+0x63/0x3c0 [ 297.955448][ C1] net_rx_action+0x3a1/0x7f0 [ 297.960160][ C1] handle_softirqs+0xbf/0x280 [ 297.964867][ C1] do_softirq+0x5e/0x90 [ 297.969056][ C1] __local_bh_enable_ip+0x6e/0x70 [ 297.974206][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 297.979264][ C1] neigh_periodic_work+0x605/0x6b0 [ 297.984394][ C1] process_scheduled_works+0x483/0x9a0 [ 297.989885][ C1] worker_thread+0x51d/0x6f0 [ 297.994503][ C1] kthread+0x1d1/0x210 [ 297.998592][ C1] ret_from_fork+0x4b/0x60 [ 298.003025][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.007811][ C1] [ 298.010144][ C1] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 1: [ 298.018216][ C1] can_receive+0x4e/0x1f0 [ 298.022581][ C1] can_rcv+0xe7/0x180 [ 298.026593][ C1] __netif_receive_skb+0x123/0x280 [ 298.031727][ C1] process_backlog+0x22e/0x440 [ 298.036520][ C1] __napi_poll+0x63/0x3c0 [ 298.040869][ C1] net_rx_action+0x3a1/0x7f0 [ 298.045490][ C1] handle_softirqs+0xbf/0x280 [ 298.050209][ C1] run_ksoftirqd+0x1c/0x30 [ 298.054650][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 298.059619][ C1] kthread+0x1d1/0x210 [ 298.063702][ C1] ret_from_fork+0x4b/0x60 [ 298.068136][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.072916][ C1] [ 298.075245][ C1] value changed: 0x000000000009fe18 -> 0x000000000009fe1b [ 298.082358][ C1] [ 298.084685][ C1] Reported by Kernel Concurrency Sanitizer on: [ 298.090932][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 298.101640][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.111736][ C1] ================================================================== [ 298.182904][ C0] ================================================================== [ 298.191036][ C0] BUG: KCSAN: data-race in can_send / can_send [ 298.197239][ C0] [ 298.199571][ C0] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 1: [ 298.207654][ C0] can_send+0x5a2/0x6d0 [ 298.211848][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 298.216545][ C0] can_rcv_filter+0x225/0x4c0 [ 298.221259][ C0] can_receive+0x182/0x1f0 [ 298.225705][ C0] can_rcv+0xe7/0x180 [ 298.229721][ C0] __netif_receive_skb+0x123/0x280 [ 298.234853][ C0] process_backlog+0x22e/0x440 [ 298.239644][ C0] __napi_poll+0x63/0x3c0 [ 298.243997][ C0] net_rx_action+0x3a1/0x7f0 [ 298.248610][ C0] handle_softirqs+0xbf/0x280 [ 298.253322][ C0] do_softirq+0x5e/0x90 [ 298.257507][ C0] __local_bh_enable_ip+0x6e/0x70 [ 298.262566][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 298.267525][ C0] batadv_nc_purge_paths+0x220/0x270 [ 298.272827][ C0] batadv_nc_worker+0x3db/0xad0 [ 298.277696][ C0] process_scheduled_works+0x483/0x9a0 [ 298.283181][ C0] worker_thread+0x51d/0x6f0 [ 298.287800][ C0] kthread+0x1d1/0x210 [ 298.291889][ C0] ret_from_fork+0x4b/0x60 [ 298.296349][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.301131][ C0] [ 298.303468][ C0] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 0: [ 298.311547][ C0] can_send+0x5a2/0x6d0 [ 298.315743][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 298.320467][ C0] can_rcv_filter+0x225/0x4c0 [ 298.325175][ C0] can_receive+0x182/0x1f0 [ 298.329633][ C0] can_rcv+0xe7/0x180 [ 298.333642][ C0] __netif_receive_skb+0x123/0x280 [ 298.338783][ C0] process_backlog+0x22e/0x440 [ 298.343573][ C0] __napi_poll+0x63/0x3c0 [ 298.347925][ C0] net_rx_action+0x3a1/0x7f0 [ 298.352543][ C0] handle_softirqs+0xbf/0x280 [ 298.357340][ C0] do_softirq+0x5e/0x90 [ 298.361538][ C0] __local_bh_enable_ip+0x6e/0x70 [ 298.366608][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 298.371570][ C0] wg_packet_encrypt_worker+0x188/0xbb0 [ 298.377139][ C0] process_scheduled_works+0x483/0x9a0 [ 298.382645][ C0] worker_thread+0x51d/0x6f0 [ 298.387263][ C0] kthread+0x1d1/0x210 [ 298.391347][ C0] ret_from_fork+0x4b/0x60 [ 298.395785][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.400594][ C0] [ 298.402935][ C0] value changed: 0x00000000000aa218 -> 0x00000000000aa219 [ 298.410046][ C0] [ 298.412378][ C0] Reported by Kernel Concurrency Sanitizer on: [ 298.418539][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 298.429055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.439120][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 298.445645][ C0] ================================================================== [ 298.461906][ C0] ================================================================== [ 298.470018][ C0] BUG: KCSAN: data-race in can_send / can_send [ 298.476219][ C0] [ 298.478549][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 1: [ 298.486626][ C0] can_send+0x5b6/0x6d0 [ 298.490813][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 298.495520][ C0] can_rcv_filter+0x225/0x4c0 [ 298.500228][ C0] can_receive+0x182/0x1f0 [ 298.504675][ C0] can_rcv+0xe7/0x180 [ 298.508684][ C0] __netif_receive_skb+0x123/0x280 [ 298.513823][ C0] process_backlog+0x22e/0x440 [ 298.518608][ C0] __napi_poll+0x63/0x3c0 [ 298.522964][ C0] net_rx_action+0x3a1/0x7f0 [ 298.527575][ C0] handle_softirqs+0xbf/0x280 [ 298.532308][ C0] do_softirq+0x5e/0x90 [ 298.536492][ C0] __local_bh_enable_ip+0x6e/0x70 [ 298.541562][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 298.546560][ C0] batadv_nc_purge_paths+0x220/0x270 [ 298.551873][ C0] batadv_nc_worker+0x3db/0xad0 [ 298.556746][ C0] process_scheduled_works+0x483/0x9a0 [ 298.562229][ C0] worker_thread+0x51d/0x6f0 [ 298.566857][ C0] kthread+0x1d1/0x210 [ 298.570943][ C0] ret_from_fork+0x4b/0x60 [ 298.575374][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.580159][ C0] [ 298.582488][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 0: [ 298.590561][ C0] can_send+0x5b6/0x6d0 [ 298.594752][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 298.599538][ C0] can_rcv_filter+0x225/0x4c0 [ 298.604246][ C0] can_receive+0x182/0x1f0 [ 298.608695][ C0] can_rcv+0xe7/0x180 [ 298.612711][ C0] __netif_receive_skb+0x123/0x280 [ 298.617934][ C0] process_backlog+0x22e/0x440 [ 298.622723][ C0] __napi_poll+0x63/0x3c0 [ 298.627073][ C0] net_rx_action+0x3a1/0x7f0 [ 298.631685][ C0] handle_softirqs+0xbf/0x280 [ 298.636401][ C0] run_ksoftirqd+0x1c/0x30 [ 298.640835][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 298.645809][ C0] kthread+0x1d1/0x210 [ 298.649895][ C0] ret_from_fork+0x4b/0x60 [ 298.654362][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.659162][ C0] [ 298.661493][ C0] value changed: 0x00000000000185fc -> 0x00000000000185fd [ 298.668613][ C0] [ 298.670945][ C0] Reported by Kernel Concurrency Sanitizer on: [ 298.677107][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 298.687715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.697787][ C0] ================================================================== [ 298.896205][ C0] ================================================================== [ 298.904335][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 298.911593][ C0] [ 298.913927][ C0] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 1: [ 298.921999][ C0] can_rcv_filter+0x237/0x4c0 [ 298.926717][ C0] can_receive+0x182/0x1f0 [ 298.931168][ C0] can_rcv+0xe7/0x180 [ 298.935248][ C0] __netif_receive_skb+0x123/0x280 [ 298.940386][ C0] process_backlog+0x22e/0x440 [ 298.945215][ C0] __napi_poll+0x63/0x3c0 [ 298.949574][ C0] net_rx_action+0x3a1/0x7f0 [ 298.954192][ C0] handle_softirqs+0xbf/0x280 [ 298.958922][ C0] do_softirq+0x5e/0x90 [ 298.963113][ C0] __local_bh_enable_ip+0x6e/0x70 [ 298.968172][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 298.973135][ C0] release_sock+0x117/0x150 [ 298.977670][ C0] sockopt_release_sock+0x42/0x50 [ 298.982713][ C0] do_ip_getsockopt+0xcb4/0x11a0 [ 298.987678][ C0] ip_getsockopt+0x5c/0x170 [ 298.992210][ C0] tcp_getsockopt+0xaa/0xe0 [ 298.996753][ C0] sock_common_getsockopt+0x5b/0x70 [ 299.001999][ C0] do_sock_getsockopt+0x1ca/0x260 [ 299.007043][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 299.012265][ C0] x64_sys_call+0x1288/0x2dc0 [ 299.016965][ C0] do_syscall_64+0xc9/0x1c0 [ 299.021497][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.027427][ C0] [ 299.029761][ C0] read-write to 0xffff888101dc4338 of 8 bytes by interrupt on cpu 0: [ 299.037841][ C0] can_rcv_filter+0x237/0x4c0 [ 299.042551][ C0] can_receive+0x182/0x1f0 [ 299.047003][ C0] can_rcv+0xe7/0x180 [ 299.051021][ C0] __netif_receive_skb+0x123/0x280 [ 299.056164][ C0] process_backlog+0x22e/0x440 [ 299.061132][ C0] __napi_poll+0x63/0x3c0 [ 299.065911][ C0] net_rx_action+0x3a1/0x7f0 [ 299.070532][ C0] handle_softirqs+0xbf/0x280 [ 299.075244][ C0] do_softirq+0x5e/0x90 [ 299.079430][ C0] __local_bh_enable_ip+0x6e/0x70 [ 299.084501][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 299.089567][ C0] neigh_periodic_work+0x605/0x6b0 [ 299.094709][ C0] process_scheduled_works+0x483/0x9a0 [ 299.100203][ C0] worker_thread+0x51d/0x6f0 [ 299.104829][ C0] kthread+0x1d1/0x210 [ 299.108909][ C0] ret_from_fork+0x4b/0x60 [ 299.113348][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.118132][ C0] [ 299.120482][ C0] value changed: 0x00000000000b92bb -> 0x00000000000b92bc [ 299.127598][ C0] [ 299.129928][ C0] Reported by Kernel Concurrency Sanitizer on: [ 299.136084][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 299.146607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.156676][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 299.163643][ C0] ================================================================== [ 299.187682][ C1] ================================================================== [ 299.195794][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 299.203023][ C1] [ 299.205353][ C1] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 0: [ 299.213440][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 299.218141][ C1] can_rcv_filter+0x225/0x4c0 [ 299.222862][ C1] can_receive+0x182/0x1f0 [ 299.227305][ C1] can_rcv+0xe7/0x180 [ 299.231323][ C1] __netif_receive_skb+0x123/0x280 [ 299.236463][ C1] process_backlog+0x22e/0x440 [ 299.241255][ C1] __napi_poll+0x63/0x3c0 [ 299.245607][ C1] net_rx_action+0x3a1/0x7f0 [ 299.250222][ C1] handle_softirqs+0xbf/0x280 [ 299.254939][ C1] run_ksoftirqd+0x1c/0x30 [ 299.259367][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 299.264343][ C1] kthread+0x1d1/0x210 [ 299.268436][ C1] ret_from_fork+0x4b/0x60 [ 299.272874][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.277660][ C1] [ 299.280044][ C1] read-write to 0xffff8881281cc020 of 4 bytes by interrupt on cpu 1: [ 299.288131][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 299.292840][ C1] can_rcv_filter+0x225/0x4c0 [ 299.297561][ C1] can_receive+0x182/0x1f0 [ 299.302012][ C1] can_rcv+0xe7/0x180 [ 299.306028][ C1] __netif_receive_skb+0x123/0x280 [ 299.311165][ C1] process_backlog+0x22e/0x440 [ 299.315967][ C1] __napi_poll+0x63/0x3c0 [ 299.320321][ C1] net_rx_action+0x3a1/0x7f0 [ 299.324949][ C1] handle_softirqs+0xbf/0x280 [ 299.329664][ C1] do_softirq+0x5e/0x90 [ 299.333850][ C1] __local_bh_enable_ip+0x6e/0x70 [ 299.338905][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 299.343954][ C1] batadv_nc_purge_paths+0x220/0x270 [ 299.349286][ C1] batadv_nc_worker+0x3db/0xad0 [ 299.354208][ C1] process_scheduled_works+0x483/0x9a0 [ 299.359698][ C1] worker_thread+0x51d/0x6f0 [ 299.364316][ C1] kthread+0x1d1/0x210 [ 299.368403][ C1] ret_from_fork+0x4b/0x60 [ 299.372868][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.377655][ C1] [ 299.379998][ C1] value changed: 0x000bed0c -> 0x000bed0e [ 299.385728][ C1] [ 299.388059][ C1] Reported by Kernel Concurrency Sanitizer on: [ 299.394216][ C1] CPU: 1 UID: 0 PID: 11544 Comm: kworker/u8:30 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 299.405256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.415332][ C1] Workqueue: bat_events batadv_nc_worker [ 299.420994][ C1] ================================================================== [ 299.440087][ C1] ================================================================== [ 299.448199][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 299.454932][ C1] [ 299.457265][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 0: [ 299.465347][ C1] can_receive+0x1ca/0x1f0 [ 299.469795][ C1] can_rcv+0xe7/0x180 [ 299.473804][ C1] __netif_receive_skb+0x123/0x280 [ 299.478938][ C1] process_backlog+0x22e/0x440 [ 299.483727][ C1] __napi_poll+0x63/0x3c0 [ 299.488078][ C1] net_rx_action+0x3a1/0x7f0 [ 299.492696][ C1] handle_softirqs+0xbf/0x280 [ 299.497439][ C1] run_ksoftirqd+0x1c/0x30 [ 299.501880][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 299.506844][ C1] kthread+0x1d1/0x210 [ 299.510926][ C1] ret_from_fork+0x4b/0x60 [ 299.515359][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.520143][ C1] [ 299.522473][ C1] read-write to 0xffff8881192560f8 of 8 bytes by interrupt on cpu 1: [ 299.530559][ C1] can_receive+0x1ca/0x1f0 [ 299.535004][ C1] can_rcv+0xe7/0x180 [ 299.539031][ C1] __netif_receive_skb+0x123/0x280 [ 299.544167][ C1] process_backlog+0x22e/0x440 [ 299.548968][ C1] __napi_poll+0x63/0x3c0 [ 299.553337][ C1] net_rx_action+0x3a1/0x7f0 [ 299.557949][ C1] handle_softirqs+0xbf/0x280 [ 299.562746][ C1] do_softirq+0x5e/0x90 [ 299.566946][ C1] __local_bh_enable_ip+0x6e/0x70 [ 299.572007][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 299.577151][ C1] batadv_nc_purge_paths+0x220/0x270 [ 299.582467][ C1] batadv_nc_worker+0x3db/0xad0 [ 299.587343][ C1] process_scheduled_works+0x483/0x9a0 [ 299.592832][ C1] worker_thread+0x51d/0x6f0 [ 299.597455][ C1] kthread+0x1d1/0x210 [ 299.601544][ C1] ret_from_fork+0x4b/0x60 [ 299.605986][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.610772][ C1] [ 299.613103][ C1] value changed: 0x00000000000131f1 -> 0x00000000000131f3 [ 299.620217][ C1] [ 299.622551][ C1] Reported by Kernel Concurrency Sanitizer on: [ 299.628706][ C1] CPU: 1 UID: 0 PID: 11544 Comm: kworker/u8:30 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 299.639751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.649995][ C1] Workqueue: bat_events batadv_nc_worker [ 299.655653][ C1] ================================================================== [ 299.675893][ C0] ================================================================== [ 299.684009][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 299.690739][ C0] [ 299.693072][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 1: [ 299.701148][ C0] can_receive+0x62/0x1f0 [ 299.705514][ C0] can_rcv+0xe7/0x180 [ 299.709525][ C0] __netif_receive_skb+0x123/0x280 [ 299.714655][ C0] process_backlog+0x22e/0x440 [ 299.719443][ C0] __napi_poll+0x63/0x3c0 [ 299.723792][ C0] net_rx_action+0x3a1/0x7f0 [ 299.728400][ C0] handle_softirqs+0xbf/0x280 [ 299.733197][ C0] do_softirq+0x5e/0x90 [ 299.737387][ C0] __local_bh_enable_ip+0x6e/0x70 [ 299.742455][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 299.747420][ C0] batadv_nc_purge_paths+0x220/0x270 [ 299.752732][ C0] batadv_nc_worker+0x3db/0xad0 [ 299.757603][ C0] process_scheduled_works+0x483/0x9a0 [ 299.763092][ C0] worker_thread+0x51d/0x6f0 [ 299.767714][ C0] kthread+0x1d1/0x210 [ 299.771802][ C0] ret_from_fork+0x4b/0x60 [ 299.776238][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.781028][ C0] [ 299.783355][ C0] read-write to 0xffff8881192560e8 of 8 bytes by interrupt on cpu 0: [ 299.791431][ C0] can_receive+0x62/0x1f0 [ 299.795791][ C0] can_rcv+0xe7/0x180 [ 299.799806][ C0] __netif_receive_skb+0x123/0x280 [ 299.804949][ C0] process_backlog+0x22e/0x440 [ 299.809733][ C0] __napi_poll+0x63/0x3c0 [ 299.814089][ C0] net_rx_action+0x3a1/0x7f0 [ 299.818704][ C0] handle_softirqs+0xbf/0x280 [ 299.823408][ C0] do_softirq+0x5e/0x90 [ 299.827599][ C0] __local_bh_enable_ip+0x6e/0x70 [ 299.832664][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 299.837726][ C0] neigh_periodic_work+0x605/0x6b0 [ 299.842861][ C0] process_scheduled_works+0x483/0x9a0 [ 299.848357][ C0] worker_thread+0x51d/0x6f0 [ 299.852984][ C0] kthread+0x1d1/0x210 [ 299.857077][ C0] ret_from_fork+0x4b/0x60 [ 299.861509][ C0] ret_from_fork_asm+0x1a/0x30 [ 299.866296][ C0] [ 299.868626][ C0] value changed: 0x0000000000001d50 -> 0x0000000000001d52 [ 299.875737][ C0] [ 299.878068][ C0] Reported by Kernel Concurrency Sanitizer on: [ 299.884222][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 299.894747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.904823][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 299.911791][ C0] ================================================================== [ 299.922630][ C0] ================================================================== [ 299.930739][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 299.937468][ C0] [ 299.939801][ C0] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 1: [ 299.947880][ C0] can_receive+0x1b6/0x1f0 [ 299.952328][ C0] can_rcv+0xe7/0x180 [ 299.956357][ C0] __netif_receive_skb+0x123/0x280 [ 299.961508][ C0] process_backlog+0x22e/0x440 [ 299.966304][ C0] __napi_poll+0x63/0x3c0 [ 299.970666][ C0] net_rx_action+0x3a1/0x7f0 [ 299.975289][ C0] handle_softirqs+0xbf/0x280 [ 299.979999][ C0] run_ksoftirqd+0x1c/0x30 [ 299.984433][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 299.989407][ C0] kthread+0x1d1/0x210 [ 299.993492][ C0] ret_from_fork+0x4b/0x60 [ 299.997927][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.002715][ C0] [ 300.005047][ C0] read-write to 0xffff888119256098 of 8 bytes by interrupt on cpu 0: [ 300.013156][ C0] can_receive+0x1b6/0x1f0 [ 300.017780][ C0] can_rcv+0xe7/0x180 [ 300.021796][ C0] __netif_receive_skb+0x123/0x280 [ 300.026931][ C0] process_backlog+0x22e/0x440 [ 300.031759][ C0] __napi_poll+0x63/0x3c0 [ 300.036111][ C0] net_rx_action+0x3a1/0x7f0 [ 300.040740][ C0] handle_softirqs+0xbf/0x280 [ 300.045449][ C0] run_ksoftirqd+0x1c/0x30 [ 300.049883][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 300.054856][ C0] kthread+0x1d1/0x210 [ 300.058941][ C0] ret_from_fork+0x4b/0x60 [ 300.063373][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.068158][ C0] [ 300.070490][ C0] value changed: 0x00000000000cf1cd -> 0x00000000000cf1cf [ 300.077609][ C0] [ 300.079939][ C0] Reported by Kernel Concurrency Sanitizer on: [ 300.086098][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 300.096704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.106866][ C0] ================================================================== [ 300.929631][ C0] ================================================================== [ 300.937765][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 300.944501][ C0] [ 300.946831][ C0] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 1: [ 300.954910][ C0] can_receive+0x4e/0x1f0 [ 300.959272][ C0] can_rcv+0xe7/0x180 [ 300.963285][ C0] __netif_receive_skb+0x123/0x280 [ 300.968454][ C0] process_backlog+0x22e/0x440 [ 300.973273][ C0] __napi_poll+0x63/0x3c0 [ 300.977636][ C0] net_rx_action+0x3a1/0x7f0 [ 300.982261][ C0] handle_softirqs+0xbf/0x280 [ 300.986979][ C0] run_ksoftirqd+0x1c/0x30 [ 300.991429][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 300.996411][ C0] kthread+0x1d1/0x210 [ 301.000498][ C0] ret_from_fork+0x4b/0x60 [ 301.004934][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.009725][ C0] [ 301.012065][ C0] read-write to 0xffff888119256088 of 8 bytes by interrupt on cpu 0: [ 301.020242][ C0] can_receive+0x4e/0x1f0 [ 301.024619][ C0] can_rcv+0xe7/0x180 [ 301.028634][ C0] __netif_receive_skb+0x123/0x280 [ 301.033766][ C0] process_backlog+0x22e/0x440 [ 301.038561][ C0] __napi_poll+0x63/0x3c0 [ 301.042916][ C0] net_rx_action+0x3a1/0x7f0 [ 301.047530][ C0] handle_softirqs+0xbf/0x280 [ 301.052242][ C0] run_ksoftirqd+0x1c/0x30 [ 301.056679][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 301.061651][ C0] kthread+0x1d1/0x210 [ 301.065743][ C0] ret_from_fork+0x4b/0x60 [ 301.070176][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.074967][ C0] [ 301.077301][ C0] value changed: 0x00000000000ed7ef -> 0x00000000000ed7f1 [ 301.084430][ C0] [ 301.086761][ C0] Reported by Kernel Concurrency Sanitizer on: [ 301.092939][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 301.103566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.113643][ C0] ================================================================== [ 301.188790][ C1] ================================================================== [ 301.197000][ C1] BUG: KCSAN: data-race in can_send / can_send [ 301.203212][ C1] [ 301.205551][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 0: [ 301.213630][ C1] can_send+0x5a2/0x6d0 [ 301.217816][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 301.222518][ C1] can_rcv_filter+0x225/0x4c0 [ 301.227235][ C1] can_receive+0x182/0x1f0 [ 301.231679][ C1] can_rcv+0xe7/0x180 [ 301.235696][ C1] __netif_receive_skb+0x123/0x280 [ 301.240832][ C1] process_backlog+0x22e/0x440 [ 301.245627][ C1] __napi_poll+0x63/0x3c0 [ 301.249977][ C1] net_rx_action+0x3a1/0x7f0 [ 301.254600][ C1] handle_softirqs+0xbf/0x280 [ 301.259322][ C1] do_softirq+0x5e/0x90 [ 301.263545][ C1] __local_bh_enable_ip+0x6e/0x70 [ 301.268611][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 301.273661][ C1] neigh_periodic_work+0x605/0x6b0 [ 301.278802][ C1] process_scheduled_works+0x483/0x9a0 [ 301.284319][ C1] worker_thread+0x51d/0x6f0 [ 301.288940][ C1] kthread+0x1d1/0x210 [ 301.293029][ C1] ret_from_fork+0x4b/0x60 [ 301.297466][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.302249][ C1] [ 301.304583][ C1] read-write to 0xffff888119256090 of 8 bytes by interrupt on cpu 1: [ 301.312659][ C1] can_send+0x5a2/0x6d0 [ 301.316849][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 301.321547][ C1] can_rcv_filter+0x225/0x4c0 [ 301.326259][ C1] can_receive+0x182/0x1f0 [ 301.330712][ C1] can_rcv+0xe7/0x180 [ 301.334747][ C1] __netif_receive_skb+0x123/0x280 [ 301.339882][ C1] process_backlog+0x22e/0x440 [ 301.344671][ C1] __napi_poll+0x63/0x3c0 [ 301.349026][ C1] net_rx_action+0x3a1/0x7f0 [ 301.353640][ C1] handle_softirqs+0xbf/0x280 [ 301.358365][ C1] run_ksoftirqd+0x1c/0x30 [ 301.362811][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 301.367781][ C1] kthread+0x1d1/0x210 [ 301.371871][ C1] ret_from_fork+0x4b/0x60 [ 301.376304][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.381089][ C1] [ 301.383426][ C1] value changed: 0x00000000000f6520 -> 0x00000000000f6522 [ 301.390628][ C1] [ 301.392961][ C1] Reported by Kernel Concurrency Sanitizer on: [ 301.399208][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 301.409807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.420480][ C1] ================================================================== [ 301.474093][ C0] ================================================================== [ 301.482221][ C0] BUG: KCSAN: data-race in can_send / can_send [ 301.488428][ C0] [ 301.490763][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 1: [ 301.498846][ C0] can_send+0x5b6/0x6d0 [ 301.503031][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 301.507736][ C0] can_rcv_filter+0x225/0x4c0 [ 301.512446][ C0] can_receive+0x182/0x1f0 [ 301.516921][ C0] can_rcv+0xe7/0x180 [ 301.520937][ C0] __netif_receive_skb+0x123/0x280 [ 301.526072][ C0] process_backlog+0x22e/0x440 [ 301.530866][ C0] __napi_poll+0x63/0x3c0 [ 301.535213][ C0] net_rx_action+0x3a1/0x7f0 [ 301.539828][ C0] handle_softirqs+0xbf/0x280 [ 301.544540][ C0] run_ksoftirqd+0x1c/0x30 [ 301.548974][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 301.553944][ C0] kthread+0x1d1/0x210 [ 301.558028][ C0] ret_from_fork+0x4b/0x60 [ 301.562466][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.567249][ C0] [ 301.569582][ C0] read-write to 0xffff8881192560f0 of 8 bytes by interrupt on cpu 0: [ 301.577661][ C0] can_send+0x5b6/0x6d0 [ 301.581850][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 301.586550][ C0] can_rcv_filter+0x225/0x4c0 [ 301.591265][ C0] can_receive+0x182/0x1f0 [ 301.595715][ C0] can_rcv+0xe7/0x180 [ 301.599740][ C0] __netif_receive_skb+0x123/0x280 [ 301.604875][ C0] process_backlog+0x22e/0x440 [ 301.609691][ C0] __napi_poll+0x63/0x3c0 [ 301.614042][ C0] net_rx_action+0x3a1/0x7f0 [ 301.618655][ C0] handle_softirqs+0xbf/0x280 [ 301.623372][ C0] do_softirq+0x5e/0x90 [ 301.627554][ C0] __local_bh_enable_ip+0x6e/0x70 [ 301.632612][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 301.637666][ C0] neigh_periodic_work+0x605/0x6b0 [ 301.642805][ C0] process_scheduled_works+0x483/0x9a0 [ 301.648292][ C0] worker_thread+0x51d/0x6f0 [ 301.652929][ C0] kthread+0x1d1/0x210 [ 301.657019][ C0] ret_from_fork+0x4b/0x60 [ 301.661463][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.666266][ C0] [ 301.668648][ C0] value changed: 0x000000000001b51d -> 0x000000000001b51e [ 301.675774][ C0] [ 301.678105][ C0] Reported by Kernel Concurrency Sanitizer on: [ 301.684262][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 301.694783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.704854][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 301.711834][ C0] ==================================================================