last executing test programs: 5.522400138s ago: executing program 2 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122b00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 5.368090199s ago: executing program 2 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x6, 0x5, 0x6, 0x6, 0x3, 0x1, 0x400, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 5.210820999s ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}}, 0x0) 5.09263905s ago: executing program 2 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 5.03475825s ago: executing program 2 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.718968171s ago: executing program 2 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 4.718850561s ago: executing program 32 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 984.513876ms ago: executing program 0 (id=289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xffbf) 772.157186ms ago: executing program 0 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 697.265537ms ago: executing program 5 (id=297): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x228, 0x228, 0x158, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_0\x00', 'team0\x00', {}, {}, 0x3a, 0x3, 0x6, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xfff7}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'erspan0\x00', 'wg2\x00', {0xff}, {0xff}, 0x33, 0xc, 0x1, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0xfffc, 0x1000, 0x1, 0x0, "80a2cd170c9a3b62495a566f137c79890e62a2ed0f8aa9bff9a9ff44a4ea9aa46405ee523785c8570e21e3d0bf4a7eb2c7dcfa053568e86d76e6b6c11c3e7ade"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x4) 661.753207ms ago: executing program 5 (id=299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r1) 647.929577ms ago: executing program 0 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd3e, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400}) io_uring_enter(r2, 0x6a8d, 0x0, 0xa, 0x0, 0x0) 638.748807ms ago: executing program 5 (id=301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x8000000d}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) dup3(r1, r0, 0x0) 602.900767ms ago: executing program 5 (id=303): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 598.912047ms ago: executing program 3 (id=304): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) socket$inet6(0xa, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x342, 0x3c, 0xf5eb}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 582.733547ms ago: executing program 0 (id=305): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x93b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}]}]}}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 520.279738ms ago: executing program 0 (id=308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r4) 507.677118ms ago: executing program 3 (id=309): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffd, 0x0, 0x0, 0x0, 0x0, "e318ff8c00368458"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) 470.302518ms ago: executing program 5 (id=312): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x2f, 0x3, 0x9}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 469.978558ms ago: executing program 0 (id=313): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000005389b3685c0836456d62cffe21fa010ae8354173037f7d719c2a"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000e00)=""/4096, 0x1000) 455.418518ms ago: executing program 3 (id=314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000001980)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x4}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) shutdown(r1, 0x1) 374.650078ms ago: executing program 3 (id=317): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='./file1\x00', 0x14d142, 0x0) ftruncate(r0, 0x2007ffc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket(0x10, 0x3, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 310.828228ms ago: executing program 4 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d20680d7fdfe4b88942a31f48597e36e03b9d6579b1c599db6e466049c2d4c830345305135e65d3a895c50f80200f6c0aba61f6304000000ff"], 0xdd12}], 0x1}, 0x20048004) 257.923629ms ago: executing program 4 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) close(r3) 242.405888ms ago: executing program 5 (id=321): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x24011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) syz_open_pts(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 226.077509ms ago: executing program 4 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000011240)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}}, 0x0) 162.320889ms ago: executing program 1 (id=324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) close_range(r2, 0xffffffffffffffff, 0x0) 151.445859ms ago: executing program 3 (id=325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 141.413199ms ago: executing program 1 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) 116.014739ms ago: executing program 4 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 115.204409ms ago: executing program 1 (id=328): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_io_uring_setup(0x130, &(0x7f0000000140)={0x0, 0x4590, 0x800, 0xfffffffc, 0x8000000}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x40800, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x47f4, 0x1386, 0xc, 0x0, 0x0) 89.356019ms ago: executing program 1 (id=329): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 78.041959ms ago: executing program 4 (id=330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000001e20850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r1 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r2, 0x0) rmdir(&(0x7f00000000c0)='./file1\x00') 68.894959ms ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 43.093679ms ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000780)=""/233, 0xe9}], 0x1) 7.28873ms ago: executing program 1 (id=333): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 4 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000440)=[{0x6}]}) kernel console output (not intermixed with test programs): [ 21.419703][ T29] audit: type=1400 audit(1732085831.332:81): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 26.318453][ T29] audit: type=1400 audit(1732085836.232:82): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.319748][ T3303] cgroup: Unknown subsys name 'net' [ 26.341194][ T29] audit: type=1400 audit(1732085836.232:83): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.368868][ T29] audit: type=1400 audit(1732085836.252:84): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.528747][ T3303] cgroup: Unknown subsys name 'cpuset' [ 26.535165][ T3303] cgroup: Unknown subsys name 'rlimit' [ 26.682811][ T29] audit: type=1400 audit(1732085836.592:85): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.706122][ T29] audit: type=1400 audit(1732085836.592:86): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.727033][ T29] audit: type=1400 audit(1732085836.592:87): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.747774][ T29] audit: type=1400 audit(1732085836.592:88): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.769254][ T29] audit: type=1400 audit(1732085836.602:89): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.778435][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.794690][ T29] audit: type=1400 audit(1732085836.602:90): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.826947][ T29] audit: type=1400 audit(1732085836.712:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.857878][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.000233][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.019749][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.041831][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 28.050967][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.081417][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.117205][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.124344][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.131910][ T3317] bridge_slave_0: entered allmulticast mode [ 28.138527][ T3317] bridge_slave_0: entered promiscuous mode [ 28.160284][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.168717][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.177179][ T3317] bridge_slave_1: entered allmulticast mode [ 28.184522][ T3317] bridge_slave_1: entered promiscuous mode [ 28.233000][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.240472][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.248005][ T3315] bridge_slave_0: entered allmulticast mode [ 28.255036][ T3315] bridge_slave_0: entered promiscuous mode [ 28.278671][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.285741][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.293136][ T3319] bridge_slave_0: entered allmulticast mode [ 28.299677][ T3319] bridge_slave_0: entered promiscuous mode [ 28.312063][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.321363][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.328473][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.335782][ T3315] bridge_slave_1: entered allmulticast mode [ 28.342217][ T3315] bridge_slave_1: entered promiscuous mode [ 28.358383][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.365521][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.372972][ T3319] bridge_slave_1: entered allmulticast mode [ 28.379407][ T3319] bridge_slave_1: entered promiscuous mode [ 28.391940][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.401605][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408892][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.416723][ T3325] bridge_slave_0: entered allmulticast mode [ 28.424096][ T3325] bridge_slave_0: entered promiscuous mode [ 28.437258][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.445149][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.454613][ T3314] bridge_slave_0: entered allmulticast mode [ 28.462182][ T3314] bridge_slave_0: entered promiscuous mode [ 28.477536][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.485346][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.492563][ T3325] bridge_slave_1: entered allmulticast mode [ 28.499057][ T3325] bridge_slave_1: entered promiscuous mode [ 28.510212][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.517308][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.524605][ T3314] bridge_slave_1: entered allmulticast mode [ 28.531478][ T3314] bridge_slave_1: entered promiscuous mode [ 28.538836][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.549123][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.568207][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.587225][ T3317] team0: Port device team_slave_0 added [ 28.599438][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.618673][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.633382][ T3317] team0: Port device team_slave_1 added [ 28.644744][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.659886][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.675015][ T3319] team0: Port device team_slave_0 added [ 28.686671][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.696694][ T3315] team0: Port device team_slave_0 added [ 28.707959][ T3319] team0: Port device team_slave_1 added [ 28.714280][ T3314] team0: Port device team_slave_0 added [ 28.720347][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.727350][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.753315][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.770465][ T3315] team0: Port device team_slave_1 added [ 28.776848][ T3314] team0: Port device team_slave_1 added [ 28.793036][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.800139][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.827280][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.863272][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.871807][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.897907][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909504][ T3325] team0: Port device team_slave_0 added [ 28.915505][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.922559][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.949400][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.964873][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.972145][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.000590][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.014650][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.021930][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.049122][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.061559][ T3325] team0: Port device team_slave_1 added [ 29.075982][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.083281][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.109648][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.123334][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.131405][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.157728][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.183815][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.190818][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.216981][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.241624][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.248706][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.274643][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.292903][ T3317] hsr_slave_0: entered promiscuous mode [ 29.299118][ T3317] hsr_slave_1: entered promiscuous mode [ 29.314300][ T3314] hsr_slave_0: entered promiscuous mode [ 29.320326][ T3314] hsr_slave_1: entered promiscuous mode [ 29.326342][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.334056][ T3314] Cannot create hsr debugfs directory [ 29.351793][ T3319] hsr_slave_0: entered promiscuous mode [ 29.358121][ T3319] hsr_slave_1: entered promiscuous mode [ 29.363972][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.371619][ T3319] Cannot create hsr debugfs directory [ 29.390710][ T3315] hsr_slave_0: entered promiscuous mode [ 29.396716][ T3315] hsr_slave_1: entered promiscuous mode [ 29.402594][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.410192][ T3315] Cannot create hsr debugfs directory [ 29.438207][ T3325] hsr_slave_0: entered promiscuous mode [ 29.444473][ T3325] hsr_slave_1: entered promiscuous mode [ 29.450837][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.458671][ T3325] Cannot create hsr debugfs directory [ 29.639222][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.658136][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.674611][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.687756][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.703388][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.714036][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.723240][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.732195][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.768839][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.777569][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.791453][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.800752][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.828889][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.844307][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.856368][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.866292][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.917434][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.927978][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.938156][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.949573][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.960610][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.970443][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.002951][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.012373][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.020326][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.030943][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.048015][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.060527][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.070956][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.078146][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.096284][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.103915][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.161965][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.208595][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.217432][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.231393][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.256097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.263410][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.273659][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.282725][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.299165][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.309932][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.317338][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.333682][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.346112][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.354163][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.373225][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.380560][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.393998][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.401142][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.416595][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.425800][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.459232][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.561228][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.597302][ T3319] veth0_vlan: entered promiscuous mode [ 30.612063][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.637327][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.647475][ T3319] veth1_vlan: entered promiscuous mode [ 30.684594][ T3319] veth0_macvtap: entered promiscuous mode [ 30.709092][ T3319] veth1_macvtap: entered promiscuous mode [ 30.722148][ T3317] veth0_vlan: entered promiscuous mode [ 30.750326][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.760198][ T3317] veth1_vlan: entered promiscuous mode [ 30.788931][ T3314] veth0_vlan: entered promiscuous mode [ 30.798560][ T3314] veth1_vlan: entered promiscuous mode [ 30.824967][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.845350][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.854517][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.863360][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.874592][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914543][ T3325] veth0_vlan: entered promiscuous mode [ 30.923686][ T3314] veth0_macvtap: entered promiscuous mode [ 30.933321][ T3317] veth0_macvtap: entered promiscuous mode [ 30.942472][ T3325] veth1_vlan: entered promiscuous mode [ 30.950505][ T3314] veth1_macvtap: entered promiscuous mode [ 30.963440][ T3317] veth1_macvtap: entered promiscuous mode [ 30.972456][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.979038][ T3325] veth0_macvtap: entered promiscuous mode [ 30.998431][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.008996][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.020400][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.033829][ T3325] veth1_macvtap: entered promiscuous mode [ 31.046547][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.057509][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.070381][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.085680][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.099047][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.108502][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.119317][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.130773][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.140942][ T3454] Zero length message leads to an empty skb [ 31.150526][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.161861][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.171859][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.183272][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.196226][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.207278][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216203][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.225282][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.234530][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.250589][ T3315] veth0_vlan: entered promiscuous mode [ 31.257056][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.265921][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.274668][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283408][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.302806][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.313904][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.324024][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.335683][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.346601][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.357172][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.368677][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.383925][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.395686][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.406222][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.417508][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.427450][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.437965][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.449181][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.458076][ T3315] veth1_vlan: entered promiscuous mode [ 31.472498][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481771][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490586][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.500279][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.551999][ T3315] veth0_macvtap: entered promiscuous mode [ 31.569997][ T3315] veth1_macvtap: entered promiscuous mode [ 31.593650][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 31.593667][ T29] audit: type=1400 audit(1732085841.502:121): avc: denied { name_bind } for pid=3463 comm="syz.2.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.601122][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.622639][ T29] audit: type=1400 audit(1732085841.502:122): avc: denied { node_bind } for pid=3463 comm="syz.2.3" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.633601][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.667009][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.677889][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.688091][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.698674][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.709167][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.709646][ T29] audit: type=1400 audit(1732085841.622:123): avc: denied { prog_load } for pid=3468 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.719812][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.742907][ T29] audit: type=1400 audit(1732085841.622:124): avc: denied { bpf } for pid=3468 comm="syz.2.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.786446][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.801902][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.814406][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.814423][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.814441][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.814480][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.814496][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.814509][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.814526][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.833075][ T29] audit: type=1400 audit(1732085841.652:125): avc: denied { map_create } for pid=3468 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.858835][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.860413][ T29] audit: type=1400 audit(1732085841.652:126): avc: denied { perfmon } for pid=3468 comm="syz.2.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.938705][ T29] audit: type=1400 audit(1732085841.652:127): avc: denied { map_read map_write } for pid=3468 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.958418][ T29] audit: type=1400 audit(1732085841.672:128): avc: denied { prog_run } for pid=3468 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.977307][ T29] audit: type=1400 audit(1732085841.692:129): avc: denied { create } for pid=3469 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.997656][ T29] audit: type=1400 audit(1732085841.782:130): avc: denied { setopt } for pid=3469 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.003975][ T3466] syzkaller0: entered promiscuous mode [ 32.022741][ T3466] syzkaller0: entered allmulticast mode [ 32.059317][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068119][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.077237][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.086330][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.110779][ T3478] SELinux: security_context_str_to_sid (?) failed with errno=-22 [ 32.129915][ T3474] loop1: detected capacity change from 0 to 8192 [ 32.153078][ T3476] loop2: detected capacity change from 0 to 4096 [ 32.170341][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.178583][ T3474] loop1: p1 p2 p4 [ 32.190507][ T3474] loop1: p4 size 16777216 extends beyond EOD, truncated [ 32.251099][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.297536][ T3489] loop3: detected capacity change from 0 to 512 [ 32.339544][ T3489] EXT4-fs: Ignoring removed orlov option [ 32.356236][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.363473][ T3489] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 32.381780][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.382374][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.429103][ T3492] pim6reg1: entered promiscuous mode [ 32.434754][ T3492] pim6reg1: entered allmulticast mode [ 32.561129][ T3515] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.681853][ C1] hrtimer: interrupt took 38134 ns [ 32.742129][ T3530] process 'syz.0.30' launched './file0' with NULL argv: empty string added [ 32.752206][ T3532] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 32.775135][ T3532] geneve1: entered promiscuous mode [ 32.788413][ T3532] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 33.025282][ T3555] loop0: detected capacity change from 0 to 512 [ 33.032556][ T3555] ======================================================= [ 33.032556][ T3555] WARNING: The mand mount option has been deprecated and [ 33.032556][ T3555] and is ignored by this kernel. Remove the mand [ 33.032556][ T3555] option from the mount to silence this warning. [ 33.032556][ T3555] ======================================================= [ 33.083059][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.096752][ T3555] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.123394][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.162225][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888115646200: 0x00000: (8) Duplicate sequence number (and software is not able to recover) [ 33.177595][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811563bc00: 0x00000: (8) Duplicate sequence number (and software is not able to recover) [ 33.192017][ C0] ------------[ cut here ]------------ [ 33.198007][ C0] refcount_t: underflow; use-after-free. [ 33.204115][ C0] WARNING: CPU: 0 PID: 3561 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 33.214136][ C0] Modules linked in: [ 33.218088][ C0] CPU: 0 UID: 0 PID: 3561 Comm: syz.0.42 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 33.228316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 33.238618][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 33.244843][ C0] Code: 72 ff ff ff e8 eb c6 70 ff 48 c7 c7 78 f9 b2 86 e8 9f ae 89 ff c6 05 e0 6c f3 04 01 90 48 c7 c7 86 e2 1b 86 e8 2b 78 52 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 bc c6 70 ff 48 c7 c7 75 f9 b2 86 e8 [ 33.266177][ C0] RSP: 0018:ffffc90000003b40 EFLAGS: 00010246 [ 33.272433][ C0] RAX: 4645f2dfcc2d4b00 RBX: ffff88811557b8e4 RCX: ffff888104140000 [ 33.280605][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.288957][ C0] RBP: 0000000000000003 R08: ffffffff81120637 R09: 0000000000000000 [ 33.297535][ C0] R10: 0001ffffffffffff R11: ffff888104140000 R12: ffff88811563bc68 [ 33.306199][ C0] R13: 0000000000000000 R14: ffff88811557b8e4 R15: 0000000000000000 [ 33.314351][ C0] FS: 00007f2240b816c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 33.324933][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.332386][ C0] CR2: 0000001b32f1dff8 CR3: 0000000116b8c000 CR4: 00000000003506f0 [ 33.341477][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.349499][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.357623][ C0] Call Trace: [ 33.361219][ C0] [ 33.364384][ C0] ? __warn+0x141/0x350 [ 33.369081][ C0] ? report_bug+0x315/0x420 [ 33.373626][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 33.379604][ C0] ? handle_bug+0x60/0x90 [ 33.383976][ C0] ? exc_invalid_op+0x1a/0x50 [ 33.389162][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 33.394495][ C0] ? __warn_printk+0x167/0x1b0 [ 33.399348][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 33.404931][ C0] sk_skb_reason_drop+0xe9/0x290 [ 33.410237][ C0] j1939_session_put+0x157/0x2a0 [ 33.415390][ C0] j1939_xtp_rx_abort_one+0x9d/0x410 [ 33.421089][ C0] j1939_tp_recv+0x774/0xa80 [ 33.426620][ C0] j1939_can_recv+0x45f/0x550 [ 33.432976][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 33.438588][ C0] can_rcv_filter+0x225/0x4c0 [ 33.444292][ C0] can_receive+0x182/0x1f0 [ 33.448988][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 33.454012][ C0] can_rcv+0xe7/0x180 [ 33.458151][ C0] ? __pfx_can_rcv+0x10/0x10 [ 33.463016][ C0] __netif_receive_skb+0x123/0x280 [ 33.468466][ C0] process_backlog+0x22e/0x440 [ 33.473295][ C0] __napi_poll+0x63/0x3c0 [ 33.477759][ C0] ? net_rx_action+0x376/0x7f0 [ 33.482581][ C0] net_rx_action+0x3a1/0x7f0 [ 33.487419][ C0] handle_softirqs+0xbf/0x280 [ 33.492324][ C0] __irq_exit_rcu+0x3a/0xc0 [ 33.497572][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 33.503907][ C0] [ 33.506919][ C0] [ 33.509946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 33.516889][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60 [ 33.523745][ C0] Code: 86 e8 b7 af 16 fc 48 83 3d 47 b3 31 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d 6b 4b d0 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e [ 33.543706][ C0] RSP: 0018:ffffc9000f117af0 EFLAGS: 00000286 [ 33.549849][ C0] RAX: 0000000000000001 RBX: ffff888237c1ff80 RCX: ffffffff853297f9 [ 33.558653][ C0] RDX: 0000000000000341 RSI: 0000000000000000 RDI: ffff888237c1ff80 [ 33.566727][ C0] RBP: ffff888237c1ff80 R08: 0001ffff86644b4f R09: 0000000000000000 [ 33.575044][ C0] R10: 0001ffffffffffff R11: ffffffff810c2270 R12: ffff8881156462e8 [ 33.583052][ C0] R13: 0000000000000246 R14: 0000000000000246 R15: ffff8881156462b8 [ 33.591239][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 33.596669][ C0] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 33.602653][ C0] hrtimer_start_range_ns+0x53d/0x580 [ 33.608170][ C0] j1939_tp_schedule_txtimer+0x67/0xa0 [ 33.613773][ C0] j1939_sk_sendmsg+0x954/0xc00 [ 33.618911][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 33.624337][ C0] __sock_sendmsg+0x140/0x180 [ 33.629100][ C0] ____sys_sendmsg+0x312/0x410 [ 33.633986][ C0] __sys_sendmsg+0x19d/0x230 [ 33.638658][ C0] __x64_sys_sendmsg+0x46/0x50 [ 33.643506][ C0] x64_sys_call+0x2734/0x2dc0 [ 33.648261][ C0] do_syscall_64+0xc9/0x1c0 [ 33.652821][ C0] ? clear_bhb_loop+0x55/0xb0 [ 33.657583][ C0] ? clear_bhb_loop+0x55/0xb0 [ 33.662330][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.668265][ C0] RIP: 0033:0x7f2241f0e759 [ 33.672774][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.692437][ C0] RSP: 002b:00007f2240b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.701142][ C0] RAX: ffffffffffffffda RBX: 00007f22420c5f80 RCX: 00007f2241f0e759 [ 33.709160][ C0] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 33.717173][ C0] RBP: 00007f2241f8175e R08: 0000000000000000 R09: 0000000000000000 [ 33.725320][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.733442][ C0] R13: 0000000000000000 R14: 00007f22420c5f80 R15: 00007ffddee06ea8 [ 33.741520][ C0] [ 33.744573][ C0] ---[ end trace 0000000000000000 ]--- [ 33.750111][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811563c400: 0x00000: (8) Duplicate sequence number (and software is not able to recover) [ 34.115184][ T3591] loop3: detected capacity change from 0 to 164 [ 34.133765][ T3591] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 34.142131][ T3593] loop1: detected capacity change from 0 to 256 [ 34.144672][ T3591] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 34.243899][ T3601] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 34.311058][ T3607] loop1: detected capacity change from 0 to 1024 [ 34.339859][ T3607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.352323][ T3607] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.378969][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.401887][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.409535][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.417670][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.425287][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.433190][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.441245][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.448948][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.456771][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.464489][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.472002][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.479495][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.487188][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.494768][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.502318][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.509844][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.517344][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.524910][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.532658][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.540118][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.547567][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.554996][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.562527][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.570140][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.577859][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.585272][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.592800][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.600356][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.607830][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.615398][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.622892][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.630322][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.637805][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.646506][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.758015][ T3630] netlink: 336 bytes leftover after parsing attributes in process `syz.4.71'. [ 34.860989][ T3640] loop4: detected capacity change from 0 to 4096 [ 34.886682][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.902873][ T3657] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.051244][ T3677] block device autoloading is deprecated and will be removed. [ 35.059031][ T3677] syz.0.93: attempt to access beyond end of device [ 35.059031][ T3677] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 35.147389][ T3640] syz.4.76 (3640) used greatest stack depth: 10792 bytes left [ 35.160989][ T3665] syz.4.76 (3665) used greatest stack depth: 10392 bytes left [ 35.176984][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.185190][ T3700] loop3: detected capacity change from 0 to 164 [ 35.195645][ T3700] Unsupported NM flag settings (8) [ 35.201916][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 35.272163][ T3712] loop2: detected capacity change from 0 to 512 [ 35.291178][ T3712] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.307422][ T3712] EXT4-fs (loop2): mount failed [ 35.331686][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 35.414848][ T3730] bond1: entered promiscuous mode [ 35.420269][ T3730] bond1: entered allmulticast mode [ 35.427809][ T3730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.449549][ T3730] bond1 (unregistering): Released all slaves [ 35.469635][ T3734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.108'. [ 35.501063][ T3747] loop2: detected capacity change from 0 to 128 [ 35.511166][ T3747] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.524184][ T3747] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.577121][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.971379][ T3790] syzkaller0: entered promiscuous mode [ 35.976979][ T3790] syzkaller0: entered allmulticast mode [ 36.104014][ T3804] loop4: detected capacity change from 0 to 512 [ 36.114789][ T3804] EXT4-fs: Ignoring removed oldalloc option [ 36.114952][ T3806] serio: Serial port ptm1 [ 36.130811][ T3804] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.144: bad orphan inode 4294967295 [ 36.139049][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 36.153224][ T3804] EXT4-fs (loop4): Remounting filesystem read-only [ 36.160852][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.175319][ T3804] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 36.182458][ T3804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.210000][ T3811] syzkaller0: entered promiscuous mode [ 36.215741][ T3811] syzkaller0: entered allmulticast mode [ 36.304416][ T3822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3822 comm=syz.4.152 [ 36.305960][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 36.349381][ T3829] loop3: detected capacity change from 0 to 512 [ 36.359112][ T3829] EXT4-fs: Ignoring removed orlov option [ 36.371812][ T3829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.385321][ T3829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.403532][ T3837] netlink: 'syz.1.158': attribute type 4 has an invalid length. [ 36.429135][ T3829] EXT4-fs (loop3): 1 orphan inode deleted [ 36.435279][ T3829] EXT4-fs (loop3): 1 truncate cleaned up [ 36.446984][ T3837] netlink: 'syz.1.158': attribute type 4 has an invalid length. [ 36.451582][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.486424][ T3829] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.502595][ T3829] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 36.555068][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.596053][ T3860] loop3: detected capacity change from 0 to 1024 [ 36.604039][ T3860] EXT4-fs: Ignoring removed orlov option [ 36.609975][ T3860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.630561][ T3860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.658259][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.720275][ T3877] loop1: detected capacity change from 0 to 128 [ 36.730410][ T3877] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.744919][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.757025][ T3877] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.783125][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 36.783142][ T29] audit: type=1400 audit(1732085846.672:382): avc: denied { mounton } for pid=3884 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.822343][ T29] audit: type=1400 audit(1732085846.732:383): avc: denied { setattr } for pid=3875 comm="+}[@" path="/40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.885650][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.916155][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.947512][ T3895] capability: warning: `syz.4.171' uses deprecated v2 capabilities in a way that may be insecure [ 36.962425][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.002899][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 37.027402][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.046418][ T3910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 37.067199][ T29] audit: type=1326 audit(1732085846.972:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.104929][ T29] audit: type=1326 audit(1732085847.002:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.105785][ T3912] loop4: detected capacity change from 0 to 1024 [ 37.128413][ T29] audit: type=1326 audit(1732085847.002:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.158401][ T29] audit: type=1326 audit(1732085847.002:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.171922][ T3912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.182969][ T29] audit: type=1326 audit(1732085847.002:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.208002][ T3884] chnl_net:caif_netlink_parms(): no params data found [ 37.216125][ T29] audit: type=1326 audit(1732085847.002:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.242114][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.248168][ T29] audit: type=1326 audit(1732085847.002:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd7651be759 code=0x7ffc0000 [ 37.288757][ T29] audit: type=1326 audit(1732085847.002:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7651be793 code=0x7ffc0000 [ 37.320021][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.375706][ T3928] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 37.383075][ T3430] bridge_slave_1: left allmulticast mode [ 37.388786][ T3430] bridge_slave_1: left promiscuous mode [ 37.394510][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.418547][ T3430] bridge_slave_0: left allmulticast mode [ 37.424621][ T3430] bridge_slave_0: left promiscuous mode [ 37.430560][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.547658][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.562242][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.573823][ T3952] loop1: detected capacity change from 0 to 256 [ 37.583670][ T3430] bond0 (unregistering): Released all slaves [ 37.591668][ T3952] FAT-fs (loop1): bogus number of FAT sectors [ 37.598256][ T3952] FAT-fs (loop1): Can't find a valid FAT filesystem [ 37.607321][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.615150][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.624255][ T3884] bridge_slave_0: entered allmulticast mode [ 37.633388][ T3884] bridge_slave_0: entered promiscuous mode [ 37.643208][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.650920][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.659855][ T3884] bridge_slave_1: entered allmulticast mode [ 37.667116][ T3884] bridge_slave_1: entered promiscuous mode [ 37.687754][ T3430] hsr_slave_0: left promiscuous mode [ 37.695841][ T3430] hsr_slave_1: left promiscuous mode [ 37.704275][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.711762][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.736794][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.744444][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.758022][ T3430] veth1_macvtap: left promiscuous mode [ 37.765917][ T3430] veth0_macvtap: left promiscuous mode [ 37.771875][ T3430] veth1_vlan: left promiscuous mode [ 37.777579][ T3430] veth0_vlan: left promiscuous mode [ 37.923868][ T3974] hub 9-0:1.0: USB hub found [ 37.929070][ T3974] hub 9-0:1.0: 8 ports detected [ 37.929918][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 37.946295][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 38.038863][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 38.051904][ T3961] bridge0: port 3(macvlan2) entered blocking state [ 38.058889][ T3961] bridge0: port 3(macvlan2) entered disabled state [ 38.065957][ T3961] macvlan2: entered allmulticast mode [ 38.072576][ T3961] bridge0: entered allmulticast mode [ 38.078620][ T3961] macvlan2: left allmulticast mode [ 38.084280][ T3961] bridge0: left allmulticast mode [ 38.098185][ T3884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.109130][ T3884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.118674][ T3978] netem: incorrect gi model size [ 38.123791][ T3978] netem: change failed [ 38.146134][ T3884] team0: Port device team_slave_0 added [ 38.153875][ T3884] team0: Port device team_slave_1 added [ 38.197684][ T3884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.204937][ T3884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.232518][ T3884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.247123][ T3884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.254260][ T3884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.280424][ T3884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.314613][ T3884] hsr_slave_0: entered promiscuous mode [ 38.324499][ T3884] hsr_slave_1: entered promiscuous mode [ 38.334044][ T3884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.343152][ T3884] Cannot create hsr debugfs directory [ 38.349221][ T3990] pim6reg1: entered promiscuous mode [ 38.356175][ T3990] pim6reg1: entered allmulticast mode [ 38.410598][ T4000] kernel profiling enabled (shift: 4) [ 38.495342][ T4007] netlink: 'syz.0.216': attribute type 5 has an invalid length. [ 38.513945][ T4011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 38.561743][ T3884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.574919][ T3884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.586996][ T3884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.597047][ T3884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.650872][ T3884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.669112][ T3884] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.680427][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.687537][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.711443][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.718650][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.728661][ T4031] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 38.742499][ T4031] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 38.782059][ T4035] loop0: detected capacity change from 0 to 128 [ 38.802710][ T4035] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.825422][ T4035] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.885385][ T3884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.906301][ T4050] loop1: detected capacity change from 0 to 128 [ 38.918345][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.933641][ T4050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.941832][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 38.946407][ T4050] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.953360][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 38.972918][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 38.980727][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 38.988542][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 38.996335][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.004102][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.011979][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.013253][ T4060] loop5: detected capacity change from 0 to 8 [ 39.020188][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.034752][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.042672][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.050383][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.058448][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.066158][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.073884][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.081643][ T1034] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 39.110345][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.122470][ T1034] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.182153][ T3884] veth0_vlan: entered promiscuous mode [ 39.200986][ T3884] veth1_vlan: entered promiscuous mode [ 39.204485][ T4078] loop3: detected capacity change from 0 to 512 [ 39.227289][ T3884] veth0_macvtap: entered promiscuous mode [ 39.237585][ T3884] veth1_macvtap: entered promiscuous mode [ 39.237977][ T4078] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.250046][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.251440][ T4078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 39.261788][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.261803][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.261820][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.261830][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.261846][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.261865][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.271212][ T4078] System zones: [ 39.279935][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.289223][ T4088] loop1: detected capacity change from 0 to 512 [ 39.290652][ T4078] 0-1 [ 39.328813][ T4088] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.241: corrupted xattr block 255: invalid header [ 39.331467][ T4078] , 15-15 [ 39.339673][ T4088] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 39.345335][ T4078] , 18-18, 34-34 [ 39.347880][ T4078] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.353939][ T4088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.354376][ T4078] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 39.369316][ T4088] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.241: corrupted xattr block 255: invalid header [ 39.370676][ T4078] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 39.379777][ T4088] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 39.385471][ T3884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.391621][ T4088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.403773][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.471187][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.481504][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.492517][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.503237][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.514504][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.525118][ T3884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.535837][ T3884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.537934][ T4078] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.240: bg 0: block 40: padding at end of block bitmap is not set [ 39.560574][ T3884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.571465][ T4078] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.582385][ T3884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.592923][ T3884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.593427][ T4078] EXT4-fs (loop3): 1 truncate cleaned up [ 39.601875][ T3884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.601914][ T3884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618620][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.699536][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.723382][ T4101] bridge0: port 3(vlan2) entered blocking state [ 39.729869][ T4101] bridge0: port 3(vlan2) entered disabled state [ 39.741405][ T4101] vlan2: entered allmulticast mode [ 39.749648][ T4101] vlan2: left allmulticast mode [ 39.759212][ T4106] loop0: detected capacity change from 0 to 512 [ 39.781757][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.795634][ T4106] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.849054][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.896732][ T4126] loop4: detected capacity change from 0 to 512 [ 39.919608][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.932463][ T4126] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.971496][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.182280][ T4167] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 40.220800][ T4173] mmap: syz.0.278 (4173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.457364][ T4198] netem: change failed [ 40.502880][ T4202] __nla_validate_parse: 1 callbacks suppressed [ 40.502897][ T4202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.290'. [ 40.562984][ T4200] syzkaller0: entered promiscuous mode [ 40.568561][ T4200] syzkaller0: entered allmulticast mode [ 40.590292][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.293'. [ 40.787280][ T4220] tipc: Enabling of bearer rejected, failed to enable media [ 40.886451][ T4232] loop5: detected capacity change from 0 to 1024 [ 40.893340][ T4232] EXT4-fs: Ignoring removed nobh option [ 40.899073][ T4232] EXT4-fs: Ignoring removed orlov option [ 40.924300][ T4232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.989479][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.004652][ T4250] loop0: detected capacity change from 0 to 128 [ 41.011926][ T4250] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.028178][ T4250] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.070006][ T4252] syz.3.314 (4252) used greatest stack depth: 10096 bytes left [ 41.091244][ T4256] loop3: detected capacity change from 0 to 512 [ 41.099744][ T4256] EXT4-fs: Ignoring removed oldalloc option [ 41.127088][ T4256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.146140][ T1034] IPVS: starting estimator thread 0... [ 41.152986][ T4256] EXT4-fs (loop3): 1 truncate cleaned up [ 41.161044][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.179281][ T4260] tipc: Started in network mode [ 41.184297][ T4260] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.191733][ T4260] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.198983][ T4260] tipc: Enabled bearer , priority 10 [ 41.237893][ T4263] IPVS: using max 1920 ests per chain, 96000 per kthread [ 41.253473][ T4273] batadv0: entered promiscuous mode [ 41.265707][ T4273] batadv_slave_0: entered promiscuous mode [ 41.272101][ T4273] batadv_slave_0: left promiscuous mode [ 41.278685][ T4273] batadv0: left promiscuous mode [ 41.307591][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.327783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.395774][ T4291] loop4: detected capacity change from 0 to 1024 [ 41.405263][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 41.415449][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 41.426067][ T4291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.462180][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.477930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.486379][ C0] ================================================================== [ 41.494928][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 41.501659][ C0] [ 41.503988][ C0] read-write to 0xffff888104adcf68 of 8 bytes by interrupt on cpu 1: [ 41.512233][ C0] can_receive+0x62/0x1f0 [ 41.516603][ C0] canfd_rcv+0xe7/0x180 [ 41.520800][ C0] __netif_receive_skb+0x123/0x280 [ 41.525926][ C0] process_backlog+0x22e/0x440 [ 41.530785][ C0] __napi_poll+0x63/0x3c0 [ 41.535391][ C0] net_rx_action+0x3a1/0x7f0 [ 41.539991][ C0] handle_softirqs+0xbf/0x280 [ 41.544702][ C0] run_ksoftirqd+0x1c/0x30 [ 41.549233][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 41.554799][ C0] kthread+0x1d1/0x210 [ 41.558960][ C0] ret_from_fork+0x4b/0x60 [ 41.563760][ C0] ret_from_fork_asm+0x1a/0x30 [ 41.569194][ C0] [ 41.571526][ C0] read-write to 0xffff888104adcf68 of 8 bytes by interrupt on cpu 0: [ 41.579785][ C0] can_receive+0x62/0x1f0 [ 41.584271][ C0] canfd_rcv+0xe7/0x180 [ 41.588451][ C0] __netif_receive_skb+0x123/0x280 [ 41.594197][ C0] process_backlog+0x22e/0x440 [ 41.599084][ C0] __napi_poll+0x63/0x3c0 [ 41.603431][ C0] net_rx_action+0x3a1/0x7f0 [ 41.608033][ C0] handle_softirqs+0xbf/0x280 [ 41.612731][ C0] do_softirq+0x5e/0x90 [ 41.616894][ C0] __local_bh_enable_ip+0x6e/0x70 [ 41.621950][ C0] srcu_invoke_callbacks+0x16c/0x250 [ 41.627257][ C0] process_scheduled_works+0x483/0x9a0 [ 41.632730][ C0] worker_thread+0x51d/0x6f0 [ 41.637515][ C0] kthread+0x1d1/0x210 [ 41.641600][ C0] ret_from_fork+0x4b/0x60 [ 41.646027][ C0] ret_from_fork_asm+0x1a/0x30 [ 41.650807][ C0] [ 41.653565][ C0] value changed: 0x000000000000055b -> 0x000000000000055c [ 41.660684][ C0] [ 41.663093][ C0] Reported by Kernel Concurrency Sanitizer on: [ 41.669260][ C0] CPU: 0 UID: 0 PID: 3389 Comm: kworker/0:3 Tainted: G W 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 41.681161][ C0] Tainted: [W]=WARN [ 41.684974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 41.695033][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 41.700780][ C0] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.709005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.847861][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.952939][ T3430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.997804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.020753][ T3430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.100968][ T3430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.147822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.157805][ T3430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.230657][ T3430] bridge_slave_1: left allmulticast mode [ 42.236360][ T3430] bridge_slave_1: left promiscuous mode [ 42.242086][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.250065][ T3430] bridge_slave_0: left allmulticast mode [ 42.255909][ T3430] bridge_slave_0: left promiscuous mode [ 42.261799][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.288875][ T1034] tipc: Node number set to 2886997162 [ 42.350644][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.361189][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.372074][ T3430] bond0 (unregistering): Released all slaves [ 42.427836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.441093][ T3430] hsr_slave_0: left promiscuous mode [ 42.446914][ T3430] hsr_slave_1: left promiscuous mode [ 42.452682][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.460169][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.467908][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.475611][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.484775][ T3430] veth1_macvtap: left promiscuous mode [ 42.490339][ T3430] veth0_macvtap: left promiscuous mode [ 42.495861][ T3430] veth1_vlan: left promiscuous mode [ 42.501308][ T3430] veth0_vlan: left promiscuous mode [ 42.586768][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 42.597084][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 42.697825][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 43.242733][ T1641] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.291424][ T1641] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.340787][ T1641] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.380714][ T1641] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.439803][ T1641] bridge_slave_1: left allmulticast mode [ 43.445494][ T1641] bridge_slave_1: left promiscuous mode [ 43.451251][ T1641] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.459251][ T1641] bridge_slave_0: left allmulticast mode [ 43.464953][ T1641] bridge_slave_0: left promiscuous mode [ 43.470704][ T1641] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.560898][ T1641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.571415][ T1641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.581806][ T1641] bond0 (unregistering): Released all slaves [ 43.628696][ T1641] tipc: Disabling bearer [ 43.633670][ T1641] tipc: Left network mode [ 43.640778][ T1641] hsr_slave_0: left promiscuous mode [ 43.646493][ T1641] hsr_slave_1: left promiscuous mode [ 43.652350][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.659987][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.667556][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.675193][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.684431][ T1641] veth1_macvtap: left promiscuous mode [ 43.690023][ T1641] veth0_macvtap: left promiscuous mode [ 43.695516][ T1641] veth1_vlan: left promiscuous mode [ 43.700919][ T1641] veth0_vlan: left promiscuous mode [ 43.781591][ T1641] team0 (unregistering): Port device team_slave_1 removed [ 43.791967][ T1641] team0 (unregistering): Port device team_slave_0 removed [ 44.062891][ T1641] IPVS: stop unused estimator thread 0... [ 44.202782][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.251175][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.310637][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.350745][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.400478][ T36] bridge_slave_1: left allmulticast mode [ 44.406528][ T36] bridge_slave_1: left promiscuous mode [ 44.412557][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.420864][ T36] bridge_slave_0: left allmulticast mode [ 44.426525][ T36] bridge_slave_0: left promiscuous mode [ 44.432399][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.511637][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.522710][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.533328][ T36] bond0 (unregistering): Released all slaves [ 44.581426][ T36] hsr_slave_0: left promiscuous mode [ 44.587200][ T36] hsr_slave_1: left promiscuous mode [ 44.592937][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.600517][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.608357][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.615918][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.624861][ T36] veth1_macvtap: left promiscuous mode [ 44.630563][ T36] veth0_macvtap: left promiscuous mode [ 44.636079][ T36] veth1_vlan: left promiscuous mode [ 44.641420][ T36] veth0_vlan: left promiscuous mode [ 44.718509][ T36] team0 (unregistering): Port device team_slave_1 removed [ 44.729657][ T36] team0 (unregistering): Port device team_slave_0 removed [ 45.723791][ T85] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.770938][ T85] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.821495][ T85] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.880793][ T85] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.940172][ T85] bridge_slave_1: left allmulticast mode [ 45.945898][ T85] bridge_slave_1: left promiscuous mode [ 45.951561][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.959633][ T85] bridge_slave_0: left allmulticast mode [ 45.965296][ T85] bridge_slave_0: left promiscuous mode [ 45.971021][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.023075][ T85] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 46.080105][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.090571][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.100793][ T85] bond0 (unregistering): Released all slaves [ 46.151354][ T85] hsr_slave_0: left promiscuous mode [ 46.156936][ T85] hsr_slave_1: left promiscuous mode [ 46.162853][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.170286][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.178094][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.185509][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.194389][ T85] veth1_macvtap: left promiscuous mode [ 46.199931][ T85] veth0_macvtap: left promiscuous mode [ 46.205540][ T85] veth1_vlan: left promiscuous mode [ 46.210794][ T85] veth0_vlan: left promiscuous mode [ 46.282922][ T85] team0 (unregistering): Port device team_slave_1 removed [ 46.294878][ T85] team0 (unregistering): Port device team_slave_0 removed