last executing test programs: 2.133478872s ago: executing program 2 (id=35): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 2.04718915s ago: executing program 2 (id=37): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 1.496060557s ago: executing program 1 (id=55): r0 = socket(0xa, 0x5, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000, 0x2000000}) 1.433317594s ago: executing program 1 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x20, 0x6, 0x0, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LABEL={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0x3c}}, 0x44) 1.315581285s ago: executing program 1 (id=60): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 1.239343473s ago: executing program 1 (id=61): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r0) 1.17270647s ago: executing program 1 (id=64): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010000) close(r0) 1.17256024s ago: executing program 2 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 1.088335419s ago: executing program 0 (id=68): ioprio_set$pid(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 1.06969092s ago: executing program 2 (id=69): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xffeff034}, {0x6, 0x1, 0x9, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 823.678955ms ago: executing program 2 (id=74): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa0000060005"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 777.18169ms ago: executing program 2 (id=76): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x6, @remote, 0x1}], 0x2c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @private0, 0x5}, 0x1c) 299.371898ms ago: executing program 1 (id=91): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 298.582459ms ago: executing program 4 (id=92): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, r1, 0x0, 0xfffc80) 263.792662ms ago: executing program 4 (id=93): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) flistxattr(r0, &(0x7f00000000c0)=""/22, 0x16) 234.547595ms ago: executing program 0 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 216.628867ms ago: executing program 3 (id=96): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000480)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 204.419488ms ago: executing program 0 (id=97): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) futimesat(r0, 0x0, 0x0) 199.875478ms ago: executing program 3 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614"], 0x6c}}, 0x880) 186.03349ms ago: executing program 0 (id=99): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000001}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 172.253942ms ago: executing program 3 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 169.432332ms ago: executing program 4 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a"], 0xa4}}, 0x0) 166.856942ms ago: executing program 0 (id=102): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1402, 0x2, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0xd9}, 0x8001) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="0e08000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 130.769856ms ago: executing program 0 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sync() sync() 125.412827ms ago: executing program 3 (id=104): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_getevents(r0, 0x1ff, 0x0, 0x0, 0x0) 65.820993ms ago: executing program 4 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 21.862327ms ago: executing program 4 (id=106): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet6(r0, 0x0, 0x0) 21.640697ms ago: executing program 3 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x18}}], 0x1, 0x4000804) 5.467389ms ago: executing program 4 (id=108): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nolazytime}, {@delalloc}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x549, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000001000700000000000400040000000000100005000000850020"], 0x24, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 0s ago: executing program 3 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 33.359238][ T29] audit: type=1400 audit(1763124066.021:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.382994][ T3304] cgroup: Unknown subsys name 'net' [ 33.385666][ T29] audit: type=1400 audit(1763124066.041:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.410426][ T29] audit: type=1400 audit(1763124066.051:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.526316][ T3304] cgroup: Unknown subsys name 'cpuset' [ 33.532623][ T3304] cgroup: Unknown subsys name 'rlimit' [ 33.664163][ T29] audit: type=1400 audit(1763124066.321:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.688555][ T29] audit: type=1400 audit(1763124066.321:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.709094][ T29] audit: type=1400 audit(1763124066.321:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.729540][ T29] audit: type=1400 audit(1763124066.331:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.738358][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.751876][ T29] audit: type=1400 audit(1763124066.331:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.785391][ T29] audit: type=1400 audit(1763124066.331:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.808646][ T29] audit: type=1400 audit(1763124066.431:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.849927][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.047472][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.063739][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.105153][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.114180][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.153319][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.211449][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.218674][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.225897][ T3316] bridge_slave_0: entered allmulticast mode [ 35.232275][ T3316] bridge_slave_0: entered promiscuous mode [ 35.243954][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.251085][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.258331][ T3315] bridge_slave_0: entered allmulticast mode [ 35.264734][ T3315] bridge_slave_0: entered promiscuous mode [ 35.280744][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.287858][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.295092][ T3316] bridge_slave_1: entered allmulticast mode [ 35.301637][ T3316] bridge_slave_1: entered promiscuous mode [ 35.307937][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.315003][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.322146][ T3315] bridge_slave_1: entered allmulticast mode [ 35.328588][ T3315] bridge_slave_1: entered promiscuous mode [ 35.364024][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.371336][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.378632][ T3319] bridge_slave_0: entered allmulticast mode [ 35.384998][ T3319] bridge_slave_0: entered promiscuous mode [ 35.406060][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.413182][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.420419][ T3313] bridge_slave_0: entered allmulticast mode [ 35.426857][ T3313] bridge_slave_0: entered promiscuous mode [ 35.433555][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.440752][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.447939][ T3319] bridge_slave_1: entered allmulticast mode [ 35.454386][ T3319] bridge_slave_1: entered promiscuous mode [ 35.461896][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.477005][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.491332][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.498508][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.505687][ T3313] bridge_slave_1: entered allmulticast mode [ 35.512169][ T3313] bridge_slave_1: entered promiscuous mode [ 35.524416][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.544344][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.554698][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.563858][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.571292][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.578518][ T3320] bridge_slave_0: entered allmulticast mode [ 35.584853][ T3320] bridge_slave_0: entered promiscuous mode [ 35.597814][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.612941][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.622079][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.629243][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.636542][ T3320] bridge_slave_1: entered allmulticast mode [ 35.643025][ T3320] bridge_slave_1: entered promiscuous mode [ 35.655344][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.684579][ T3316] team0: Port device team_slave_0 added [ 35.691306][ T3316] team0: Port device team_slave_1 added [ 35.707255][ T3315] team0: Port device team_slave_0 added [ 35.713451][ T3313] team0: Port device team_slave_0 added [ 35.725818][ T3319] team0: Port device team_slave_0 added [ 35.732786][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.752540][ T3313] team0: Port device team_slave_1 added [ 35.764004][ T3315] team0: Port device team_slave_1 added [ 35.770600][ T3319] team0: Port device team_slave_1 added [ 35.777531][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.787000][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.793950][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.819992][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.851621][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.858698][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.884642][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.895783][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.902854][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.928824][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.957277][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.964371][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.990495][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.001540][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.008553][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.034549][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.050369][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.057362][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.083319][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.094875][ T3320] team0: Port device team_slave_0 added [ 36.101936][ T3320] team0: Port device team_slave_1 added [ 36.110576][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.117682][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.143719][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.154984][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.162070][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.188060][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.221423][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.228529][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.254452][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.272968][ T3316] hsr_slave_0: entered promiscuous mode [ 36.279093][ T3316] hsr_slave_1: entered promiscuous mode [ 36.297311][ T3313] hsr_slave_0: entered promiscuous mode [ 36.303315][ T3313] hsr_slave_1: entered promiscuous mode [ 36.309564][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.315607][ T3313] Cannot create hsr debugfs directory [ 36.327487][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.334458][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.360534][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.413932][ T3320] hsr_slave_0: entered promiscuous mode [ 36.420044][ T3320] hsr_slave_1: entered promiscuous mode [ 36.425993][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.431727][ T3320] Cannot create hsr debugfs directory [ 36.439784][ T3319] hsr_slave_0: entered promiscuous mode [ 36.446075][ T3319] hsr_slave_1: entered promiscuous mode [ 36.452176][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 36.457939][ T3319] Cannot create hsr debugfs directory [ 36.477568][ T3315] hsr_slave_0: entered promiscuous mode [ 36.483658][ T3315] hsr_slave_1: entered promiscuous mode [ 36.489605][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.495347][ T3315] Cannot create hsr debugfs directory [ 36.690280][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.700965][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.711961][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.723282][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.744330][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.753243][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.764872][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.774427][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.797735][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.809070][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.818729][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.828129][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.866670][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.879191][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.895896][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.905141][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.947194][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.954638][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.965612][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.978474][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.987860][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.017939][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.037879][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.044986][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.061251][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.068425][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.085431][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.101076][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.131995][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.143490][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.151428][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.160685][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.168031][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.192946][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.200061][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.209242][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.216348][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.226026][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.233107][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.261120][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.278884][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.299961][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.307763][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.325615][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.332739][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.346156][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.359827][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.373762][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.380885][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.391757][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.398885][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.464927][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.482830][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.519543][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.597517][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.610905][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.690832][ T3313] veth0_vlan: entered promiscuous mode [ 37.707102][ T3320] veth0_vlan: entered promiscuous mode [ 37.733560][ T3316] veth0_vlan: entered promiscuous mode [ 37.741984][ T3316] veth1_vlan: entered promiscuous mode [ 37.752994][ T3313] veth1_vlan: entered promiscuous mode [ 37.767447][ T3320] veth1_vlan: entered promiscuous mode [ 37.805413][ T3315] veth0_vlan: entered promiscuous mode [ 37.822065][ T3319] veth0_vlan: entered promiscuous mode [ 37.829134][ T3316] veth0_macvtap: entered promiscuous mode [ 37.836199][ T3313] veth0_macvtap: entered promiscuous mode [ 37.844859][ T3315] veth1_vlan: entered promiscuous mode [ 37.852718][ T3313] veth1_macvtap: entered promiscuous mode [ 37.859904][ T3316] veth1_macvtap: entered promiscuous mode [ 37.870614][ T3319] veth1_vlan: entered promiscuous mode [ 37.884371][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.893068][ T3320] veth0_macvtap: entered promiscuous mode [ 37.901499][ T3320] veth1_macvtap: entered promiscuous mode [ 37.911448][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.920522][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.936136][ T3315] veth0_macvtap: entered promiscuous mode [ 37.944363][ T3315] veth1_macvtap: entered promiscuous mode [ 37.952525][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.962481][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.974840][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.986679][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.998229][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.007515][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.019762][ T3319] veth0_macvtap: entered promiscuous mode [ 38.032258][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.041236][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.050352][ T3319] veth1_macvtap: entered promiscuous mode [ 38.058938][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.068715][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.084375][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.097968][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.107414][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.116610][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.125467][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.135185][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.149226][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.166809][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.175723][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.198367][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.203204][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.230575][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.257442][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.283889][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.332234][ T3491] xt_hashlimit: max too large, truncated to 1048576 [ 38.355720][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.370755][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.402049][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.418675][ T3489] loop3: detected capacity change from 0 to 8192 [ 38.451010][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.481151][ T3489] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.501958][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 38.501974][ T29] audit: type=1400 audit(1763124071.161:102): avc: denied { mount } for pid=3487 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.551994][ T29] audit: type=1400 audit(1763124071.211:103): avc: denied { write } for pid=3501 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.575650][ T29] audit: type=1400 audit(1763124071.211:104): avc: denied { read } for pid=3501 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.602497][ T3489] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 38.611161][ T3489] FAT-fs (loop3): Filesystem has been set read-only [ 38.640681][ T29] audit: type=1400 audit(1763124071.301:105): avc: denied { create } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.721195][ T29] audit: type=1400 audit(1763124071.301:106): avc: denied { write } for pid=3509 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.741746][ T29] audit: type=1400 audit(1763124071.361:107): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.783607][ T29] audit: type=1400 audit(1763124071.391:108): avc: denied { create } for pid=3516 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.802971][ T29] audit: type=1400 audit(1763124071.401:109): avc: denied { setopt } for pid=3516 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.822308][ T29] audit: type=1400 audit(1763124071.401:110): avc: denied { connect } for pid=3516 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.841675][ T29] audit: type=1400 audit(1763124071.401:111): avc: denied { name_connect } for pid=3516 comm="syz.1.16" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.861760][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 38.964192][ T3524] loop0: detected capacity change from 0 to 8192 [ 39.138892][ T3547] capability: warning: `syz.3.29' uses deprecated v2 capabilities in a way that may be insecure [ 39.202099][ T3552] loop2: detected capacity change from 0 to 128 [ 39.327370][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 39.482052][ T3569] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 39.503435][ T3569] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 39.512004][ T3571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 39.520931][ T3571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 39.574587][ T3569] syz.3.39 (3569) used greatest stack depth: 10080 bytes left [ 39.714292][ T3589] netlink: 92 bytes leftover after parsing attributes in process `syz.3.49'. [ 39.745637][ T3589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 39.761472][ T3592] netlink: 830 bytes leftover after parsing attributes in process `syz.0.50'. [ 39.845708][ T3596] loop0: detected capacity change from 0 to 128 [ 39.962222][ T3606] loop3: detected capacity change from 0 to 512 [ 39.977873][ T3606] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.989553][ T3606] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 39.999761][ T3606] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.57: Corrupt directory, running e2fsck is recommended [ 40.090699][ T3606] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 40.131250][ T3606] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.57: corrupted in-inode xattr: invalid ea_ino [ 40.178067][ T3606] EXT4-fs (loop3): Remounting filesystem read-only [ 40.195248][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.274388][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.337249][ T3633] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET) [ 40.362004][ T3632] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 40.639749][ T3649] loop3: detected capacity change from 0 to 512 [ 40.653908][ T3649] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.683590][ T3649] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 40.692782][ T3649] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 40.702571][ T3649] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 40.743419][ T3652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 40.752393][ T3652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 40.956642][ T3675] bridge1: entered allmulticast mode [ 40.984361][ T3679] sctp: [Deprecated]: syz.3.88 (pid 3679) Use of int in maxseg socket option. [ 40.984361][ T3679] Use struct sctp_assoc_value instead [ 41.046571][ T3685] loop3: detected capacity change from 0 to 1024 [ 41.053249][ T3685] EXT4-fs: inline encryption not supported [ 41.059206][ T3685] EXT4-fs: Ignoring removed orlov option [ 41.073258][ T3685] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 41.100385][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.128879][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.164227][ T3698] xt_hashlimit: max too large, truncated to 1048576 [ 41.396007][ T3762] ================================================================== [ 41.404223][ T3762] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 41.405343][ T3788] loop4: detected capacity change from 0 to 512 [ 41.411811][ T3762] [ 41.411824][ T3762] read-write to 0xffff88810715b6b8 of 8 bytes by task 3776 on cpu 1: [ 41.411843][ T3762] __xa_clear_mark+0xf5/0x1e0 [ 41.411873][ T3762] __folio_end_writeback+0xf7/0x3b0 [ 41.411902][ T3762] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 41.411941][ T3762] folio_end_writeback+0x1c/0x70 [ 41.418961][ T3788] EXT4-fs: Ignoring removed i_version option [ 41.420515][ T3762] ext4_finish_bio+0x459/0x8c0 [ 41.460387][ T3762] ext4_release_io_end+0x9f/0x1f0 [ 41.465444][ T3762] ext4_end_io_end+0x18d/0x240 [ 41.470322][ T3762] ext4_end_io_rsv_work+0x151/0x1e0 [ 41.475549][ T3762] process_scheduled_works+0x4ce/0x9d0 [ 41.481045][ T3762] worker_thread+0x582/0x770 [ 41.485645][ T3762] kthread+0x489/0x510 [ 41.489767][ T3762] ret_from_fork+0x122/0x1b0 [ 41.494542][ T3762] ret_from_fork_asm+0x1a/0x30 [ 41.499320][ T3762] [ 41.501655][ T3762] read to 0xffff88810715b6b8 of 8 bytes by task 3762 on cpu 0: [ 41.509202][ T3762] xas_find_marked+0x218/0x620 [ 41.513974][ T3762] find_get_entry+0x5d/0x380 [ 41.518589][ T3762] filemap_get_folios_tag+0x13b/0x210 [ 41.524070][ T3762] filemap_fdatawait_keep_errors+0x6c/0x180 [ 41.530153][ T3762] sync_inodes_sb+0x39c/0x440 [ 41.534937][ T3762] sync_inodes_one_sb+0x3d/0x50 [ 41.539806][ T3762] __iterate_supers+0x110/0x220 [ 41.544666][ T3762] iterate_supers+0x1f/0x30 [ 41.549269][ T3762] ksys_sync+0x5c/0xe0 [ 41.553364][ T3762] __ia32_sys_sync+0xe/0x20 [ 41.557891][ T3762] x64_sys_call+0x2d1f/0x3000 [ 41.562582][ T3762] do_syscall_64+0xd2/0x200 [ 41.567104][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.573008][ T3762] [ 41.575338][ T3762] value changed: 0xffffffffff000000 -> 0xffffffc000000000 [ 41.582465][ T3762] [ 41.584797][ T3762] Reported by Kernel Concurrency Sanitizer on: [ 41.590955][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.600601][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.610760][ T3762] ================================================================== [ 41.621897][ T3788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.644091][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.660197][ T3788] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.690804][ T3788] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.108: corrupted inode contents [ 41.702831][ T3788] EXT4-fs (loop4): Remounting filesystem read-only [ 41.720732][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.