last executing test programs: 13.255585831s ago: executing program 2 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 12.971969103s ago: executing program 2 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 12.971606692s ago: executing program 2 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000100060000000000040000000600000020"], 0x24, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x2b8, 0x188, 0xffffffff, 0x0, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 12.886200993s ago: executing program 2 (id=126): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) getdents64(r0, 0xfffffffffffffffe, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/43, 0x60) getdents(r1, 0xfffffffffffffffd, 0x58) 12.716670774s ago: executing program 2 (id=132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 12.248055386s ago: executing program 2 (id=141): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 12.247776807s ago: executing program 32 (id=141): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.496226973s ago: executing program 1 (id=372): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) eventfd(0x1) close_range(r3, 0xffffffffffffffff, 0x0) 761.229456ms ago: executing program 0 (id=405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r2}, 0x18) 760.774896ms ago: executing program 0 (id=406): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 667.305667ms ago: executing program 1 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x64, 0x0, 0x8, 0x2, 0x0, @multicast2, @remote}, {0x14, 0x1, 0x0, @remote}}}}}, 0x0) 620.974697ms ago: executing program 0 (id=410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x80000000) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 620.151047ms ago: executing program 4 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53f, &(0x7f0000000b80)="$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") 619.816277ms ago: executing program 1 (id=413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) unshare(0x42000000) 583.200617ms ago: executing program 3 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 545.819387ms ago: executing program 0 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}}}, 0x24}}, 0x0) 464.996337ms ago: executing program 4 (id=417): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 464.582597ms ago: executing program 3 (id=418): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x600088c0) r1 = io_uring_setup(0x68b, &(0x7f0000000b80)={0x0, 0xfffffffc, 0x0, 0xffffffed, 0x8000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 464.271887ms ago: executing program 5 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x613e, 0x4) sendmmsg$inet6(r1, &(0x7f00000101c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/31, 0x1f}}], 0x1, 0x12141, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 285.259819ms ago: executing program 0 (id=420): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) eventfd(0x1) close_range(r3, 0xffffffffffffffff, 0x0) 284.936998ms ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 284.748659ms ago: executing program 5 (id=422): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") fallocate(0xffffffffffffffff, 0x3, 0x5000000, 0x403) unshare(0x6020400) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0), 0x0, 0x0) 284.441449ms ago: executing program 3 (id=423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e9) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) 280.830349ms ago: executing program 4 (id=424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nouid32}, {@sysvgroups}, {@noblock_validity}, {@user_xattr}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0xa0f}}]}, 0x1, 0x50b, &(0x7f00000007c0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) setpriority(0x3, 0x0, 0x3) 190.427449ms ago: executing program 1 (id=425): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='timer_start\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 189.896709ms ago: executing program 3 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xee, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 137.020429ms ago: executing program 5 (id=427): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/143}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) 136.503489ms ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 127.30348ms ago: executing program 5 (id=429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000010004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x0, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) 81.25489ms ago: executing program 4 (id=430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x4ad, 0x10100, 0x2000, 0x174}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0x7, 0xb}, {0x1, 0x9}}}, 0x24}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 80.10139ms ago: executing program 0 (id=431): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 37.01738ms ago: executing program 3 (id=432): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r3, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f0000000180)="79acdb8d91ebc5c3d1", 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.58136ms ago: executing program 4 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r2, r3) 36.17568ms ago: executing program 1 (id=434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 35.87412ms ago: executing program 5 (id=435): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 17.71772ms ago: executing program 4 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="51030107"], 0x4) 0s ago: executing program 5 (id=437): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) kernel console output (not intermixed with test programs): [ 21.521811][ T29] audit: type=1400 audit(1731903407.584:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 24.854169][ T29] audit: type=1400 audit(1731903410.914:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.855280][ T3301] cgroup: Unknown subsys name 'net' [ 24.876973][ T29] audit: type=1400 audit(1731903410.914:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.904342][ T29] audit: type=1400 audit(1731903410.944:84): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.076303][ T3301] cgroup: Unknown subsys name 'cpuset' [ 25.082407][ T3301] cgroup: Unknown subsys name 'rlimit' [ 25.191095][ T29] audit: type=1400 audit(1731903411.254:85): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.216763][ T29] audit: type=1400 audit(1731903411.254:86): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.237258][ T29] audit: type=1400 audit(1731903411.254:87): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.257768][ T29] audit: type=1400 audit(1731903411.254:88): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.267118][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.278252][ T29] audit: type=1400 audit(1731903411.264:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.311572][ T29] audit: type=1400 audit(1731903411.264:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.335029][ T29] audit: type=1400 audit(1731903411.354:91): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.387254][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.071749][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.151138][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.158302][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.165665][ T3315] bridge_slave_0: entered allmulticast mode [ 27.172024][ T3315] bridge_slave_0: entered promiscuous mode [ 27.188164][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.197033][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.204119][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.211367][ T3315] bridge_slave_1: entered allmulticast mode [ 27.218056][ T3315] bridge_slave_1: entered promiscuous mode [ 27.260483][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.294682][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.317729][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.324803][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.332045][ T3312] bridge_slave_0: entered allmulticast mode [ 27.338727][ T3312] bridge_slave_0: entered promiscuous mode [ 27.356281][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.369562][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.376779][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.383882][ T3312] bridge_slave_1: entered allmulticast mode [ 27.390242][ T3312] bridge_slave_1: entered promiscuous mode [ 27.406254][ T3315] team0: Port device team_slave_0 added [ 27.412980][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.436298][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.446026][ T3315] team0: Port device team_slave_1 added [ 27.460789][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.489223][ T3312] team0: Port device team_slave_0 added [ 27.497638][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.504635][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.530610][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.544024][ T3312] team0: Port device team_slave_1 added [ 27.556187][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.563170][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.589069][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.611897][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.663821][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.671014][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.678242][ T3317] bridge_slave_0: entered allmulticast mode [ 27.684716][ T3317] bridge_slave_0: entered promiscuous mode [ 27.691387][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.698378][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.724292][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.735438][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.742394][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.768387][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.794829][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.801939][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.809209][ T3317] bridge_slave_1: entered allmulticast mode [ 27.815639][ T3317] bridge_slave_1: entered promiscuous mode [ 27.833253][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.840447][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.847758][ T3313] bridge_slave_0: entered allmulticast mode [ 27.854087][ T3313] bridge_slave_0: entered promiscuous mode [ 27.884885][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.891995][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.899131][ T3313] bridge_slave_1: entered allmulticast mode [ 27.905587][ T3313] bridge_slave_1: entered promiscuous mode [ 27.922578][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.938516][ T3315] hsr_slave_0: entered promiscuous mode [ 27.944708][ T3315] hsr_slave_1: entered promiscuous mode [ 27.960966][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.974852][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.982014][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.989289][ T3320] bridge_slave_0: entered allmulticast mode [ 27.995755][ T3320] bridge_slave_0: entered promiscuous mode [ 28.002255][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.009420][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.016595][ T3320] bridge_slave_1: entered allmulticast mode [ 28.023166][ T3320] bridge_slave_1: entered promiscuous mode [ 28.035855][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.047053][ T3312] hsr_slave_0: entered promiscuous mode [ 28.053141][ T3312] hsr_slave_1: entered promiscuous mode [ 28.059137][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.066722][ T3312] Cannot create hsr debugfs directory [ 28.086891][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.101250][ T3317] team0: Port device team_slave_0 added [ 28.112421][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.122922][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.141899][ T3313] team0: Port device team_slave_0 added [ 28.148362][ T3317] team0: Port device team_slave_1 added [ 28.154633][ T3313] team0: Port device team_slave_1 added [ 28.190517][ T3320] team0: Port device team_slave_0 added [ 28.201119][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.208126][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.234239][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.251984][ T3320] team0: Port device team_slave_1 added [ 28.262744][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.269727][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.295711][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.309172][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.316146][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.342323][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.364957][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.372011][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.397963][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.411091][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.418053][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.444137][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.462409][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.469481][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.495425][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.548363][ T3317] hsr_slave_0: entered promiscuous mode [ 28.554356][ T3317] hsr_slave_1: entered promiscuous mode [ 28.560306][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.567878][ T3317] Cannot create hsr debugfs directory [ 28.597702][ T3313] hsr_slave_0: entered promiscuous mode [ 28.603865][ T3313] hsr_slave_1: entered promiscuous mode [ 28.609739][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.617320][ T3313] Cannot create hsr debugfs directory [ 28.642659][ T3320] hsr_slave_0: entered promiscuous mode [ 28.648936][ T3320] hsr_slave_1: entered promiscuous mode [ 28.654813][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.662391][ T3320] Cannot create hsr debugfs directory [ 28.705736][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.723050][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.731673][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.742872][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.806646][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.826573][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.847399][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.857234][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.895842][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.905277][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.914244][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.932129][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.949780][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.958639][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.979283][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.988933][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.000993][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.010003][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.021935][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.031030][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.096677][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.105181][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.121353][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.141437][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.162222][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.170619][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.177697][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.192233][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.199310][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.211989][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.223173][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.232764][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.239917][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.255219][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.262293][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.272643][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.279698][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.296371][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.310221][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.317339][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.336603][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343730][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.355768][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.362807][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.435934][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.451702][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.467284][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.474381][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.486213][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.493290][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.509886][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.529176][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.584358][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.610506][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.693432][ T3317] veth0_vlan: entered promiscuous mode [ 29.706978][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.720105][ T3315] veth0_vlan: entered promiscuous mode [ 29.730694][ T3317] veth1_vlan: entered promiscuous mode [ 29.751573][ T3315] veth1_vlan: entered promiscuous mode [ 29.793528][ T3313] veth0_vlan: entered promiscuous mode [ 29.803888][ T3315] veth0_macvtap: entered promiscuous mode [ 29.824048][ T3317] veth0_macvtap: entered promiscuous mode [ 29.832357][ T3317] veth1_macvtap: entered promiscuous mode [ 29.841185][ T3315] veth1_macvtap: entered promiscuous mode [ 29.852618][ T3313] veth1_vlan: entered promiscuous mode [ 29.866293][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.876716][ T3312] veth0_vlan: entered promiscuous mode [ 29.886453][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.897057][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.908106][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.920666][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.930363][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.939252][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.947980][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.956905][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.969607][ T3312] veth1_vlan: entered promiscuous mode [ 29.980404][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.990933][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.002114][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.010954][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.019862][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.028664][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037404][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.073530][ T3313] veth0_macvtap: entered promiscuous mode [ 30.079659][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 30.079717][ T29] audit: type=1400 audit(1731903416.134:110): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2g40l4/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.082618][ T3313] veth1_macvtap: entered promiscuous mode [ 30.085860][ T29] audit: type=1400 audit(1731903416.134:111): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.127214][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.137966][ T29] audit: type=1400 audit(1731903416.134:112): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2g40l4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.148398][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.148413][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.173632][ T29] audit: type=1400 audit(1731903416.134:113): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.183396][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.188553][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.193857][ T29] audit: type=1400 audit(1731903416.134:114): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2g40l4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.263481][ T29] audit: type=1400 audit(1731903416.144:115): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2g40l4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.284422][ T3312] veth0_macvtap: entered promiscuous mode [ 30.291112][ T29] audit: type=1400 audit(1731903416.144:116): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.306811][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.326973][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.336867][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.346239][ T29] audit: type=1400 audit(1731903416.414:117): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.347371][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.386915][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.395620][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.396444][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.404355][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.427679][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.436444][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.453879][ T3320] veth0_vlan: entered promiscuous mode [ 30.459676][ T29] audit: type=1400 audit(1731903416.514:118): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.473664][ T3320] veth1_vlan: entered promiscuous mode [ 30.483808][ T29] audit: type=1400 audit(1731903416.514:119): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.514691][ T3312] veth1_macvtap: entered promiscuous mode [ 30.524983][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.535547][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.545520][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.556097][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.566032][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.576596][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.588184][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.603284][ T3320] veth0_macvtap: entered promiscuous mode [ 30.633058][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.643677][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.653547][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.664058][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.673888][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.684412][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.695253][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.704472][ T3320] veth1_macvtap: entered promiscuous mode [ 30.741435][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.750298][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759096][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.767840][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.784706][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.795236][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.805145][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.815624][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.825646][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.836125][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.845961][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.856533][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.867220][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.915796][ T3465] Zero length message leads to an empty skb [ 30.940431][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.950970][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.960820][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.971351][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.981216][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.991749][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.001599][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.012082][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.023636][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.048111][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.057053][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.065910][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.074650][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.118566][ T3470] Illegal XDP return value 4294967274 on prog (id 11) dev N/A, expect packet loss! [ 31.244262][ T3481] loop4: detected capacity change from 0 to 1024 [ 31.306954][ T3481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.317933][ T3493] syzkaller0: entered promiscuous mode [ 31.323195][ T3481] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 31.325021][ T3493] syzkaller0: entered allmulticast mode [ 31.349734][ T3481] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.5: attempt to clear invalid blocks 1634560256 len 1 [ 31.395213][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.408771][ T3500] macvlan0: entered promiscuous mode [ 31.418321][ T3500] ipvlan0: entered promiscuous mode [ 31.424103][ T3500] ipvlan0: left promiscuous mode [ 31.429786][ T3500] macvlan0: left promiscuous mode [ 31.497669][ T3508] loop1: detected capacity change from 0 to 256 [ 31.504383][ T3508] ======================================================= [ 31.504383][ T3508] WARNING: The mand mount option has been deprecated and [ 31.504383][ T3508] and is ignored by this kernel. Remove the mand [ 31.504383][ T3508] option from the mount to silence this warning. [ 31.504383][ T3508] ======================================================= [ 31.659956][ T3525] pim6reg1: entered promiscuous mode [ 31.665324][ T3525] pim6reg1: entered allmulticast mode [ 31.978096][ T3546] IPv6: Can't replace route, no match found [ 32.374827][ T3559] netem: incorrect gi model size [ 32.379893][ T3559] netem: change failed [ 32.384333][ T3561] loop1: detected capacity change from 0 to 512 [ 32.398673][ T3561] EXT4-fs: Ignoring removed oldalloc option [ 32.411811][ T3561] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.45: Parent and EA inode have the same ino 15 [ 32.426064][ T3561] EXT4-fs (loop1): Remounting filesystem read-only [ 32.432756][ T3561] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 32.441802][ T3561] EXT4-fs (loop1): 1 orphan inode deleted [ 32.448178][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.460457][ T3561] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 32.467851][ T3561] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.470162][ T3566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 32.668721][ T3580] loop1: detected capacity change from 0 to 512 [ 32.687105][ T3580] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.56: corrupted in-inode xattr: invalid ea_ino [ 32.701023][ T3580] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.56: couldn't read orphan inode 15 (err -117) [ 32.718205][ T3580] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.765027][ T3315] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 32.841245][ T3596] loop3: detected capacity change from 0 to 2048 [ 32.907257][ T3596] Alternate GPT is invalid, using primary GPT. [ 32.913643][ T3596] loop3: p1 p2 p3 [ 32.938292][ T3016] Alternate GPT is invalid, using primary GPT. [ 32.944628][ T3016] loop3: p1 p2 p3 [ 32.967122][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 32.978722][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 32.996785][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 33.021828][ T3616] udevd[3616]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 33.027208][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 33.043844][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 33.121819][ T3412] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfd [ 33.146916][ T3634] pim6reg1: entered promiscuous mode [ 33.152324][ T3634] pim6reg1: entered allmulticast mode [ 33.249431][ T3641] loop2: detected capacity change from 0 to 512 [ 33.256799][ T3641] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 33.306862][ T3647] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.77'. [ 33.318345][ T3642] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.77'. [ 33.554244][ T3665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.562372][ T3665] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.778578][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.786066][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.793475][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 33.800966][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.808419][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.815909][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.823302][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.830784][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.838278][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.845699][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.853156][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.860669][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.868098][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.875543][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.882936][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.890421][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.897836][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.905207][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.912702][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.920114][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.927554][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.935012][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.942485][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.949929][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.957463][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.964878][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.972341][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.979888][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.987335][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.994860][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.002431][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.009930][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.017521][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.024942][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.032444][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.039868][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.047312][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.054706][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.063142][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 34.080303][ T3701] process 'syz.3.103' launched './file1' with NULL argv: empty string added [ 34.149880][ T3711] loop3: detected capacity change from 0 to 2048 [ 34.158512][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 34.177747][ T3713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 34.186713][ T3713] netlink: 228 bytes leftover after parsing attributes in process `syz.1.109'. [ 34.201334][ T3704] bridge0: port 3(macvlan2) entered blocking state [ 34.208009][ T3704] bridge0: port 3(macvlan2) entered disabled state [ 34.214995][ T3713] netlink: 72 bytes leftover after parsing attributes in process `syz.1.109'. [ 34.224299][ T3704] macvlan2: entered allmulticast mode [ 34.229748][ T3704] bridge0: entered allmulticast mode [ 34.236293][ T3704] macvlan2: left allmulticast mode [ 34.241513][ T3704] bridge0: left allmulticast mode [ 34.259711][ T3711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.297970][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.334208][ T3725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 34.434338][ T3741] syz.0.122 (3741) used greatest stack depth: 10624 bytes left [ 34.463692][ T3744] loop4: detected capacity change from 0 to 512 [ 34.489201][ T3748] loop2: detected capacity change from 0 to 1024 [ 34.510136][ T3748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.510265][ T3744] EXT4-fs: inline encryption not supported [ 34.546963][ T3748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.556005][ T3744] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.570914][ T3744] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.581162][ T3744] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.123: Corrupt directory, running e2fsck is recommended [ 34.607432][ T3744] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 34.633209][ T3744] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.123: corrupted in-inode xattr: invalid ea_ino [ 34.660364][ T3317] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 34.668940][ T3762] loop0: detected capacity change from 0 to 2048 [ 34.682287][ T3317] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 34.703311][ T3744] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.123: couldn't read orphan inode 15 (err -117) [ 34.731227][ T3744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.749787][ T3762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.776440][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.789451][ T3744] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.801016][ T3744] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.811162][ T3744] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.123: Corrupt directory, running e2fsck is recommended [ 34.826891][ T3744] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.838615][ T3744] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.848872][ T3744] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.123: Corrupt directory, running e2fsck is recommended [ 34.868642][ T3744] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.880207][ T3744] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 34.890364][ T3744] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.123: Corrupt directory, running e2fsck is recommended [ 34.907614][ T3744] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.919942][ T3744] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.123: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 34.940210][ T3744] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 8: comm syz.4.123: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 34.968814][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.995317][ T3780] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.008400][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.039348][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.093853][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 35.093867][ T29] audit: type=1400 audit(1731903421.154:478): avc: denied { mounton } for pid=3789 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 35.121744][ T29] audit: type=1400 audit(1731903421.164:479): avc: denied { read } for pid=3790 comm="syz.4.142" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.145711][ T29] audit: type=1400 audit(1731903421.164:480): avc: denied { open } for pid=3790 comm="syz.4.142" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.172815][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.219342][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 35.247818][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.282915][ T29] audit: type=1400 audit(1731903421.344:481): avc: denied { name_bind } for pid=3804 comm="syz.0.147" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.309693][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.324582][ T29] audit: type=1400 audit(1731903421.384:482): avc: denied { ioctl } for pid=3809 comm="syz.4.151" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.378733][ T3815] ip6_vti0: entered promiscuous mode [ 35.392514][ T3815] vlan2: entered promiscuous mode [ 35.400769][ T3815] ip6_vti0: left promiscuous mode [ 35.404662][ T29] audit: type=1400 audit(1731903421.464:483): avc: denied { create } for pid=3819 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.428839][ T29] audit: type=1400 audit(1731903421.494:484): avc: denied { ioctl } for pid=3819 comm="syz.3.154" path="socket:[5312]" dev="sockfs" ino=5312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.518613][ T3824] cgroup: fork rejected by pids controller in /syz4 [ 35.520045][ T29] audit: type=1400 audit(1731903421.584:485): avc: denied { sqpoll } for pid=3823 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.553578][ T29] audit: type=1400 audit(1731903421.614:486): avc: denied { read } for pid=3825 comm="syz.3.156" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.576826][ T29] audit: type=1400 audit(1731903421.614:487): avc: denied { open } for pid=3825 comm="syz.3.156" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.608515][ T28] bridge_slave_1: left allmulticast mode [ 35.614258][ T28] bridge_slave_1: left promiscuous mode [ 35.620640][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.663361][ T28] bridge_slave_0: left allmulticast mode [ 35.668061][ T3833] loop0: detected capacity change from 0 to 256 [ 35.669103][ T28] bridge_slave_0: left promiscuous mode [ 35.680933][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.689319][ T3833] FAT-fs (loop0): Directory bread(block 64) failed [ 35.696324][ T3833] FAT-fs (loop0): Directory bread(block 65) failed [ 35.702893][ T3833] FAT-fs (loop0): Directory bread(block 66) failed [ 35.709484][ T3833] FAT-fs (loop0): Directory bread(block 67) failed [ 35.716092][ T3833] FAT-fs (loop0): Directory bread(block 68) failed [ 35.722670][ T3833] FAT-fs (loop0): Directory bread(block 69) failed [ 35.729307][ T3833] FAT-fs (loop0): Directory bread(block 70) failed [ 35.731504][ T3837] netlink: 100 bytes leftover after parsing attributes in process `syz.1.160'. [ 35.737096][ T3833] FAT-fs (loop0): Directory bread(block 71) failed [ 35.751988][ T3833] FAT-fs (loop0): Directory bread(block 72) failed [ 35.759918][ T3833] FAT-fs (loop0): Directory bread(block 73) failed [ 35.783031][ T3833] syz.0.159: attempt to access beyond end of device [ 35.783031][ T3833] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 35.848442][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.858905][ T3841] loop1: detected capacity change from 0 to 164 [ 35.867860][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.889605][ T28] bond0 (unregistering): Released all slaves [ 35.973031][ T28] hsr_slave_0: left promiscuous mode [ 35.973122][ T3855] loop1: detected capacity change from 0 to 512 [ 35.984821][ T28] hsr_slave_1: left promiscuous mode [ 35.993230][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.000714][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.002816][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.020814][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.021069][ T3855] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.028401][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.048448][ T28] veth1_macvtap: left promiscuous mode [ 36.053964][ T28] veth0_macvtap: left promiscuous mode [ 36.059598][ T28] veth1_vlan: left promiscuous mode [ 36.065272][ T28] veth0_vlan: left promiscuous mode [ 36.072031][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.159661][ T3866] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET) [ 36.187147][ T28] team0 (unregistering): Port device team_slave_1 removed [ 36.198797][ T28] team0 (unregistering): Port device team_slave_0 removed [ 36.244113][ T3789] chnl_net:caif_netlink_parms(): no params data found [ 36.290789][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.297981][ T3789] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.305170][ T3789] bridge_slave_0: entered allmulticast mode [ 36.312399][ T3789] bridge_slave_0: entered promiscuous mode [ 36.319637][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.326737][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.342875][ T3789] bridge_slave_1: entered allmulticast mode [ 36.350248][ T3789] bridge_slave_1: entered promiscuous mode [ 36.409531][ T3789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.435475][ T3789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.472107][ T3895] loop3: detected capacity change from 0 to 512 [ 36.473884][ T3789] team0: Port device team_slave_0 added [ 36.485719][ T3895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.489610][ T3789] team0: Port device team_slave_1 added [ 36.499314][ T3895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.518160][ T3895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 36.534092][ T3895] System zones: 1-12 [ 36.546312][ T3789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.553287][ T3789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.579500][ T3789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.592557][ T3895] EXT4-fs (loop3): 1 truncate cleaned up [ 36.598815][ T3895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.603704][ T3899] loop1: detected capacity change from 0 to 128 [ 36.624700][ T3789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.631807][ T3789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.641674][ T3899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.657855][ T3789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.678475][ T3899] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.691398][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.784096][ T3789] hsr_slave_0: entered promiscuous mode [ 36.802458][ T3789] hsr_slave_1: entered promiscuous mode [ 36.837162][ T3789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.861753][ T3789] Cannot create hsr debugfs directory [ 36.870957][ T3869] chnl_net:caif_netlink_parms(): no params data found [ 36.888308][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.956687][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.997276][ T3922] loop3: detected capacity change from 0 to 128 [ 36.999048][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.010766][ T3869] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.019915][ T3869] bridge_slave_0: entered allmulticast mode [ 37.026551][ T3869] bridge_slave_0: entered promiscuous mode [ 37.038634][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.060135][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.067597][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.074833][ T3869] bridge_slave_1: entered allmulticast mode [ 37.081364][ T3869] bridge_slave_1: entered promiscuous mode [ 37.114973][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.127824][ T3869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.142873][ T3869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.182007][ T3869] team0: Port device team_slave_0 added [ 37.194258][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.205664][ T3927] netlink: 'syz.1.189': attribute type 6 has an invalid length. [ 37.214381][ T3869] team0: Port device team_slave_1 added [ 37.250799][ T3869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.257924][ T3869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.283991][ T3869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.299118][ T3789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.309179][ T3869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.316258][ T3869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.330072][ T3938] loop3: detected capacity change from 0 to 512 [ 37.342183][ T3869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.356023][ T3938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.369752][ T3789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.376443][ T3938] EXT4-fs (loop3): 1 truncate cleaned up [ 37.382545][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.384142][ T3936] netlink: 'syz.1.192': attribute type 11 has an invalid length. [ 37.402419][ T3936] netlink: 'syz.1.192': attribute type 13 has an invalid length. [ 37.412482][ T3936] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.421382][ T3936] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.430202][ T3936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.438964][ T3936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.448081][ T3936] vxlan0: entered promiscuous mode [ 37.454478][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.473279][ T3941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.485924][ T3789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.488427][ T3941] Cannot find del_set index 0 as target [ 37.503112][ T3869] hsr_slave_0: entered promiscuous mode [ 37.511430][ T3869] hsr_slave_1: entered promiscuous mode [ 37.518304][ T3869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.527784][ T3869] Cannot create hsr debugfs directory [ 37.533433][ T3789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.585139][ T28] bridge_slave_1: left allmulticast mode [ 37.590858][ T28] bridge_slave_1: left promiscuous mode [ 37.596505][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.605909][ T28] bridge_slave_0: left allmulticast mode [ 37.611655][ T28] bridge_slave_0: left promiscuous mode [ 37.617413][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.747661][ T3953] netlink: 'syz.3.200': attribute type 3 has an invalid length. [ 37.767748][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.786255][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.794946][ T3955] loop3: detected capacity change from 0 to 512 [ 37.803570][ T28] bond0 (unregistering): Released all slaves [ 37.829210][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.843068][ T3955] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.868971][ T28] hsr_slave_0: left promiscuous mode [ 37.875330][ T28] hsr_slave_1: left promiscuous mode [ 37.881871][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.886012][ C1] ------------[ cut here ]------------ [ 37.889432][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.894785][ C1] refcount_t: underflow; use-after-free. [ 37.895043][ C1] WARNING: CPU: 1 PID: 3955 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 37.916986][ C1] Modules linked in: [ 37.920879][ C1] CPU: 1 UID: 0 PID: 3955 Comm: syz.3.201 Not tainted 6.12.0-syzkaller #0 [ 37.929413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 37.939509][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 37.945732][ C1] Code: 72 ff ff ff e8 8b 75 71 ff 48 c7 c7 fe d8 b2 86 e8 ff 5c 8a ff c6 05 06 0e f4 04 01 90 48 c7 c7 e6 b0 1b 86 e8 cb 39 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 75 71 ff 48 c7 c7 fb d8 b2 86 e8 [ 37.965371][ C1] RSP: 0018:ffffc900000e4b60 EFLAGS: 00010246 [ 37.971478][ C1] RAX: 194065ffe6d3ec00 RBX: ffff8881042ddfe4 RCX: ffff888104002100 [ 37.979486][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.987504][ C1] RBP: 0000000000000003 R08: ffffffff81120637 R09: 0000000000000000 [ 37.995516][ C1] R10: 0001ffffffffffff R11: 0001c900000e4a50 R12: ffff8881083c8c68 [ 38.003520][ C1] R13: ffff888115d16000 R14: ffff8881042ddfe4 R15: 0000000000000000 [ 38.011542][ C1] FS: 00007f170e9076c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 38.020507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.027128][ C1] CR2: 0000000020003e40 CR3: 0000000112868000 CR4: 00000000003506f0 [ 38.035123][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.043122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.051209][ C1] Call Trace: [ 38.054504][ C1] [ 38.057374][ C1] ? __warn+0x141/0x350 [ 38.061550][ C1] ? report_bug+0x315/0x420 [ 38.066104][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 38.071660][ C1] ? handle_bug+0x60/0x90 [ 38.076022][ C1] ? exc_invalid_op+0x1a/0x50 [ 38.080707][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 38.085783][ C1] ? __warn_printk+0x167/0x1b0 [ 38.090562][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 38.096153][ C1] sk_skb_reason_drop+0xe9/0x290 [ 38.101153][ C1] j1939_session_put+0x157/0x2a0 [ 38.106199][ C1] j1939_xtp_rx_eoma+0x1f0/0x260 [ 38.111166][ C1] j1939_tp_recv+0x651/0xa80 [ 38.115832][ C1] j1939_can_recv+0x45f/0x550 [ 38.120553][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 38.125806][ C1] can_rcv_filter+0x225/0x4c0 [ 38.130544][ C1] can_receive+0x182/0x1f0 [ 38.135022][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 38.139586][ C1] can_rcv+0xe7/0x180 [ 38.143603][ C1] ? __pfx_can_rcv+0x10/0x10 [ 38.148259][ C1] __netif_receive_skb+0x123/0x280 [ 38.153406][ C1] process_backlog+0x22e/0x440 [ 38.158254][ C1] __napi_poll+0x63/0x3c0 [ 38.162612][ C1] ? net_rx_action+0x376/0x7f0 [ 38.162836][ T3964] loop1: detected capacity change from 0 to 1024 [ 38.167423][ C1] net_rx_action+0x3a1/0x7f0 [ 38.174221][ T3964] EXT4-fs: Ignoring removed orlov option [ 38.178388][ C1] handle_softirqs+0xbf/0x280 [ 38.178416][ C1] irq_exit_rcu+0x3e/0x90 [ 38.178441][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 38.184180][ T3964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.188779][ C1] [ 38.188799][ C1] [ 38.211276][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 38.217084][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.217274][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60 [ 38.235687][ C1] Code: 86 e8 37 62 17 fc 48 83 3d 07 78 32 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d eb 10 d1 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e [ 38.255387][ C1] RSP: 0018:ffffc9000c203a20 EFLAGS: 00000286 [ 38.261497][ C1] RAX: 0000000000000001 RBX: ffff888237d1ff80 RCX: ffffffff8531d239 [ 38.269509][ C1] RDX: 0000000000000790 RSI: 0000000000000000 RDI: ffff888237d1ff80 [ 38.277510][ C1] RBP: ffff888237d1ff80 R08: 0001ffff86644a4f R09: 0000000000000000 [ 38.285493][ C1] R10: 0001ffffffffffff R11: ffffffff810c2250 R12: ffff888115769ce8 [ 38.293512][ C1] R13: 0000000000000246 R14: 0000000000000246 R15: ffff888115769cb8 [ 38.301502][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 38.306918][ C1] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 38.312769][ C1] hrtimer_start_range_ns+0x53d/0x580 [ 38.318177][ C1] j1939_tp_schedule_txtimer+0x67/0xa0 [ 38.323676][ C1] j1939_sk_sendmsg+0x954/0xc00 [ 38.328578][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 38.333956][ C1] __sock_sendmsg+0x140/0x180 [ 38.338658][ C1] ____sys_sendmsg+0x312/0x410 [ 38.343518][ C1] __sys_sendmmsg+0x259/0x500 [ 38.348257][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 38.353111][ C1] x64_sys_call+0xa49/0x2d60 [ 38.357747][ C1] do_syscall_64+0xc9/0x1c0 [ 38.362265][ C1] ? clear_bhb_loop+0x55/0xb0 [ 38.366955][ C1] ? clear_bhb_loop+0x55/0xb0 [ 38.371647][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.377583][ C1] RIP: 0033:0x7f170fc8e719 [ 38.382004][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.401623][ C1] RSP: 002b:00007f170e907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 38.410050][ C1] RAX: ffffffffffffffda RBX: 00007f170fe45f80 RCX: 00007f170fc8e719 [ 38.418034][ C1] RDX: 0000000000000001 RSI: 0000000020003e40 RDI: 0000000000000004 [ 38.426014][ C1] RBP: 00007f170fd0175e R08: 0000000000000000 R09: 0000000000000000 [ 38.433985][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.441991][ C1] R13: 0000000000000000 R14: 00007f170fe45f80 R15: 00007ffeb3953778 [ 38.449997][ C1] [ 38.453040][ C1] ---[ end trace 0000000000000000 ]--- [ 38.462176][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.469863][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.482287][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.491814][ T28] veth1_macvtap: left promiscuous mode [ 38.497364][ T28] veth0_macvtap: left promiscuous mode [ 38.503004][ T28] veth1_vlan: left promiscuous mode [ 38.508482][ T28] veth0_vlan: left promiscuous mode [ 38.523185][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.597381][ T3975] loop3: detected capacity change from 0 to 1024 [ 38.604628][ T3975] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.618319][ T3975] JBD2: no valid journal superblock found [ 38.624139][ T3975] EXT4-fs (loop3): Could not load journal inode [ 38.659184][ T28] team0 (unregistering): Port device team_slave_1 removed [ 38.677359][ T28] team0 (unregistering): Port device team_slave_0 removed [ 38.777799][ T3789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.811157][ C1] hrtimer: interrupt took 29804 ns [ 38.828553][ T3789] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.839247][ T3989] loop0: detected capacity change from 0 to 2048 [ 38.862620][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.869773][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.890664][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.897765][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.926179][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.971032][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.001772][ T3364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.006804][ T3789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.009279][ T3364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.016507][ T3364] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.076356][ T4010] loop0: detected capacity change from 0 to 2048 [ 39.122744][ T3869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.130749][ T4015] syz.1.221[4015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.130881][ T4015] syz.1.221[4015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.131848][ T3869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.142455][ T4015] syz.1.221[4015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.160480][ T4010] loop0: p3 < > p4 < > [ 39.166200][ T3869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.171756][ T4010] loop0: partition table partially beyond EOD, truncated [ 39.195558][ T4010] loop0: p3 start 4284289 is beyond EOD, truncated [ 39.205616][ T3869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.307810][ T3869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.341534][ T3789] veth0_vlan: entered promiscuous mode [ 39.350839][ T3869] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.360868][ T3789] veth1_vlan: entered promiscuous mode [ 39.381722][ T4033] loop0: detected capacity change from 0 to 512 [ 39.387870][ T3789] veth0_macvtap: entered promiscuous mode [ 39.398038][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.405131][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.414049][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.421194][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.427451][ T4033] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 39.433676][ T3789] veth1_macvtap: entered promiscuous mode [ 39.443311][ T4033] System zones: 0-2, 18-18, 34-34 [ 39.452304][ T4033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.226: bg 0: block 248: padding at end of block bitmap is not set [ 39.471123][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.471540][ T4033] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.226: Failed to acquire dquot type 1 [ 39.481689][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.502640][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.502660][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.516136][ T4033] EXT4-fs (loop0): 1 truncate cleaned up [ 39.522993][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.530217][ T4033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.539110][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.541358][ T3789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.558057][ T4033] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.565981][ T3869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.589867][ T3869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.606920][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.617430][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.627376][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.637877][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.647727][ T3789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.658272][ T3789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.669045][ T3789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.682234][ T3789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.687407][ T4033] syz.0.226 (4033) used greatest stack depth: 9408 bytes left [ 39.691065][ T3789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.707642][ T3789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.716407][ T3789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.729174][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.771300][ T3869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.969717][ T4075] syz.0.234[4075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.969869][ T4075] syz.0.234[4075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.981576][ T4075] syz.0.234[4075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.989434][ T3869] veth0_vlan: entered promiscuous mode [ 40.016241][ T4076] loop3: detected capacity change from 0 to 512 [ 40.031551][ T3869] veth1_vlan: entered promiscuous mode [ 40.033162][ T4075] mmap: syz.0.234 (4075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.054574][ T4076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 40.060166][ T3869] veth0_macvtap: entered promiscuous mode [ 40.065450][ T4076] System zones: 0-2, 18-18, 34-34 [ 40.081860][ T4076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.233: bg 0: block 248: padding at end of block bitmap is not set [ 40.089941][ T3869] veth1_macvtap: entered promiscuous mode [ 40.108076][ T4076] __quota_error: 162 callbacks suppressed [ 40.108090][ T4076] Quota error (device loop3): write_blk: dquota write failed [ 40.121348][ T4076] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.139773][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.150338][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.160271][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.170808][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.180697][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.191166][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.201107][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.211732][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.223547][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.231071][ T4076] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.233: Failed to acquire dquot type 1 [ 40.247617][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.258287][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.268236][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.278726][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.288720][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.299422][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.309459][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.319991][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.330959][ T29] audit: type=1400 audit(1731903426.394:648): avc: denied { load_policy } for pid=4082 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.351762][ T4084] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 40.352473][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.367292][ T4076] EXT4-fs (loop3): 1 truncate cleaned up [ 40.373299][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.386841][ T4084] SELinux: failed to load policy [ 40.392270][ T4076] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.407138][ T3869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.415997][ T3869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.424702][ T3869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.433487][ T3869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.444935][ T29] audit: type=1400 audit(1731903426.514:649): avc: denied { mac_admin } for pid=4085 comm="syz.0.238" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.467174][ T4086] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 40.507643][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.511382][ T29] audit: type=1400 audit(1731903426.544:650): avc: denied { relabelto } for pid=4085 comm="syz.0.238" name="file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 40.543045][ T29] audit: type=1400 audit(1731903426.544:651): avc: denied { associate } for pid=4085 comm="syz.0.238" name="file0" dev="tmpfs" ino=332 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_aliases_t:s0" [ 40.558839][ T4094] syz.3.241[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.570214][ T29] audit: type=1326 audit(1731903426.574:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de7f5e719 code=0x7ffc0000 [ 40.570250][ T29] audit: type=1326 audit(1731903426.574:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de7f5e719 code=0x7ffc0000 [ 40.601076][ T4094] syz.3.241[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.604967][ T29] audit: type=1326 audit(1731903426.574:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3de7f5e719 code=0x7ffc0000 [ 40.662721][ T29] audit: type=1326 audit(1731903426.574:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de7f5e719 code=0x7ffc0000 [ 40.671345][ T4097] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 40.727298][ T4094] syz.3.241[4094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.760041][ T4105] bridge: RTM_NEWNEIGH with invalid ether address [ 40.974846][ T4123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.997403][ T4124] __nla_validate_parse: 2 callbacks suppressed [ 40.997422][ T4124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 41.012525][ T4124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 41.757816][ T4143] loop1: detected capacity change from 0 to 256 [ 41.765511][ T4143] vfat: Unknown parameter '0x0000000000000000' [ 42.053053][ T4162] loop1: detected capacity change from 0 to 512 [ 42.061030][ T4162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.090027][ T4162] EXT4-fs (loop1): 1 orphan inode deleted [ 42.095856][ T4162] EXT4-fs (loop1): 1 truncate cleaned up [ 42.102103][ T4162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.139131][ T4162] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.265: path /76/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 42.171497][ T4162] EXT4-fs (loop1): Remounting filesystem read-only [ 42.213780][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.272326][ T4183] xt_hashlimit: max too large, truncated to 1048576 [ 42.370548][ T4179] loop5: detected capacity change from 0 to 8192 [ 42.382570][ T4188] loop1: detected capacity change from 0 to 512 [ 42.415626][ T4188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.435930][ T4179] loop5: p1 p2 p3 [ 42.439829][ T4179] loop5: p1 size 16128 extends beyond EOD, truncated [ 42.449646][ T4188] EXT4-fs (loop1): 1 truncate cleaned up [ 42.450365][ T4179] loop5: p2 size 2130728454 extends beyond EOD, truncated [ 42.456188][ T4188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.493149][ T4187] smc: net device bond0 applied user defined pnetid SYZ1 [ 42.513936][ T4179] loop5: p3 start 458783 is beyond EOD, truncated [ 42.531395][ T4187] smc: net device bond0 erased user defined pnetid SYZ1 [ 42.622307][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.780627][ T4205] loop3: detected capacity change from 0 to 512 [ 42.790844][ T4205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.816989][ T4206] syzkaller0: entered promiscuous mode [ 42.822484][ T4206] syzkaller0: entered allmulticast mode [ 42.832732][ T4205] EXT4-fs (loop3): 1 orphan inode deleted [ 42.838570][ T4205] EXT4-fs (loop3): 1 truncate cleaned up [ 42.844526][ T4205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.873908][ T4205] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.283: path /58/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 42.912630][ T4205] EXT4-fs (loop3): Remounting filesystem read-only [ 42.930825][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.026618][ T4213] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 43.227475][ T4171] syz.5.269 (4171) used greatest stack depth: 7272 bytes left [ 43.538277][ T4247] vlan2: entered allmulticast mode [ 43.579177][ T4250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4250 comm=syz.1.303 [ 43.632042][ T4252] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 43.643080][ T4252] team0: Failed to send options change via netlink (err -105) [ 43.650616][ T4252] team0: Port device netdevsim1 added [ 43.662197][ T4252] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 43.670982][ T4252] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 43.681705][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 43.695586][ T4252] team0: Failed to send options change via netlink (err -105) [ 43.714721][ T4252] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 43.725622][ T4252] team0: Port device netdevsim1 removed [ 43.765289][ T4265] syz.5.310[4265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.770208][ T4265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 43.914704][ T4280] loop4: detected capacity change from 0 to 512 [ 43.923371][ T4280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.943430][ T4280] EXT4-fs (loop4): 1 truncate cleaned up [ 43.949814][ T4280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.018678][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.029551][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 44.169159][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 44.178361][ T4307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 44.188071][ T4309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.330'. [ 44.198022][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.330'. [ 44.214584][ T4309] team0: Port device team_slave_0 removed [ 44.309892][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 44.352365][ T4323] pim6reg1: entered promiscuous mode [ 44.357748][ T4323] pim6reg1: entered allmulticast mode [ 44.379552][ T4327] syz.0.338 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.477475][ T4339] IPv6: Can't replace route, no match found [ 44.548746][ T4349] loop3: detected capacity change from 0 to 512 [ 44.583489][ T4349] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.349: corrupted xattr block 95: invalid header [ 44.584934][ T4351] vlan2: entered allmulticast mode [ 44.606060][ T4349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.349: bg 0: block 7: invalid block bitmap [ 44.625985][ T4349] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.652597][ T4349] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.349: corrupted xattr block 95: invalid header [ 44.682072][ T4349] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 44.692834][ T4349] EXT4-fs (loop3): 1 orphan inode deleted [ 44.699035][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.817184][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.386370][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 45.386389][ T29] audit: type=1326 audit(1731903431.454:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.438887][ T29] audit: type=1326 audit(1731903431.454:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.462584][ T29] audit: type=1326 audit(1731903431.454:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.486284][ T29] audit: type=1326 audit(1731903431.454:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.509695][ T29] audit: type=1326 audit(1731903431.454:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.533053][ T29] audit: type=1326 audit(1731903431.454:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.556861][ T29] audit: type=1326 audit(1731903431.454:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.580282][ T29] audit: type=1326 audit(1731903431.454:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.603665][ T29] audit: type=1326 audit(1731903431.454:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.627079][ T29] audit: type=1326 audit(1731903431.484:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a51e5e719 code=0x7ffc0000 [ 45.767558][ T4389] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.817207][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.833775][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.845773][ T4409] vlan2: entered allmulticast mode [ 45.855759][ T4411] tmpfs: Bad value for 'uid' [ 45.860391][ T4411] tmpfs: Bad value for 'uid' [ 45.864602][ T4410] loop0: detected capacity change from 0 to 512 [ 45.878687][ T4410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.900585][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.374: iget: bad extra_isize 7 (inode size 256) [ 45.915692][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.374: couldn't read orphan inode 15 (err -117) [ 45.932547][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.948224][ T4410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.977591][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084722][ T4433] atomic_op ffff88811d68fd28 conn xmit_atomic 0000000000000000 [ 46.109256][ T4435] loop0: detected capacity change from 0 to 128 [ 46.115874][ T4435] msdos: Unknown parameter 'kfree' [ 46.121952][ T4435] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.129543][ T4435] vhci_hcd: invalid port number 219 [ 46.134882][ T4435] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 46.164924][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 46.207335][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 46.216339][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 46.466293][ T4470] loop4: detected capacity change from 0 to 512 [ 46.477251][ T4470] EXT4-fs: Ignoring removed oldalloc option [ 46.489943][ T4470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.544160][ T4481] loop7: detected capacity change from 0 to 7 [ 46.557961][ T4481] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.561477][ T4483] loop0: detected capacity change from 0 to 1024 [ 46.565945][ T4481] Buffer I/O error on dev loop7, logical block 0, async page read [ 46.580355][ T4481] loop7: unable to read partition table [ 46.580649][ T4470] EXT4-fs (loop4): 1 truncate cleaned up [ 46.586249][ T4481] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 46.586249][ T4481] ) failed (rc=-5) [ 46.592382][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.657900][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.696561][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.716260][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.742425][ T4495] loop4: detected capacity change from 0 to 512 [ 46.786209][ T4495] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.801973][ T4495] EXT4-fs (loop4): mount failed [ 46.833444][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 46.842338][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.849929][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.862559][ T4510] Cannot find add_set index 0 as target [ 46.876999][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.884511][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.093267][ T4517] loop5: detected capacity change from 0 to 4096 [ 47.102930][ T4517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.124726][ T4522] vlan2: entered allmulticast mode [ 47.147283][ T4524] loop4: detected capacity change from 0 to 512 [ 47.168084][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.218385][ T4524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.231063][ T4524] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.256918][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.383566][ C0] ================================================================== [ 47.391740][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 47.398478][ C0] [ 47.400811][ C0] read-write to 0xffff8881168cc408 of 8 bytes by interrupt on cpu 1: [ 47.408884][ C0] can_receive+0x4e/0x1f0 [ 47.413257][ C0] canfd_rcv+0xe7/0x180 [ 47.417443][ C0] __netif_receive_skb+0x123/0x280 [ 47.422578][ C0] process_backlog+0x22e/0x440 [ 47.427370][ C0] __napi_poll+0x63/0x3c0 [ 47.431722][ C0] net_rx_action+0x3a1/0x7f0 [ 47.436334][ C0] handle_softirqs+0xbf/0x280 [ 47.441045][ C0] run_ksoftirqd+0x1c/0x30 [ 47.445486][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 47.450483][ C0] kthread+0x1d1/0x210 [ 47.454577][ C0] ret_from_fork+0x4b/0x60 [ 47.459025][ C0] ret_from_fork_asm+0x1a/0x30 [ 47.463835][ C0] [ 47.466176][ C0] read-write to 0xffff8881168cc408 of 8 bytes by interrupt on cpu 0: [ 47.474256][ C0] can_receive+0x4e/0x1f0 [ 47.478621][ C0] canfd_rcv+0xe7/0x180 [ 47.482813][ C0] __netif_receive_skb+0x123/0x280 [ 47.487959][ C0] process_backlog+0x22e/0x440 [ 47.492751][ C0] __napi_poll+0x63/0x3c0 [ 47.497096][ C0] net_rx_action+0x3a1/0x7f0 [ 47.501719][ C0] handle_softirqs+0xbf/0x280 [ 47.506421][ C0] do_softirq+0x5e/0x90 [ 47.510590][ C0] __local_bh_enable_ip+0x6e/0x70 [ 47.515639][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 47.520641][ C0] batadv_nc_purge_paths+0x220/0x270 [ 47.525951][ C0] batadv_nc_worker+0x402/0xad0 [ 47.530822][ C0] process_scheduled_works+0x483/0x9a0 [ 47.536332][ C0] worker_thread+0x51d/0x6f0 [ 47.540949][ C0] kthread+0x1d1/0x210 [ 47.545031][ C0] ret_from_fork+0x4b/0x60 [ 47.549512][ C0] ret_from_fork_asm+0x1a/0x30 [ 47.554293][ C0] [ 47.556614][ C0] value changed: 0x0000000000000983 -> 0x0000000000000984 [ 47.563718][ C0] [ 47.566038][ C0] Reported by Kernel Concurrency Sanitizer on: [ 47.572200][ C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Tainted: G W 6.12.0-syzkaller #0 [ 47.582277][ C0] Tainted: [W]=WARN [ 47.586088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 47.596322][ C0] Workqueue: bat_events batadv_nc_worker [ 47.601966][ C0] ================================================================== [ 48.559633][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888115f6bc00: rx timeout, send abort [ 48.568069][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888115f6bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.