last executing test programs: 3.425081127s ago: executing program 0 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff92, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) unshare(0x62040200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040fe1e000004fb00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.890779323s ago: executing program 2 (id=162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x2, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75d5bfeb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x10012, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.823193178s ago: executing program 2 (id=164): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.586631774s ago: executing program 0 (id=168): perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020509fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2.508291489s ago: executing program 0 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0a85322, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2}, 0x8) 2.457526983s ago: executing program 0 (id=173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, "064e52dd1ddd8565"}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) read$watch_queue(r2, &(0x7f0000004e00)=""/4084, 0xfdef) 1.927537799s ago: executing program 2 (id=177): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.600098921s ago: executing program 0 (id=183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000840), 0x1, 0x5e0, &(0x7f0000001200)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.268821064s ago: executing program 3 (id=192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) 646.527636ms ago: executing program 0 (id=204): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x7) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 604.840979ms ago: executing program 1 (id=206): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r4, 0x0, 0x0) 597.567779ms ago: executing program 4 (id=207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)={[{0x0, 'perf_event'}, {0x2d, 'net'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x0, 'cpuset'}]}, 0x22) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0xc0189436, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) 579.2826ms ago: executing program 1 (id=208): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 540.923033ms ago: executing program 4 (id=209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003780)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca86f750189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc681b6c9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a1996c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b1650000000000000000000000000025319406d9945628a03775"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) 517.028255ms ago: executing program 1 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 457.813369ms ago: executing program 4 (id=211): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r4, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x2da}}, 0x9e4b) 384.332704ms ago: executing program 1 (id=212): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) 383.651843ms ago: executing program 3 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 382.518484ms ago: executing program 4 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'macsec0\x00'}}, 0x1e) 358.524985ms ago: executing program 3 (id=215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) writev(r1, &(0x7f0000002080)=[{&(0x7f0000000d40)="9e562c155597f99cf3df34fb83209e9c947e6614fce4e764fc1b92e9f05d5c3c069a1ac44ee8efbbc8ea44ba06fa53be0b9e2ca3d3cf0c1b9b82246c93d9e9e043f3b4956295f6566034fb7b330cf94ed3de7c845278e26aab061a2ec2c27fff968ffa36fa4cbfd1db3fcb500f7ec6c9279df80d160036340ebbcaf7157c97802d897861ae502c684e819d41bd17a0f6e517192b45ceef05c35df92529ad4f0fb4f6356acdc0d663ce85ce3209c1b488886b5949e023fa1b322750d011e3b82159f47043be428c6f2cb6d11ca0587648fbf0eb2e4e722eb73ad4a0", 0xdb}, {&(0x7f00000003c0)="79bf314b97d21af05f2e89a548d817299eb33903907070345661c4f6df40539a05989b962e9cc0b57da9218e405fc8b95cfe0ff0b28c21", 0x37}, {&(0x7f0000000e40)="a69a67ef5eef976f9f08ecab68c19aec6532ee78f771523ef32a03a8b37e2c9d26c65435859543d6276a6ad1e05c8bf1362545de15fc796755a6019ecaca02047e9a0d08cb9d4da8059f127f131e44d7fdc38499434b49aa7e59c9c61872adae2eac724e05948c9fd4582d407127b0ff42ab749420742a5954430fb524821e87a3bc4545d5d6272c3a1d8552b415437547a69038e370e8602489bfc58bf543f4b5037aaa30151f1f3bf105207c56bcfeed0010e02c08b449239184787385a78936cb4c3e6d470c8de959ae5d", 0xcc}, {&(0x7f0000000340)="94f038129c5e72cbac2554176ff0f077c998e7856a3ef7ca057ff058f9cf7cfe37a12592432bfa6b133195d3c12939e4baebbf47b26ef03f95324b03c27724e37d", 0x41}, {&(0x7f0000002140)="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", 0xffffff59}, {&(0x7f0000002100)="3ef1a50384f32c411304f1e95e3c", 0xe}, {&(0x7f0000001080)="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", 0x1000}], 0x7) 320.387708ms ago: executing program 2 (id=216): r0 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) 295.06818ms ago: executing program 4 (id=217): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000002000000000000000000000000070200006111960884fc57f0532d6bbfd3ac1144a81714d8c76790b9e5beef8421c8b08937dd741474175608bcd18c03f1d7c30b844b6175581d56b8aca9bb7aa34a327469eae6c23621577c7b75e47e37a89b33e42bdaa8c9"], 0x18}, 0x1, 0x5502000000000000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180500f1a1d739470d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000000500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0xc0481273, &(0x7f0000000000)) 180.522358ms ago: executing program 2 (id=218): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 156.300869ms ago: executing program 2 (id=219): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 147.1482ms ago: executing program 1 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 132.346881ms ago: executing program 3 (id=221): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b330000000000ffff0015"], 0x2c}}, 0x0) 58.789576ms ago: executing program 3 (id=222): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.342266ms ago: executing program 4 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000240)="9f", 0x1}], 0x1, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 1.78292ms ago: executing program 1 (id=224): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ptype\x00') lseek(r2, 0x9, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x57) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x18, 0x1a, 0xdf}) 0s ago: executing program 3 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create(0x2) socket$netlink(0x10, 0x3, 0x0) epoll_pwait2(r3, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 19.924186][ T29] audit: type=1400 audit(1726549883.428:81): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 24.492382][ T29] audit: type=1400 audit(1726549887.988:82): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.493667][ T3248] cgroup: Unknown subsys name 'net' [ 24.515123][ T29] audit: type=1400 audit(1726549887.988:83): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.542597][ T29] audit: type=1400 audit(1726549888.018:84): avc: denied { unmount } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.677630][ T3248] cgroup: Unknown subsys name 'rlimit' [ 24.800873][ T29] audit: type=1400 audit(1726549888.298:85): avc: denied { setattr } for pid=3248 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.826172][ T29] audit: type=1400 audit(1726549888.298:86): avc: denied { create } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.837587][ T3253] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.846827][ T29] audit: type=1400 audit(1726549888.298:87): avc: denied { write } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.875653][ T29] audit: type=1400 audit(1726549888.298:88): avc: denied { read } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.879011][ T3248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.896125][ T29] audit: type=1400 audit(1726549888.298:89): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.929745][ T29] audit: type=1400 audit(1726549888.298:90): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.953989][ T29] audit: type=1400 audit(1726549888.358:91): avc: denied { relabelto } for pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.656629][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 26.730630][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 26.760004][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.767142][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.783387][ T3260] bridge_slave_0: entered allmulticast mode [ 26.789848][ T3260] bridge_slave_0: entered promiscuous mode [ 26.813352][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.820525][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.827811][ T3260] bridge_slave_1: entered allmulticast mode [ 26.834232][ T3260] bridge_slave_1: entered promiscuous mode [ 26.855869][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 26.869458][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 26.878008][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 26.890939][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.908417][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.915602][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.922798][ T3265] bridge_slave_0: entered allmulticast mode [ 26.929188][ T3265] bridge_slave_0: entered promiscuous mode [ 26.935877][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.942961][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.950096][ T3265] bridge_slave_1: entered allmulticast mode [ 26.956582][ T3265] bridge_slave_1: entered promiscuous mode [ 26.972757][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.017439][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.041625][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.053438][ T3260] team0: Port device team_slave_0 added [ 27.060049][ T3260] team0: Port device team_slave_1 added [ 27.076421][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.083542][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.090705][ T3263] bridge_slave_0: entered allmulticast mode [ 27.097270][ T3263] bridge_slave_0: entered promiscuous mode [ 27.120127][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.127304][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.134547][ T3266] bridge_slave_0: entered allmulticast mode [ 27.141112][ T3266] bridge_slave_0: entered promiscuous mode [ 27.147612][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.154709][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.162034][ T3263] bridge_slave_1: entered allmulticast mode [ 27.168373][ T3263] bridge_slave_1: entered promiscuous mode [ 27.180425][ T3265] team0: Port device team_slave_0 added [ 27.195211][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.202375][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.209672][ T3266] bridge_slave_1: entered allmulticast mode [ 27.216155][ T3266] bridge_slave_1: entered promiscuous mode [ 27.228401][ T3265] team0: Port device team_slave_1 added [ 27.244527][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.251569][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.277566][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.299659][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.308989][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.316127][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.323239][ T3261] bridge_slave_0: entered allmulticast mode [ 27.329591][ T3261] bridge_slave_0: entered promiscuous mode [ 27.336153][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.343127][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.369168][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.386019][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.399681][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.406860][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.413999][ T3261] bridge_slave_1: entered allmulticast mode [ 27.420419][ T3261] bridge_slave_1: entered promiscuous mode [ 27.434644][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.448644][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.455682][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.481707][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.493695][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.500761][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.526712][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.542875][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.553279][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.568124][ T3263] team0: Port device team_slave_0 added [ 27.582019][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.601603][ T3263] team0: Port device team_slave_1 added [ 27.622848][ T3266] team0: Port device team_slave_0 added [ 27.629915][ T3266] team0: Port device team_slave_1 added [ 27.642930][ T3260] hsr_slave_0: entered promiscuous mode [ 27.649033][ T3260] hsr_slave_1: entered promiscuous mode [ 27.680151][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.687155][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.713141][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.724776][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.731821][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.757949][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.779003][ T3261] team0: Port device team_slave_0 added [ 27.790309][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.797325][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.823259][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.842346][ T3261] team0: Port device team_slave_1 added [ 27.855547][ T3265] hsr_slave_0: entered promiscuous mode [ 27.861645][ T3265] hsr_slave_1: entered promiscuous mode [ 27.867801][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.875387][ T3265] Cannot create hsr debugfs directory [ 27.881104][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.888092][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.914099][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.954191][ T3263] hsr_slave_0: entered promiscuous mode [ 27.960328][ T3263] hsr_slave_1: entered promiscuous mode [ 27.966266][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.973818][ T3263] Cannot create hsr debugfs directory [ 27.979689][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.986673][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.012701][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.023932][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.030908][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.056810][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.108205][ T3261] hsr_slave_0: entered promiscuous mode [ 28.114191][ T3261] hsr_slave_1: entered promiscuous mode [ 28.120254][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.127839][ T3261] Cannot create hsr debugfs directory [ 28.146931][ T3266] hsr_slave_0: entered promiscuous mode [ 28.153080][ T3266] hsr_slave_1: entered promiscuous mode [ 28.159036][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.166730][ T3266] Cannot create hsr debugfs directory [ 28.314862][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.331204][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.340660][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.356444][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.381959][ T3261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.392069][ T3261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.403083][ T3261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.411906][ T3261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.435407][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.452219][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.463824][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.472586][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.513518][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.523250][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.533847][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.543301][ T3263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.552079][ T3263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.567053][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.576445][ T3263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.590829][ T3263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.604855][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.632432][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.651682][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.658867][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.677337][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.684508][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.717657][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.760795][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.774465][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.787500][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.801538][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.822309][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.833415][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.840550][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.850259][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.857425][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.890940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.898050][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.906963][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.914149][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.924487][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.931573][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.960925][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.981163][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.989668][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.996763][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.033694][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.066191][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.073315][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.082956][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.090123][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.132977][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.165283][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.196467][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.232792][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.313225][ T3260] veth0_vlan: entered promiscuous mode [ 29.340366][ T3260] veth1_vlan: entered promiscuous mode [ 29.384127][ T3260] veth0_macvtap: entered promiscuous mode [ 29.396528][ T3261] veth0_vlan: entered promiscuous mode [ 29.403353][ T3260] veth1_macvtap: entered promiscuous mode [ 29.426799][ T3265] veth0_vlan: entered promiscuous mode [ 29.434263][ T3261] veth1_vlan: entered promiscuous mode [ 29.455191][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.464211][ T3265] veth1_vlan: entered promiscuous mode [ 29.480999][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.492378][ T3263] veth0_vlan: entered promiscuous mode [ 29.511256][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.520113][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528874][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.537645][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.550817][ T3263] veth1_vlan: entered promiscuous mode [ 29.562166][ T3261] veth0_macvtap: entered promiscuous mode [ 29.572412][ T3261] veth1_macvtap: entered promiscuous mode [ 29.579808][ T3266] veth0_vlan: entered promiscuous mode [ 29.591825][ T3265] veth0_macvtap: entered promiscuous mode [ 29.609406][ T3263] veth0_macvtap: entered promiscuous mode [ 29.616552][ T3265] veth1_macvtap: entered promiscuous mode [ 29.629655][ T3263] veth1_macvtap: entered promiscuous mode [ 29.638815][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.649375][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.660205][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.668920][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.679409][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.690130][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.700028][ T3266] veth1_vlan: entered promiscuous mode [ 29.713019][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 29.713036][ T29] audit: type=1400 audit(1726549893.208:110): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.kEZKxK/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.717463][ T3261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.735411][ T29] audit: type=1400 audit(1726549893.208:111): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.743499][ T3261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.752099][ T29] audit: type=1400 audit(1726549893.208:112): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.kEZKxK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.774006][ T3261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.782680][ T29] audit: type=1400 audit(1726549893.208:113): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.807890][ T3261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.816627][ T29] audit: type=1400 audit(1726549893.218:114): avc: denied { unmount } for pid=3260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.845608][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.856779][ T29] audit: type=1400 audit(1726549893.348:115): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.866820][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.910187][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.920673][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.934229][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.944013][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.954595][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.964583][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.975046][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.986889][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.995842][ T3263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.004597][ T3263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.013325][ T3263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.022076][ T3263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.042559][ T29] audit: type=1400 audit(1726549893.528:116): avc: denied { read write } for pid=3260 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.066833][ T29] audit: type=1400 audit(1726549893.528:117): avc: denied { open } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.090875][ T29] audit: type=1400 audit(1726549893.528:118): avc: denied { ioctl } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.121936][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.132621][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.142590][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.153108][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.162978][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.173467][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.184052][ T29] audit: type=1400 audit(1726549893.548:119): avc: denied { prog_load } for pid=3399 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.203749][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.233604][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.244175][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.254072][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.264642][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.274640][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.285075][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.298211][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.319703][ T3405] loop1: detected capacity change from 0 to 128 [ 30.326323][ T3405] EXT4-fs: Ignoring removed nobh option [ 30.334426][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.343428][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352184][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.360981][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.374463][ T3405] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.389777][ T3405] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.393824][ T3266] veth0_macvtap: entered promiscuous mode [ 30.450348][ T3266] veth1_macvtap: entered promiscuous mode [ 30.458866][ T3410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.474384][ T3405] syz.1.7 (3405) used greatest stack depth: 10800 bytes left [ 30.490876][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.501622][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.511509][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.522322][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.532256][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.542977][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.552919][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.563379][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.574537][ T3260] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.576372][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.592116][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.602659][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.612741][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.623478][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.633387][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.643846][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.654339][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.664954][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.678017][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.708424][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.717441][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.726189][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.734964][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823274][ T3430] loop0: detected capacity change from 0 to 128 [ 30.858526][ T3431] loop3: detected capacity change from 0 to 1024 [ 30.874255][ T3431] ======================================================= [ 30.874255][ T3431] WARNING: The mand mount option has been deprecated and [ 30.874255][ T3431] and is ignored by this kernel. Remove the mand [ 30.874255][ T3431] option from the mount to silence this warning. [ 30.874255][ T3431] ======================================================= [ 30.947617][ T3431] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 30.954423][ T3442] loop1: detected capacity change from 0 to 128 [ 30.964170][ T3431] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.13: Invalid block bitmap block 0 in block_group 0 [ 30.982361][ T3431] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.13: Failed to acquire dquot type 0 [ 30.997712][ T3431] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.13: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.012684][ T3431] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.13: Invalid inode bitmap blk 0 in block_group 0 [ 31.025516][ T3291] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:6: Failed to release dquot type 0 [ 31.038869][ T3431] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 31.048011][ T3442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.060407][ T3431] EXT4-fs (loop3): 1 orphan inode deleted [ 31.067876][ T3431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.080750][ T3442] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.098299][ T3442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.127499][ T3431] syz.3.13 (3431) used greatest stack depth: 9648 bytes left [ 31.141096][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.197151][ T3453] loop3: detected capacity change from 0 to 1024 [ 31.211641][ T3453] EXT4-fs: Ignoring removed nobh option [ 31.215746][ T3260] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.220009][ T3453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.245595][ T3453] Non-string source [ 31.261845][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.277889][ T3462] loop1: detected capacity change from 0 to 512 [ 31.284684][ T3462] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.310831][ T3462] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.337708][ T3462] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 31.352504][ T3462] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 31.363039][ T3462] EXT4-fs (loop1): 1 truncate cleaned up [ 31.374384][ T3462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.446605][ T3473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3473 comm=syz.3.26 [ 31.447485][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.472159][ T3476] loop2: detected capacity change from 0 to 1024 [ 31.492189][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.568126][ T3484] loop4: detected capacity change from 0 to 128 [ 31.618578][ T3488] loop3: detected capacity change from 0 to 128 [ 31.644903][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.664432][ T3488] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.697278][ T3488] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.748870][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.867949][ T3514] netlink: 'syz.0.43': attribute type 10 has an invalid length. [ 31.878541][ T3514] team0: Failed to send options change via netlink (err -105) [ 31.886160][ T3514] team0: Port device netdevsim1 added [ 31.894663][ T3514] netlink: 'syz.0.43': attribute type 10 has an invalid length. [ 31.903914][ T3514] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 31.916695][ T3514] team0: Failed to send options change via netlink (err -105) [ 31.924282][ T3514] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 31.934294][ T3514] team0: Port device netdevsim1 removed [ 31.943807][ T3514] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 31.944408][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.104583][ C0] hrtimer: interrupt took 35808 ns [ 32.589381][ T3539] loop1: detected capacity change from 0 to 128 [ 32.599037][ T3539] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.606992][ T3539] FAT-fs (loop1): Filesystem has been set read-only [ 32.613864][ T3539] syz.1.63: attempt to access beyond end of device [ 32.613864][ T3539] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 32.628276][ T3539] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.636629][ T3539] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.647326][ T3539] syz.1.63: attempt to access beyond end of device [ 32.647326][ T3539] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.665440][ T3539] syz.1.63: attempt to access beyond end of device [ 32.665440][ T3539] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.982180][ T3556] loop0: detected capacity change from 0 to 128 [ 32.996720][ T3556] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.021805][ T3556] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.030629][ T3562] loop3: detected capacity change from 0 to 128 [ 33.087639][ T3265] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.185270][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 33.209314][ T3577] hsr_slave_1 (unregistering): left promiscuous mode [ 33.651563][ T3599] Illegal XDP return value 4294967274 on prog (id 81) dev N/A, expect packet loss! [ 33.721139][ T3603] bridge0: port 3(vlan2) entered blocking state [ 33.727492][ T3603] bridge0: port 3(vlan2) entered disabled state [ 33.737975][ T3603] vlan2: entered allmulticast mode [ 33.761771][ T3603] vlan2: left allmulticast mode [ 33.769111][ T3607] loop1: detected capacity change from 0 to 164 [ 33.781448][ T3607] syz.1.84: attempt to access beyond end of device [ 33.781448][ T3607] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.796044][ T3607] syz.1.84: attempt to access beyond end of device [ 33.796044][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.810738][ T3607] syz.1.84: attempt to access beyond end of device [ 33.810738][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.824477][ T3607] syz.1.84: attempt to access beyond end of device [ 33.824477][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.838534][ T3607] syz.1.84: attempt to access beyond end of device [ 33.838534][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.864036][ T3607] syz.1.84: attempt to access beyond end of device [ 33.864036][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.877799][ T3607] syz.1.84: attempt to access beyond end of device [ 33.877799][ T3607] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.914571][ T3610] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 33.929514][ T3610] team0: Failed to send options change via netlink (err -105) [ 33.937089][ T3610] team0: Port device netdevsim1 added [ 33.955073][ T3610] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 33.984072][ T3610] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 34.003542][ T3610] team0: Failed to send options change via netlink (err -105) [ 34.011240][ T3610] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 34.042099][ T3610] team0: Port device netdevsim1 removed [ 34.059757][ T3610] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 34.235880][ T3621] vlan2: entered allmulticast mode [ 34.750057][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 34.750073][ T29] audit: type=1400 audit(1726549898.248:267): avc: denied { block_suspend } for pid=3636 comm="syz.1.97" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.779102][ T29] audit: type=1400 audit(1726549898.248:268): avc: denied { module_load } for pid=3636 comm="syz.1.97" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 34.861642][ T3641] loop2: detected capacity change from 0 to 1024 [ 34.881528][ T29] audit: type=1400 audit(1726549898.378:269): avc: denied { mount } for pid=3650 comm="syz.0.102" name="/" dev="ramfs" ino=5222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.904342][ T3641] EXT4-fs: Ignoring removed orlov option [ 34.910201][ T3641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.936535][ T3656] loop1: detected capacity change from 0 to 136 [ 34.939248][ T3657] loop0: detected capacity change from 0 to 1024 [ 34.950002][ T29] audit: type=1400 audit(1726549898.448:270): avc: denied { mount } for pid=3654 comm="syz.1.106" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 34.954400][ T3641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.976170][ T29] audit: type=1400 audit(1726549898.478:271): avc: denied { mounton } for pid=3654 comm="syz.1.106" path="/28/file0/file0" dev="loop1" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 34.990490][ T3657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.046804][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.059444][ T3260] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 35.068055][ T3260] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 35.075904][ T29] audit: type=1400 audit(1726549898.568:272): avc: denied { create } for pid=3655 comm="syz.0.105" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 35.141370][ T3657] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.173233][ T3663] loop2: detected capacity change from 0 to 1024 [ 35.183818][ T3663] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.194337][ T29] audit: type=1400 audit(1726549898.698:273): avc: denied { cpu } for pid=3664 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.218733][ T3663] JBD2: no valid journal superblock found [ 35.224517][ T3663] EXT4-fs (loop2): Could not load journal inode [ 35.241968][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.251286][ T29] audit: type=1400 audit(1726549898.718:274): avc: denied { write } for pid=3664 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.326054][ T29] audit: type=1400 audit(1726549898.818:275): avc: denied { create } for pid=3675 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.346106][ T29] audit: type=1326 audit(1726549898.818:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3035ddef9 code=0x7ffc0000 [ 35.376813][ T3676] ------------[ cut here ]------------ [ 35.382329][ T3676] refcount_t: underflow; use-after-free. [ 35.388442][ T3676] WARNING: CPU: 1 PID: 3676 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 35.397937][ T3676] Modules linked in: [ 35.401858][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.0.114 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 35.412267][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 35.422771][ T3676] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 35.429200][ T3676] Code: 72 ff ff ff e8 7b a1 72 ff 48 c7 c7 69 d6 b2 86 e8 5f 08 8b ff c6 05 71 9c f5 04 01 90 48 c7 c7 68 b9 1a 86 e8 1b c7 54 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 4c a1 72 ff 48 c7 c7 66 d6 b2 86 e8 [ 35.449054][ T3676] RSP: 0018:ffffc9000cff7bb8 EFLAGS: 00010246 [ 35.455444][ T3676] RAX: d5edbeaf80dbf500 RBX: ffff888114ce26e4 RCX: 0000000000040000 [ 35.463452][ T3676] RDX: ffffc90001ea1000 RSI: 0000000000001169 RDI: 000000000000116a [ 35.471619][ T3676] RBP: 0000000000000003 R08: ffffffff81120287 R09: 0000000000000000 [ 35.479829][ T3676] R10: 0001ffffffffffff R11: ffff888107d99080 R12: ffff888114e3ba68 [ 35.488025][ T3676] R13: 00000000fffffff0 R14: ffff888114ce26e4 R15: 0000000000000000 [ 35.496079][ T3676] FS: 00007fdecb9d76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 35.505064][ T3676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.511817][ T3676] CR2: 0000001b2f91cff8 CR3: 00000001042d2000 CR4: 00000000003506f0 [ 35.520167][ T3676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.528264][ T3676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.536301][ T3676] Call Trace: [ 35.539606][ T3676] [ 35.542758][ T3676] ? __warn+0x13c/0x350 [ 35.547062][ T3676] ? report_bug+0x315/0x420 [ 35.551901][ T3676] ? refcount_warn_saturate+0x1c6/0x230 [ 35.557626][ T3676] ? handle_bug+0x3e/0x70 [ 35.562833][ T3676] ? exc_invalid_op+0x1a/0x50 [ 35.567840][ T3676] ? asm_exc_invalid_op+0x1a/0x20 [ 35.572913][ T3676] ? __warn_printk+0x167/0x1b0 [ 35.577785][ T3676] ? refcount_warn_saturate+0x1c6/0x230 [ 35.583482][ T3676] ? refcount_warn_saturate+0x1c5/0x230 [ 35.589212][ T3676] sk_skb_reason_drop+0xe9/0x290 [ 35.594728][ T3676] j1939_session_put+0x157/0x2a0 [ 35.599913][ T3676] j1939_sk_sendmsg+0xa71/0xc00 [ 35.604884][ T3676] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 35.610328][ T3676] __sock_sendmsg+0x140/0x180 [ 35.615200][ T3676] sock_write_iter+0x15e/0x1a0 [ 35.620138][ T3676] vfs_write+0x76a/0x910 [ 35.624540][ T3676] ? __pfx_sock_write_iter+0x10/0x10 [ 35.629882][ T3676] ksys_write+0xeb/0x1b0 [ 35.634169][ T3676] __x64_sys_write+0x42/0x50 [ 35.639257][ T3676] x64_sys_call+0x27dd/0x2d60 [ 35.643980][ T3676] do_syscall_64+0xc9/0x1c0 [ 35.648629][ T3676] ? clear_bhb_loop+0x55/0xb0 [ 35.653466][ T3676] ? clear_bhb_loop+0x55/0xb0 [ 35.658434][ T3676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.664526][ T3676] RIP: 0033:0x7fdeccd5def9 [ 35.669039][ T3676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.688864][ T3676] RSP: 002b:00007fdecb9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.697387][ T3676] RAX: ffffffffffffffda RBX: 00007fdeccf15f80 RCX: 00007fdeccd5def9 [ 35.705491][ T3676] RDX: 0000000000000758 RSI: 0000000020000c80 RDI: 0000000000000004 [ 35.713578][ T3676] RBP: 00007fdeccdd0b76 R08: 0000000000000000 R09: 0000000000000000 [ 35.721637][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.729648][ T3676] R13: 0000000000000000 R14: 00007fdeccf15f80 R15: 00007ffed439e288 [ 35.737746][ T3676] [ 35.740776][ T3676] ---[ end trace 0000000000000000 ]--- [ 35.748106][ T3291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.795108][ T3291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.866907][ T3291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.919205][ T3291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.952480][ T3706] ref_ctr increment failed for inode: 0xa3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811277f9c0 [ 36.052612][ T3291] bridge_slave_1: left allmulticast mode [ 36.058819][ T3291] bridge_slave_1: left promiscuous mode [ 36.064570][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.079444][ T3291] bridge_slave_0: left allmulticast mode [ 36.085365][ T3291] bridge_slave_0: left promiscuous mode [ 36.091057][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.240871][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.252304][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.263273][ T3291] bond0 (unregistering): Released all slaves [ 36.356128][ T3291] hsr_slave_0: left promiscuous mode [ 36.371141][ T3291] hsr_slave_1: left promiscuous mode [ 36.384187][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.391746][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.410154][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.417718][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.437431][ T3291] veth1_macvtap: left promiscuous mode [ 36.442940][ T3291] veth0_macvtap: left promiscuous mode [ 36.448611][ T3291] veth1_vlan: left promiscuous mode [ 36.453891][ T3291] veth0_vlan: left promiscuous mode [ 36.628028][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888114e3b800: rx timeout, send abort [ 36.636745][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888114e3b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.681014][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 36.681858][ T3751] loop0: detected capacity change from 0 to 256 [ 36.704151][ T3751] FAT-fs (loop0): Directory bread(block 64) failed [ 36.706969][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 36.721513][ T3751] FAT-fs (loop0): Directory bread(block 65) failed [ 36.735085][ T3751] FAT-fs (loop0): Directory bread(block 66) failed [ 36.743429][ T3751] FAT-fs (loop0): Directory bread(block 67) failed [ 36.750229][ T3751] FAT-fs (loop0): Directory bread(block 68) failed [ 36.758048][ T3751] FAT-fs (loop0): Directory bread(block 69) failed [ 36.764771][ T3751] FAT-fs (loop0): Directory bread(block 70) failed [ 36.772290][ T3751] FAT-fs (loop0): Directory bread(block 71) failed [ 36.781954][ T3751] FAT-fs (loop0): Directory bread(block 72) failed [ 36.799328][ T3751] FAT-fs (loop0): Directory bread(block 73) failed [ 36.831709][ T3751] process 'syz.0.134' launched './file0' with NULL argv: empty string added [ 36.914154][ T3739] syzkaller0: entered promiscuous mode [ 36.919798][ T3739] syzkaller0: entered allmulticast mode [ 36.947768][ T3758] netlink: 'syz.4.138': attribute type 4 has an invalid length. [ 36.970964][ T3683] chnl_net:caif_netlink_parms(): no params data found [ 37.090156][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.097490][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.112471][ T3683] bridge_slave_0: entered allmulticast mode [ 37.122537][ T3779] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 37.124343][ T3683] bridge_slave_0: entered promiscuous mode [ 37.156843][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.164023][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.183870][ T3683] bridge_slave_1: entered allmulticast mode [ 37.202364][ T3683] bridge_slave_1: entered promiscuous mode [ 37.241100][ T3790] syzkaller0: entered promiscuous mode [ 37.246707][ T3790] syzkaller0: entered allmulticast mode [ 37.288421][ T3683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.319171][ T3683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.393328][ T3807] pim6reg1: entered promiscuous mode [ 37.398858][ T3807] pim6reg1: entered allmulticast mode [ 37.412117][ T3816] loop2: detected capacity change from 0 to 1024 [ 37.437280][ T3816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.467248][ T3683] team0: Port device team_slave_0 added [ 37.467718][ T3816] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.486786][ T3683] team0: Port device team_slave_1 added [ 37.551765][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.563164][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.570972][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.597272][ T3683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.618540][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.625585][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.651800][ T3683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.701560][ T3683] hsr_slave_0: entered promiscuous mode [ 37.719043][ T3683] hsr_slave_1: entered promiscuous mode [ 37.944222][ T3859] loop4: detected capacity change from 0 to 512 [ 37.965934][ T3859] EXT4-fs: Ignoring removed orlov option [ 37.975184][ T3859] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.986769][ T3859] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 37.997006][ T3859] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.160: Corrupt directory, running e2fsck is recommended [ 38.049764][ T3859] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 38.064549][ T3859] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.160: corrupted in-inode xattr: invalid ea_ino [ 38.079935][ T3859] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.160: couldn't read orphan inode 15 (err -117) [ 38.092622][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.133051][ T3859] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.160'. [ 38.150321][ T3683] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.160444][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.161337][ T3683] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.188875][ T3683] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.212213][ T3683] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.268631][ T3875] netlink: 52 bytes leftover after parsing attributes in process `syz.3.163'. [ 38.278194][ T3875] unsupported nlmsg_type 40 [ 38.319104][ T3683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.350274][ T3683] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.369544][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.376699][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.397285][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.404817][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.433900][ T3683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.444504][ T3683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.569676][ T3917] loop4: detected capacity change from 0 to 512 [ 38.583778][ T3917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.595070][ T3683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.596925][ T3917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.645770][ T3917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.670197][ T3917] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.702913][ T3917] EXT4-fs (loop4): 1 truncate cleaned up [ 38.732087][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.780489][ T3936] loop3: detected capacity change from 0 to 164 [ 38.817456][ T3683] veth0_vlan: entered promiscuous mode [ 38.837930][ T3683] veth1_vlan: entered promiscuous mode [ 38.874184][ T3683] veth0_macvtap: entered promiscuous mode [ 38.887365][ T3683] veth1_macvtap: entered promiscuous mode [ 38.910389][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.921012][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.930895][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.941421][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.951430][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.961942][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.971796][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.982326][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.994048][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.006734][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.017254][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.027188][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.037681][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.047681][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.058143][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.068050][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.078497][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.092808][ T3968] loop3: detected capacity change from 0 to 512 [ 39.100535][ T3968] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.108238][ T3968] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.117555][ T3968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 39.126308][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.134169][ T3968] System zones: 1-12 [ 39.146333][ T3968] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.176: corrupted in-inode xattr: e_value size too large [ 39.162201][ T3683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.171084][ T3683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179893][ T3683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.188706][ T3683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.189674][ T3968] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.176: couldn't read orphan inode 15 (err -117) [ 39.224047][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.289176][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.324588][ T3987] ebtables: ebtables: counters copy to user failed while replacing table [ 39.398691][ T4006] loop3: detected capacity change from 0 to 2048 [ 39.418216][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.442772][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.470413][ T4018] netlink: 256 bytes leftover after parsing attributes in process `syz.4.181'. [ 39.603477][ T4039] loop1: detected capacity change from 0 to 512 [ 39.647889][ T4039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.679948][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.682146][ T4039] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.701438][ T4045] netlink: 'syz.4.187': attribute type 322 has an invalid length. [ 39.826078][ T4039] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #19: comm syz.1.184: corrupted inode contents [ 39.853070][ T4058] loop0: detected capacity change from 0 to 1024 [ 39.864136][ T4039] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #19: comm syz.1.184: mark_inode_dirty error [ 39.881490][ T4039] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #19: comm syz.1.184: corrupted inode contents [ 39.904997][ T4058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.928666][ T4039] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #19: comm syz.1.184: mark_inode_dirty error [ 39.955012][ T4039] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #19: comm syz.1.184: mark inode dirty (error -117) [ 39.967873][ T4039] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 39.994580][ T3683] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.006749][ T4066] loop4: detected capacity change from 0 to 512 [ 40.021101][ T4066] EXT4-fs: Ignoring removed i_version option [ 40.061681][ T4066] EXT4-fs: Mount option(s) incompatible with ext3 [ 40.175864][ T4066] loop4: detected capacity change from 0 to 8192 [ 40.198559][ T4066] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.340012][ T4081] serio: Serial port pts0 [ 40.389993][ T4084] ipvlan1: entered promiscuous mode [ 40.396478][ T4084] ipvlan1: left promiscuous mode [ 40.441923][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.517691][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 40.517710][ T29] audit: type=1400 audit(1726549904.018:385): avc: denied { mount } for pid=4098 comm="syz.1.208" name="/" dev="configfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.548168][ T29] audit: type=1400 audit(1726549904.018:386): avc: denied { read } for pid=4098 comm="syz.1.208" name="/" dev="configfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.570367][ T29] audit: type=1400 audit(1726549904.018:387): avc: denied { open } for pid=4098 comm="syz.1.208" path="/9/file0" dev="configfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.600407][ T29] audit: type=1400 audit(1726549904.068:388): avc: denied { unmount } for pid=3683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.647420][ T29] audit: type=1400 audit(1726549904.148:389): avc: denied { create } for pid=4103 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.667999][ T29] audit: type=1400 audit(1726549904.148:390): avc: denied { write } for pid=4103 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.744547][ T29] audit: type=1400 audit(1726549904.238:391): avc: denied { read } for pid=4113 comm="syz.3.215" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.768469][ T4111] loop1: detected capacity change from 0 to 512 [ 40.779340][ T4111] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.212: corrupted in-inode xattr: invalid ea_ino [ 40.793577][ T4111] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.212: couldn't read orphan inode 15 (err -117) [ 40.806714][ T29] audit: type=1400 audit(1726549904.268:392): avc: denied { open } for pid=4113 comm="syz.3.215" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.829879][ T29] audit: type=1400 audit(1726549904.298:393): avc: denied { ioctl } for pid=4113 comm="syz.3.215" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.830282][ T4111] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.854629][ T29] audit: type=1400 audit(1726549904.308:394): avc: denied { write } for pid=4113 comm="syz.3.215" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.943816][ T3683] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 40.967071][ T4124] loop2: detected capacity change from 0 to 512 [ 40.974329][ T4124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.983020][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 41.013234][ T4124] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.036385][ T4124] EXT4-fs (loop2): 1 truncate cleaned up [ 41.042596][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.093421][ T4115] ================================================================== [ 41.101862][ T4115] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current [ 41.110151][ T4115] [ 41.112520][ T4115] write to 0xffff88810216e3d8 of 4 bytes by task 3250 on cpu 0: [ 41.120176][ T4115] inode_set_ctime_current+0x35/0x50 [ 41.125501][ T4115] shmem_mknod+0x117/0x180 [ 41.130643][ T4115] shmem_create+0x34/0x40 [ 41.135023][ T4115] path_openat+0xe92/0x1fa0 [ 41.139562][ T4115] do_filp_open+0xf7/0x200 [ 41.144013][ T4115] do_sys_openat2+0xab/0x120 [ 41.148629][ T4115] __x64_sys_openat+0xf3/0x120 [ 41.153445][ T4115] x64_sys_call+0x1025/0x2d60 [ 41.158254][ T4115] do_syscall_64+0xc9/0x1c0 [ 41.162884][ T4115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.168820][ T4115] [ 41.168827][ T4115] read to 0xffff88810216e3d8 of 4 bytes by task 4115 on cpu 1: [ 41.168843][ T4115] generic_fillattr+0x1dd/0x2f0 [ 41.168881][ T4115] shmem_getattr+0x17b/0x200 [ 41.168903][ T4115] vfs_getattr+0x19b/0x1e0 [ 41.168922][ T4115] vfs_statx+0x134/0x2f0 [ 41.168941][ T4115] vfs_fstatat+0xec/0x110 [ 41.168960][ T4115] __se_sys_newfstatat+0x58/0x260 [ 41.168985][ T4115] __x64_sys_newfstatat+0x55/0x70 [ 41.169009][ T4115] x64_sys_call+0x141f/0x2d60 [ 41.169041][ T4115] do_syscall_64+0xc9/0x1c0 [ 41.169073][ T4115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.169104][ T4115] [ 41.169108][ T4115] value changed: 0x22751103 -> 0x230da783 [ 41.169120][ T4115] [ 41.169123][ T4115] Reported by Kernel Concurrency Sanitizer on: [ 41.169134][ T4115] CPU: 1 UID: 0 PID: 4115 Comm: udevd Tainted: G W 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 41.169168][ T4115] Tainted: [W]=WARN [ 41.169176][ T4115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.169189][ T4115] ================================================================== [ 41.527795][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.