last executing test programs: 1m14.737071631s ago: executing program 4 (id=36): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r2, 0x0, 0x40000009, 0x0) 1m14.663654008s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 1m14.63079436s ago: executing program 4 (id=39): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m14.341700336s ago: executing program 4 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 1m14.30267496s ago: executing program 4 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m14.108076437s ago: executing program 4 (id=56): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1m13.996960007s ago: executing program 32 (id=56): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 39.69078362s ago: executing program 5 (id=1206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0179e08}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2}) 39.631880875s ago: executing program 5 (id=1209): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 39.495974967s ago: executing program 5 (id=1215): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001, 0xfffffffe}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 39.428891903s ago: executing program 5 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 39.388136907s ago: executing program 5 (id=1223): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x7}}, 0x30000000) 38.995681052s ago: executing program 5 (id=1235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 38.995376731s ago: executing program 33 (id=1235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 32.983804173s ago: executing program 3 (id=1411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000874000/0x2000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 32.871072023s ago: executing program 3 (id=1415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xa71, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0xd3fd, 0x0, 0x0, 0x0) 32.647231863s ago: executing program 3 (id=1423): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 31.78059063s ago: executing program 3 (id=1460): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x80000001, 0x7, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x1]}) 30.991395279s ago: executing program 3 (id=1462): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 28.853397969s ago: executing program 3 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000180)="f1392e75", 0x4}], 0x2}}], 0x1, 0x80) 28.824382171s ago: executing program 34 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000180)="f1392e75", 0x4}], 0x2}}], 0x1, 0x80) 28.567706513s ago: executing program 0 (id=1562): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000002000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1000000000000}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 28.557610265s ago: executing program 0 (id=1563): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004000000fff7000000"], 0x20000600}}, 0x0) 28.476546712s ago: executing program 0 (id=1564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 27.896984003s ago: executing program 0 (id=1572): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x80000001, 0x7, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x1]}) 27.045606288s ago: executing program 0 (id=1586): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 26.960711235s ago: executing program 0 (id=1588): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) 26.91962712s ago: executing program 35 (id=1588): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) 20.063536156s ago: executing program 8 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38) 19.960413885s ago: executing program 8 (id=1821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x1}}) 19.938954267s ago: executing program 8 (id=1822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 19.876979372s ago: executing program 8 (id=1826): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 19.799878479s ago: executing program 8 (id=1828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.608526626s ago: executing program 8 (id=1841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 19.576019479s ago: executing program 36 (id=1841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 2.072674206s ago: executing program 9 (id=2338): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x8, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) 1.934838149s ago: executing program 9 (id=2340): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x6, 0x401, 0x0, 0x1ff, 0xfffffffc}, 0x14) 1.793619181s ago: executing program 7 (id=2344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x18, 0x2041}, 0x40000) 1.768136474s ago: executing program 9 (id=2347): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) 1.737600666s ago: executing program 7 (id=2349): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x91d1, 0x0, 0x3, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) io_uring_enter(r0, 0x59f1, 0x2, 0x8, 0x0, 0xb2) 1.503117357s ago: executing program 9 (id=2352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2000000004}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.483040748s ago: executing program 9 (id=2354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 1.389381067s ago: executing program 7 (id=2357): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @mcast2, 0x8}}, 0x3d) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 1.077735775s ago: executing program 7 (id=2365): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x8, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) 981.894553ms ago: executing program 7 (id=2370): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 981.315413ms ago: executing program 6 (id=2371): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf0200000000", @ANYRES32=r3, @ANYBLOB="81b8000000000000300012800b000100697036746e6c000020000280140003002001"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x0) sendto$packet(r0, &(0x7f0000000640)="e8b77052", 0x4, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 940.693927ms ago: executing program 6 (id=2373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100005705000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 934.688777ms ago: executing program 7 (id=2374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) 848.227095ms ago: executing program 1 (id=2376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 786.78319ms ago: executing program 1 (id=2378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x4, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 765.106272ms ago: executing program 1 (id=2379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) sendmsg$unix(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) 684.284559ms ago: executing program 1 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r2) 618.796785ms ago: executing program 2 (id=2381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 594.832937ms ago: executing program 9 (id=2382): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8488, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}, {@norecovery}]}, 0x1, 0x460, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x25) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x9, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) 527.845443ms ago: executing program 2 (id=2383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x1a) 461.085759ms ago: executing program 1 (id=2384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80}, 0x1, 0x0, 0x33e00000, 0x0, 0x7, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe80"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 370.383417ms ago: executing program 2 (id=2385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000002000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 324.702321ms ago: executing program 6 (id=2386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c01000010001307000000ecfcdbdf25e0800001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 296.550453ms ago: executing program 2 (id=2387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 285.393285ms ago: executing program 6 (id=2388): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0xffffff17}], 0x0, 0x1}, 0x20) 212.059601ms ago: executing program 6 (id=2389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 140.829357ms ago: executing program 6 (id=2390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x200000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 82.822003ms ago: executing program 2 (id=2391): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 690.53µs ago: executing program 1 (id=2392): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) 0s ago: executing program 2 (id=2393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x2400c040) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) kernel console output (not intermixed with test programs): s invalid, using primary GPT. [ 64.744060][ T5347] loop1: p2 p3 p7 [ 65.322532][ T5394] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'. [ 65.331688][ T5394] netem: change failed [ 65.401639][ T5392] loop3: detected capacity change from 0 to 8192 [ 65.431550][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 65.431565][ T29] audit: type=1400 audit(1767659507.748:1048): avc: denied { read write } for pid=5403 comm="syz.0.767" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.461064][ T29] audit: type=1400 audit(1767659507.748:1049): avc: denied { open } for pid=5403 comm="syz.0.767" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.484495][ T5392] loop3: p1 p2[DM] p4 [ 65.488664][ T5392] loop3: p1 size 196608 extends beyond EOD, truncated [ 65.496020][ T29] audit: type=1400 audit(1767659507.808:1050): avc: denied { ioctl } for pid=5403 comm="syz.0.767" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.507099][ T5392] loop3: p2 start 4292936063 is beyond EOD, truncated [ 65.527658][ T5392] loop3: p4 size 50331648 extends beyond EOD, truncated [ 65.588567][ T29] audit: type=1400 audit(1767659507.908:1051): avc: denied { create } for pid=5409 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.622879][ T29] audit: type=1400 audit(1767659507.908:1052): avc: denied { bind } for pid=5409 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.642877][ T29] audit: type=1400 audit(1767659507.908:1053): avc: denied { write } for pid=5409 comm="syz.3.770" path="socket:[12496]" dev="sockfs" ino=12496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.667756][ T29] audit: type=1326 audit(1767659507.988:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 65.703974][ T29] audit: type=1326 audit(1767659507.988:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 65.727526][ T29] audit: type=1326 audit(1767659507.988:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 65.751214][ T29] audit: type=1326 audit(1767659507.988:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 65.845350][ T5429] loop3: detected capacity change from 0 to 512 [ 65.853363][ T5429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.862209][ T5429] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.887751][ T5429] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.781: Allocating blocks 41-42 which overlap fs metadata [ 65.969136][ T5429] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.781: Allocating blocks 41-42 which overlap fs metadata [ 66.020080][ T5429] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.781: Failed to acquire dquot type 1 [ 66.056015][ T5429] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 66.079657][ T5429] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.781: corrupted inode contents [ 66.092107][ T5429] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.781: mark_inode_dirty error [ 66.103991][ T5429] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.781: corrupted inode contents [ 66.116577][ T5429] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.781: mark_inode_dirty error [ 66.129433][ T5429] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.781: corrupted inode contents [ 66.148356][ T5429] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 66.157269][ T5429] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.781: corrupted inode contents [ 66.169732][ T5429] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.781: mark_inode_dirty error [ 66.186373][ T5468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.793'. [ 66.198403][ T5429] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 66.207751][ T5429] EXT4-fs (loop3): 1 truncate cleaned up [ 66.216584][ T5429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.232733][ T5473] netlink: 'syz.0.796': attribute type 7 has an invalid length. [ 66.277719][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.306262][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 66.353004][ T5485] netlink: 'syz.3.799': attribute type 3 has an invalid length. [ 66.587762][ T5517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 66.608342][ T5517] IPVS: Error connecting to the multicast addr [ 66.754762][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 66.763862][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 66.782957][ T5539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.823'. [ 66.801433][ T5538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.852152][ T5538] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.901143][ T5553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5553 comm=syz.0.831 [ 66.913699][ T5553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5553 comm=syz.0.831 [ 66.923309][ T5538] SELinux: Context @ is not valid (left unmapped). [ 66.950102][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.406064][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.416243][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.536529][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.863'. [ 67.585322][ T5643] set_capacity_and_notify: 1 callbacks suppressed [ 67.585341][ T5643] loop0: detected capacity change from 0 to 512 [ 67.607256][ T5643] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.867: EA inode hash validation failed [ 67.620198][ T5643] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.867: corrupted inode contents [ 67.632445][ T5643] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.867: mark_inode_dirty error [ 67.646160][ T5643] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.867: corrupted inode contents [ 67.658189][ T5643] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.867: mark_inode_dirty error [ 67.670214][ T5643] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.867: mark inode dirty (error -117) [ 67.670682][ T2487] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.683279][ T5643] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 67.700333][ T5643] EXT4-fs (loop0): 1 orphan inode deleted [ 67.706685][ T5643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.716417][ T2487] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.735161][ T2487] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.743849][ T2487] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.766192][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.813729][ T5652] loop0: detected capacity change from 0 to 512 [ 67.820548][ T5652] EXT4-fs: Ignoring removed nobh option [ 67.826542][ T5652] EXT4-fs: old and new quota format mixing [ 67.867021][ T5656] netlink: 76 bytes leftover after parsing attributes in process `syz.5.873'. [ 68.193328][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.882'. [ 68.634832][ T5702] loop1: detected capacity change from 0 to 2048 [ 68.703499][ T5702] loop1: p1 p3 [ 68.708392][ T5702] loop1: p3 start 8388352 is beyond EOD, truncated [ 68.940049][ T5723] netlink: 'syz.5.904': attribute type 29 has an invalid length. [ 69.409207][ T5776] loop3: detected capacity change from 0 to 4096 [ 69.415923][ T5776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.427490][ T5776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.475000][ T5780] ip6gre1: entered allmulticast mode [ 69.829967][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.093758][ T5795] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.167794][ T5807] uprobe: syz.0.936:5807 failed to unregister, leaking uprobe [ 70.299031][ T5827] loop0: detected capacity change from 0 to 1024 [ 70.305781][ T5827] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.314805][ T5827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.368590][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.592993][ T5861] ipip0: entered promiscuous mode [ 70.631286][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 70.631304][ T29] audit: type=1400 audit(1767659512.948:1359): avc: denied { create } for pid=5862 comm="syz.5.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.659050][ T29] audit: type=1400 audit(1767659512.978:1360): avc: denied { read } for pid=5862 comm="syz.5.964" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.682014][ T29] audit: type=1400 audit(1767659512.978:1361): avc: denied { open } for pid=5862 comm="syz.5.964" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.735510][ T29] audit: type=1326 audit(1767659513.058:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.766252][ T5868] loop1: detected capacity change from 0 to 512 [ 70.802806][ T29] audit: type=1326 audit(1767659513.088:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.827051][ T29] audit: type=1326 audit(1767659513.088:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.851108][ T29] audit: type=1326 audit(1767659513.088:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.874605][ T29] audit: type=1326 audit(1767659513.088:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.898030][ T29] audit: type=1326 audit(1767659513.088:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.921482][ T29] audit: type=1326 audit(1767659513.088:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f3c5ff749 code=0x7ffc0000 [ 70.955750][ T5868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.973641][ T5868] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.007116][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.035769][ T5889] netlink: 'syz.5.975': attribute type 3 has an invalid length. [ 71.106440][ T5902] __nla_validate_parse: 7 callbacks suppressed [ 71.106457][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 71.289934][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.989'. [ 71.299742][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.989'. [ 71.395850][ T5937] loop2: detected capacity change from 0 to 512 [ 71.402719][ T5937] EXT4-fs: Ignoring removed nobh option [ 71.408895][ T5937] EXT4-fs: old and new quota format mixing [ 71.602084][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'. [ 71.611226][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 71.620421][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'. [ 71.638563][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 71.671218][ T5963] loop0: detected capacity change from 0 to 1024 [ 71.683684][ T5963] EXT4-fs: Ignoring removed orlov option [ 71.694725][ T5963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.731060][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.796107][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 71.806042][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 71.825836][ T5971] uprobe: syz.2.1009:5971 failed to unregister, leaking uprobe [ 71.858447][ T5983] loop1: detected capacity change from 0 to 512 [ 71.868229][ T5983] EXT4-fs: Ignoring removed nobh option [ 71.878499][ T5983] EXT4-fs: old and new quota format mixing [ 71.913403][ T5986] loop3: detected capacity change from 0 to 2048 [ 71.955896][ T5986] Alternate GPT is invalid, using primary GPT. [ 71.962334][ T5986] loop3: p2 p3 p7 [ 72.863735][ T6073] uprobe: syz.5.1051:6073 failed to unregister, leaking uprobe [ 73.159617][ T6096] loop5: detected capacity change from 0 to 256 [ 73.329044][ T6109] loop3: detected capacity change from 0 to 512 [ 73.336065][ T6109] EXT4-fs: dax option not supported [ 73.402932][ T6115] loop0: detected capacity change from 0 to 512 [ 73.432815][ T6115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.468918][ T6115] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.542318][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.579918][ T6126] netlink: 'syz.0.1077': attribute type 21 has an invalid length. [ 73.589699][ T6126] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1077'. [ 73.682738][ T6132] all: renamed from team_slave_0 (while UP) [ 73.739004][ T6136] loop1: detected capacity change from 0 to 512 [ 73.771126][ T6136] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.780339][ T6136] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 73.819839][ T6136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 73.828281][ T6136] System zones: 0-2, 18-18, 34-35 [ 73.834214][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.873889][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.913194][ T6148] capability: warning: `syz.0.1087' uses deprecated v2 capabilities in a way that may be insecure [ 73.979609][ T6154] team1: entered promiscuous mode [ 73.984957][ T6154] team1: entered allmulticast mode [ 73.993277][ T6154] 8021q: adding VLAN 0 to HW filter on device team1 [ 74.098189][ T6167] loop2: detected capacity change from 0 to 1024 [ 74.115009][ T6167] EXT4-fs: Ignoring removed orlov option [ 74.144233][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.166959][ T6174] GUP no longer grows the stack in syz.0.1098 (6174): 200000004000-20000000a000 (200000002000) [ 74.177442][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.0.1098 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.177479][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.177500][ T6174] Call Trace: [ 74.177511][ T6174] [ 74.177521][ T6174] __dump_stack+0x1d/0x30 [ 74.177578][ T6174] dump_stack_lvl+0x95/0xd0 [ 74.177625][ T6174] dump_stack+0x15/0x1b [ 74.177651][ T6174] __get_user_pages+0x1979/0x1ed0 [ 74.177700][ T6174] ? __rcu_read_unlock+0x4f/0x70 [ 74.177803][ T6174] get_user_pages_remote+0x1d5/0x6c0 [ 74.177913][ T6174] __access_remote_vm+0x15c/0x590 [ 74.177959][ T6174] access_remote_vm+0x32/0x40 [ 74.178067][ T6174] proc_pid_cmdline_read+0x32b/0x6c0 [ 74.178137][ T6174] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 74.178170][ T6174] vfs_readv+0x3fb/0x690 [ 74.178218][ T6174] __x64_sys_preadv+0xfd/0x1c0 [ 74.178304][ T6174] x64_sys_call+0x2805/0x3000 [ 74.178337][ T6174] do_syscall_64+0xca/0x2b0 [ 74.178377][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.178402][ T6174] RIP: 0033:0x7f04cac9f749 [ 74.178448][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.178465][ T6174] RSP: 002b:00007f04c96ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 74.178486][ T6174] RAX: ffffffffffffffda RBX: 00007f04caef5fa0 RCX: 00007f04cac9f749 [ 74.178502][ T6174] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.178518][ T6174] RBP: 00007f04cad23f91 R08: 0000000000000000 R09: 0000000000000000 [ 74.178534][ T6174] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 74.178549][ T6174] R13: 00007f04caef6038 R14: 00007f04caef5fa0 R15: 00007ffc6f81b3b8 [ 74.178575][ T6174] [ 74.431550][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.469510][ T6185] netlink: '+}[@': attribute type 1 has an invalid length. [ 74.568745][ T6206] loop5: detected capacity change from 0 to 1024 [ 74.576038][ T6206] EXT4-fs: Ignoring removed orlov option [ 74.593639][ T6206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.627711][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.669956][ T6218] loop3: detected capacity change from 0 to 1024 [ 74.677279][ T6218] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.688510][ T6218] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.699027][ T6218] JBD2: no valid journal superblock found [ 74.704846][ T6218] EXT4-fs (loop3): Could not load journal inode [ 74.717400][ T6218] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 74.740937][ T6221] loop2: detected capacity change from 0 to 2048 [ 74.761859][ T6225] loop3: detected capacity change from 0 to 512 [ 74.768350][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.790986][ T6221] pimreg: entered allmulticast mode [ 74.805775][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.818465][ T6225] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.848528][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.862069][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.894335][ T6241] loop1: detected capacity change from 0 to 1024 [ 74.910172][ T6241] EXT4-fs: Ignoring removed orlov option [ 74.918252][ T6241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.961850][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.100204][ T6256] EXT4-fs: dax option not supported [ 75.405429][ T6289] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.431027][ T6292] EXT4-fs: Ignoring removed orlov option [ 75.439416][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.471507][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.494380][ T3578] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.631912][ T6319] geneve2: entered promiscuous mode [ 75.637351][ T6319] geneve2: entered allmulticast mode [ 75.675230][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 75.675245][ T29] audit: type=1326 audit(1767659517.998:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.715267][ T29] audit: type=1326 audit(1767659518.028:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.738778][ T29] audit: type=1326 audit(1767659518.028:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.762262][ T29] audit: type=1326 audit(1767659518.028:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.786363][ T29] audit: type=1326 audit(1767659518.068:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.809843][ T29] audit: type=1326 audit(1767659518.068:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.815289][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.833755][ T29] audit: type=1326 audit(1767659518.068:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.841119][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.864538][ T29] audit: type=1326 audit(1767659518.108:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.872295][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.903318][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.910997][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.918777][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.926538][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.934339][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.942013][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.949755][ T3391] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 75.959530][ T3391] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.970535][ T29] audit: type=1326 audit(1767659518.108:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 75.994130][ T29] audit: type=1326 audit(1767659518.108:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.5.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6765f9f749 code=0x7ffc0000 [ 76.187230][ T6349] netlink: 'syz.0.1176': attribute type 2 has an invalid length. [ 76.243952][ T6354] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1178: error while reading EA inode 32 err=-116 [ 76.256971][ T6354] EXT4-fs (loop5): Remounting filesystem read-only [ 76.263601][ T6354] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 76.274201][ T6354] EXT4-fs (loop5): 1 orphan inode deleted [ 76.280446][ T6354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.313889][ T3696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.417110][ T6381] __nla_validate_parse: 5 callbacks suppressed [ 76.417129][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'. [ 76.493798][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 76.503578][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 76.533510][ T6393] program syz.5.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.700475][ T6406] SELinux: failed to load policy [ 76.724256][ T6414] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 76.732053][ T6414] netlink: 'syz.3.1204': attribute type 4 has an invalid length. [ 76.739960][ T6414] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1204'. [ 76.793724][ T6422] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 76.801771][ T6422] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 76.870201][ T6431] SELinux: failed to load policy [ 76.875889][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1209'. [ 77.644144][ T6479] chnl_net:caif_netlink_parms(): no params data found [ 77.689612][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.696889][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.704156][ T6479] bridge_slave_0: entered allmulticast mode [ 77.711004][ T6479] bridge_slave_0: entered promiscuous mode [ 77.718122][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.725272][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.732801][ T6479] bridge_slave_1: entered allmulticast mode [ 77.739545][ T6479] bridge_slave_1: entered promiscuous mode [ 77.761104][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.772067][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.802315][ T6479] team0: Port device team_slave_0 added [ 77.814199][ T6479] team0: Port device team_slave_1 added [ 77.858143][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.865289][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.891263][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.908459][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.915485][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.941673][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.973988][ T6479] hsr_slave_0: entered promiscuous mode [ 77.980287][ T6479] hsr_slave_1: entered promiscuous mode [ 77.986540][ T6479] debugfs: 'hsr0' already exists in 'hsr' [ 77.992292][ T6479] Cannot create hsr debugfs directory [ 78.035080][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 78.075483][ T6519] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 78.134103][ T6479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.146222][ T6479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.155771][ T6479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.170884][ T6479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.221363][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.228582][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.236171][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.243344][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.310147][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.347899][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.360781][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.381123][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.403721][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.410859][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.434015][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.441204][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.514888][ T6479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.525550][ T6479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.597738][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.739235][ T6479] veth0_vlan: entered promiscuous mode [ 78.747125][ T6479] veth1_vlan: entered promiscuous mode [ 78.762574][ T6479] veth0_macvtap: entered promiscuous mode [ 78.770713][ T6479] veth1_macvtap: entered promiscuous mode [ 78.782096][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.794714][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.806225][ T3578] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827995][ T3578] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.841466][ T3578] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.852077][ T3578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.912124][ T6585] geneve2: entered promiscuous mode [ 78.917436][ T6585] geneve2: entered allmulticast mode [ 79.157342][ T6598] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 79.489424][ T6636] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.567886][ T6636] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.614885][ T6636] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.646754][ T6645] set_capacity_and_notify: 5 callbacks suppressed [ 79.646769][ T6645] loop3: detected capacity change from 0 to 4096 [ 79.662578][ T6645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.676267][ T6645] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 79.687132][ T6636] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.701147][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.792000][ T3536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.818466][ T3536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.831396][ T3536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.848351][ T3536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.974735][ T6661] loop2: detected capacity change from 0 to 164 [ 80.005103][ T6661] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.026516][ T6663] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.049483][ T6666] x_tables: duplicate underflow at hook 1 [ 80.111376][ T6663] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.148103][ T3536] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.158062][ T3536] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.218483][ T6663] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.239467][ T6679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6679 comm=syz.2.1303 [ 80.252277][ T6679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6679 comm=syz.2.1303 [ 80.277082][ T3536] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.286965][ T3536] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.345658][ T6663] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.407029][ T3536] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.416989][ T3536] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.476563][ T3578] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.501612][ T3536] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.511523][ T3536] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.535160][ T3578] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.567339][ T3578] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.604886][ T3578] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.613914][ T3536] bridge_slave_1: left allmulticast mode [ 80.619636][ T3536] bridge_slave_1: left promiscuous mode [ 80.625523][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.671784][ T3536] bridge_slave_0: left allmulticast mode [ 80.677627][ T3536] bridge_slave_0: left promiscuous mode [ 80.683465][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.735017][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 80.735034][ T29] audit: type=1326 audit(1767659523.058:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 80.802301][ T6703] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 80.818791][ T29] audit: type=1326 audit(1767659523.088:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 80.842312][ T29] audit: type=1326 audit(1767659523.088:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 80.971675][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.982243][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.997350][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 81.006499][ T3536] bond0 (unregistering): Released all slaves [ 81.040834][ T6715] loop0: detected capacity change from 0 to 512 [ 81.048528][ T6715] EXT4-fs: Ignoring removed orlov option [ 81.054340][ T6715] EXT4-fs: test_dummy_encryption option not supported [ 81.055758][ T6717] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.077358][ T3536] hsr_slave_0: left promiscuous mode [ 81.088843][ T3536] hsr_slave_1: left promiscuous mode [ 81.096061][ T29] audit: type=1400 audit(1767659523.418:1673): avc: denied { read } for pid=6718 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.099082][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.124113][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.132460][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.140237][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.153874][ T3536] veth1_macvtap: left promiscuous mode [ 81.159616][ T3536] veth0_macvtap: left promiscuous mode [ 81.203708][ T29] audit: type=1400 audit(1767659523.528:1674): avc: denied { setopt } for pid=6727 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.258911][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 81.270019][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 81.362099][ T29] audit: type=1326 audit(1767659523.678:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 81.388716][ T6734] loop3: detected capacity change from 0 to 2048 [ 81.405804][ T29] audit: type=1326 audit(1767659523.708:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 81.429238][ T29] audit: type=1326 audit(1767659523.708:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 81.452728][ T29] audit: type=1326 audit(1767659523.708:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 81.476166][ T29] audit: type=1326 audit(1767659523.708:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f04cac9f749 code=0x7ffc0000 [ 81.479768][ T6734] Alternate GPT is invalid, using primary GPT. [ 81.505986][ T6734] loop3: p1 p2 p3 [ 81.509739][ T6734] loop3: partition table partially beyond EOD, truncated [ 81.642990][ T6755] loop6: detected capacity change from 0 to 1024 [ 81.649778][ T6755] EXT4-fs: inline encryption not supported [ 81.668033][ T6755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.687735][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1339'. [ 81.711323][ T6755] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 81.727003][ T6755] EXT4-fs (loop6): Remounting filesystem read-only [ 81.759898][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.844993][ T6781] loop3: detected capacity change from 0 to 1024 [ 81.851709][ T6781] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 81.876213][ T6780] loop2: detected capacity change from 0 to 512 [ 81.896666][ T6780] EXT4-fs (loop2): 1 orphan inode deleted [ 81.903051][ T6780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.915923][ T3545] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 1 [ 81.916381][ T6780] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.962835][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.059369][ T6805] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.109873][ T6812] netlink: 'syz.2.1360': attribute type 3 has an invalid length. [ 82.123868][ T6815] netlink: 'syz.1.1361': attribute type 29 has an invalid length. [ 82.136253][ T6805] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.195459][ T6805] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.285551][ T6805] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.350817][ T3593] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.376057][ T3593] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.402752][ T3593] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428823][ T3593] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.793288][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 82.847019][ T6866] loop0: detected capacity change from 0 to 1024 [ 82.853945][ T6866] EXT4-fs: test_dummy_encryption option not supported [ 82.862603][ T6860] loop6: detected capacity change from 0 to 8192 [ 83.080649][ T6895] macvtap0: refused to change device tx_queue_len [ 83.102431][ T6876] loop2: detected capacity change from 0 to 1024 [ 83.109537][ T6876] EXT4-fs: inline encryption not supported [ 83.115413][ T6876] EXT4-fs: Ignoring removed orlov option [ 83.123292][ T6876] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 83.164946][ T6876] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc018, mo2=0002] [ 83.189013][ T6876] System zones: 0-1, 3-12 [ 83.201266][ T6876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.275156][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.316212][ T6913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.336178][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.349367][ T6913] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.367865][ T6918] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1405'. [ 83.388364][ T6913] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1404: corrupted inode contents [ 83.424246][ T6913] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.1404: mark_inode_dirty error [ 83.455667][ T6913] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1404: corrupted inode contents [ 83.492971][ T6913] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.1404: mark_inode_dirty error [ 83.505270][ T6913] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.1404: mark inode dirty (error -117) [ 83.518749][ T6913] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 83.564061][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.237154][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'. [ 84.246338][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'. [ 84.354576][ T7006] Alternate GPT is invalid, using primary GPT. [ 84.361060][ T7006] loop2: p1 p2 p3 [ 84.364867][ T7006] loop2: partition table partially beyond EOD, truncated [ 84.397710][ T7012] pim6reg: entered allmulticast mode [ 84.405459][ T7012] pim6reg: left allmulticast mode [ 84.429408][ T7014] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 84.459546][ T7014] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.1448: invalid block [ 84.476674][ T7014] EXT4-fs (loop6): Remounting filesystem read-only [ 84.483788][ T7014] EXT4-fs (loop6): 1 truncate cleaned up [ 84.490170][ T7014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.546004][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.683718][ T7040] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.694419][ T7038] set_capacity_and_notify: 4 callbacks suppressed [ 84.694435][ T7038] loop3: detected capacity change from 0 to 512 [ 84.716451][ T7041] pim6reg: entered allmulticast mode [ 84.725998][ T7044] netlink: 14 bytes leftover after parsing attributes in process `ÿ'. [ 84.740730][ T7044] hsr_slave_0: left promiscuous mode [ 84.747287][ T7044] hsr_slave_1: left promiscuous mode [ 84.759218][ T7041] pim6reg: left allmulticast mode [ 84.777584][ T7040] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.789753][ T7038] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1460: inode has both inline data and extents flags [ 84.804314][ T7038] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1460: couldn't read orphan inode 15 (err -117) [ 84.817104][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.875849][ T7040] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.923298][ T7047] loop3: detected capacity change from 512 to 0 [ 84.929858][ C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 84.939754][ T7038] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.3.1460: unable to read itable block [ 84.942014][ T7040] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.953649][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 84.970901][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 84.977715][ T7038] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 84.986922][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 84.995556][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.002372][ T7038] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.1460: mark_inode_dirty error [ 85.013744][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.022001][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.028927][ T7038] Buffer I/O error on dev loop3, logical block 37, lost sync page write [ 85.037391][ T7038] EXT4-fs error (device loop3): ext4_free_data:978: inode #18: block 37: comm syz.3.1460: IO error syncing itable block [ 85.050280][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.058670][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.065832][ T7038] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.3.1460: unable to read itable block [ 85.078748][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.087112][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.093059][ T3536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.094001][ T7038] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 85.094125][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.119449][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.126317][ T7038] EXT4-fs error (device loop3): ext4_truncate:4635: inode #18: comm syz.3.1460: mark_inode_dirty error [ 85.137755][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.143532][ T3536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154418][ T3536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.162639][ T3536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.165676][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.183474][ T7038] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.3.1460: unable to read itable block [ 85.196591][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.205020][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.211834][ T7038] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 85.220764][ T7038] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 85.229188][ T7038] EXT4-fs (loop3): I/O error while writing superblock [ 85.236009][ T7038] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.1460: mark_inode_dirty error [ 85.248264][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 85.259550][ T7038] Buffer I/O error on device loop3, logical block 41 [ 85.266349][ T7038] Buffer I/O error on device loop3, logical block 42 [ 85.273060][ T7038] Buffer I/O error on device loop3, logical block 43 [ 85.279776][ T7038] Buffer I/O error on device loop3, logical block 44 [ 85.286711][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 85.298020][ T7038] Buffer I/O error on device loop3, logical block 49 [ 85.304711][ T7038] Buffer I/O error on device loop3, logical block 50 [ 85.311442][ T7038] Buffer I/O error on device loop3, logical block 51 [ 85.318153][ T7038] Buffer I/O error on device loop3, logical block 52 [ 85.325075][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 85.336325][ T7038] Buffer I/O error on device loop3, logical block 57 [ 85.343032][ T7038] Buffer I/O error on device loop3, logical block 58 [ 85.349867][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 85.361104][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 85.372499][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 85.383807][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 85.395154][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 85.406556][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 85.417868][ T7038] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 85.506977][ T7057] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1467'. [ 85.578893][ T7062] loop1: detected capacity change from 0 to 2048 [ 85.600801][ T7062] EXT4-fs (loop1): failed to initialize system zone (-117) [ 85.608338][ T7062] EXT4-fs (loop1): mount failed [ 85.615816][ T7069] syz_tun: entered allmulticast mode [ 85.631364][ T7069] syz_tun: left allmulticast mode [ 85.727578][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 85.747832][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 85.747849][ T29] audit: type=1400 audit(1767659528.068:1859): avc: denied { create } for pid=7091 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.781026][ T29] audit: type=1400 audit(1767659528.098:1860): avc: denied { create } for pid=7093 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.807251][ T29] audit: type=1400 audit(1767659528.098:1861): avc: denied { read } for pid=7093 comm="syz.0.1484" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.828563][ T29] audit: type=1400 audit(1767659528.098:1862): avc: denied { open } for pid=7093 comm="syz.0.1484" path="cgroup:[4026532387]" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.845335][ T7092] dvmrp8: entered allmulticast mode [ 85.852271][ T29] audit: type=1400 audit(1767659528.128:1863): avc: denied { setopt } for pid=7091 comm="syz.2.1483" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.906513][ T7102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7102 comm=syz.0.1488 [ 85.913930][ T29] audit: type=1400 audit(1767659528.218:1864): avc: denied { create } for pid=7101 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.919183][ T7102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7102 comm=syz.0.1488 [ 85.938406][ T29] audit: type=1400 audit(1767659528.218:1865): avc: denied { write } for pid=7101 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.975114][ T29] audit: type=1400 audit(1767659528.298:1866): avc: denied { create } for pid=7105 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.004849][ T29] audit: type=1400 audit(1767659528.298:1867): avc: denied { setopt } for pid=7105 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.024518][ T29] audit: type=1400 audit(1767659528.318:1868): avc: denied { write } for pid=7105 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.052128][ T7109] loop1: detected capacity change from 0 to 512 [ 86.069963][ T7109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.081926][ T7109] EXT4-fs (loop1): 1 truncate cleaned up [ 86.088265][ T7109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.122647][ T7111] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 86.131116][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.142139][ T7111] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 86.218614][ T7126] serio: Serial port ttyS3 [ 86.234528][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1500'. [ 86.281016][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 86.335884][ T7136] pim6reg: entered allmulticast mode [ 86.353821][ T7136] pim6reg: left allmulticast mode [ 86.467337][ T7144] loop6: detected capacity change from 0 to 256 [ 86.843423][ T7171] __nla_validate_parse: 5 callbacks suppressed [ 86.843440][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1517'. [ 86.926470][ T7180] sctp: [Deprecated]: syz.6.1521 (pid 7180) Use of int in maxseg socket option. [ 86.926470][ T7180] Use struct sctp_assoc_value instead [ 86.960854][ T7185] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1524'. [ 86.987797][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 87.118029][ T7208] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1534'. [ 87.319044][ T7233] xt_hashlimit: size too large, truncated to 1048576 [ 87.466436][ T7244] loop6: detected capacity change from 0 to 512 [ 87.496533][ T7244] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.513040][ T7244] EXT4-fs (loop6): mount failed [ 87.536317][ T7253] netlink: 14 bytes leftover after parsing attributes in process `ÿ'. [ 87.541744][ T7251] hub 6-0:1.0: USB hub found [ 87.549384][ T7253] hsr_slave_0: left promiscuous mode [ 87.549476][ T7251] hub 6-0:1.0: 8 ports detected [ 87.559906][ T7253] hsr_slave_1: left promiscuous mode [ 87.606236][ T2487] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.646968][ T7258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1554'. [ 87.679872][ T2487] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.747708][ T2487] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.771832][ T7271] loop2: detected capacity change from 0 to 2048 [ 87.817509][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.849546][ T2487] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.978988][ T7290] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.980080][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 88.003885][ T7290] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.016197][ T7290] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.016197][ T7290] [ 88.025957][ T7290] EXT4-fs (loop2): Total free blocks count 0 [ 88.031965][ T7290] EXT4-fs (loop2): Free/Dirty block details [ 88.037932][ T7290] EXT4-fs (loop2): free_blocks=2415919104 [ 88.043708][ T7290] EXT4-fs (loop2): dirty_blocks=32 [ 88.048848][ T7290] EXT4-fs (loop2): Block reservation details [ 88.054882][ T7290] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 88.082288][ T2487] bridge_slave_1: left allmulticast mode [ 88.088648][ T2487] bridge_slave_1: left promiscuous mode [ 88.094341][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.105176][ T7270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 32 with error 28 [ 88.123818][ T7290] syz.2.1559 (7290) used greatest stack depth: 9352 bytes left [ 88.133692][ T2487] bridge_slave_0: left allmulticast mode [ 88.139409][ T2487] bridge_slave_0: left promiscuous mode [ 88.145206][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.244821][ T7303] loop6: detected capacity change from 0 to 512 [ 88.258793][ T7303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.293945][ T7303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.306854][ T7303] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.321696][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1568'. [ 88.408922][ T7310] loop2: detected capacity change from 0 to 512 [ 88.415691][ T7310] EXT4-fs: Ignoring removed nobh option [ 88.421706][ T7310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.437718][ T7310] EXT4-fs (loop2): 1 truncate cleaned up [ 88.444010][ T7310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.456466][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.483546][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.493778][ T2487] bond0 (unregistering): Released all slaves [ 88.562485][ T7321] loop0: detected capacity change from 0 to 512 [ 88.562580][ T2487] hsr_slave_0: left promiscuous mode [ 88.579857][ T7321] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1572: inode has both inline data and extents flags [ 88.596128][ T2487] hsr_slave_1: left promiscuous mode [ 88.599926][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.611086][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.618544][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.626279][ T7321] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1572: couldn't read orphan inode 15 (err -117) [ 88.639933][ T7321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.653533][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.661129][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.668940][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.693832][ T2487] veth1_macvtap: left promiscuous mode [ 88.699412][ T2487] veth0_macvtap: left promiscuous mode [ 88.705193][ T2487] veth1_vlan: left promiscuous mode [ 88.710840][ T2487] veth0_vlan: left promiscuous mode [ 88.775721][ T7321] EXT4-fs error (device loop0): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.0.1572: unable to read itable block [ 88.775750][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 88.794337][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 88.805279][ T7321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: IO failure [ 88.823165][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 88.830062][ T7321] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.1572: mark_inode_dirty error [ 88.846558][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 88.857100][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 88.874303][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 88.897076][ T7321] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.1572: Error while async write back metadata [ 88.922015][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 88.933237][ T7321] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.1572: Error while async write back metadata [ 88.947494][ T7341] bridge0: entered promiscuous mode [ 88.955117][ T7341] bridge0: port 3(macvtap1) entered blocking state [ 88.961732][ T7341] bridge0: port 3(macvtap1) entered disabled state [ 88.968498][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 88.975623][ T7341] macvtap1: entered allmulticast mode [ 88.981052][ T7341] bridge0: entered allmulticast mode [ 88.986584][ T7321] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.1572: Error while async write back metadata [ 89.000131][ T7341] macvtap1: left allmulticast mode [ 89.005601][ T7341] bridge0: left allmulticast mode [ 89.010777][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 89.017711][ T7321] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 37: comm syz.0.1572: IO error syncing itable block [ 89.031319][ T7341] bridge0: left promiscuous mode [ 89.032227][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 89.043379][ T7321] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.1572: Error while async write back metadata [ 89.056287][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 89.063263][ T7321] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.1572: Error while async write back metadata [ 89.076094][ T7321] EXT4-fs (loop0): I/O error while writing superblock [ 89.083168][ T7321] EXT4-fs error (device loop0): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.0.1572: unable to read itable block [ 89.096558][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 89.108746][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.115952][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.123519][ T7261] bridge_slave_0: entered allmulticast mode [ 89.130125][ T7261] bridge_slave_0: entered promiscuous mode [ 89.136261][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 89.148481][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.155587][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.162835][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 89.174944][ T7261] bridge_slave_1: entered allmulticast mode [ 89.181551][ T7261] bridge_slave_1: entered promiscuous mode [ 89.187644][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 89.215128][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.226595][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.235926][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 89.252173][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 89.273227][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 89.291863][ T7261] team0: Port device team_slave_0 added [ 89.298941][ T7261] team0: Port device team_slave_1 added [ 89.306451][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.316595][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 89.328265][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.337618][ T7321] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 89.360758][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.367933][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.393872][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.411516][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1587'. [ 89.425183][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.432196][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.458489][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.495754][ T2487] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.534937][ T7261] hsr_slave_0: entered promiscuous mode [ 89.541475][ T7261] hsr_slave_1: entered promiscuous mode [ 89.563570][ T2487] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.619993][ T2487] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.676297][ T2487] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.714081][ T7261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 89.724736][ T7261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 89.742055][ T7261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 89.759554][ T7261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 89.776170][ T2487] bridge_slave_1: left allmulticast mode [ 89.781919][ T2487] bridge_slave_1: left promiscuous mode [ 89.787729][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.796106][ T2487] bridge_slave_0: left allmulticast mode [ 89.801826][ T2487] bridge_slave_0: left promiscuous mode [ 89.807773][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.955601][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.965935][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.994360][ T2487] bond0 (unregistering): Released all slaves [ 90.080314][ T2487] hsr_slave_0: left promiscuous mode [ 90.086376][ T2487] hsr_slave_1: left promiscuous mode [ 90.092087][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.099566][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.111807][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.119365][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.134706][ T7395] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.149324][ T2487] veth1_macvtap: left promiscuous mode [ 90.155072][ T2487] veth0_macvtap: left promiscuous mode [ 90.160828][ T2487] veth1_vlan: left promiscuous mode [ 90.166546][ T2487] veth0_vlan: left promiscuous mode [ 90.252953][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 90.263742][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 90.343422][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.357070][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.367112][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.374235][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.407583][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.414784][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.442899][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 90.521104][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.531602][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.558556][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.565714][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.576355][ T7360] bridge_slave_0: entered allmulticast mode [ 90.600946][ T7360] bridge_slave_0: entered promiscuous mode [ 90.628416][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.635615][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.663646][ T7360] bridge_slave_1: entered allmulticast mode [ 90.670305][ T7360] bridge_slave_1: entered promiscuous mode [ 90.721445][ T23] hid_parser_main: 22 callbacks suppressed [ 90.721553][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.740233][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.756382][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.765992][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.787559][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 90.787576][ T29] audit: type=1400 audit(1767659533.108:2084): avc: denied { create } for pid=7447 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.815786][ T7360] team0: Port device team_slave_0 added [ 90.823457][ T7360] team0: Port device team_slave_1 added [ 90.851538][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.858575][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.884593][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.896711][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.903742][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.929707][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.951461][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.989623][ T7360] hsr_slave_0: entered promiscuous mode [ 90.992170][ T7454] set_capacity_and_notify: 1 callbacks suppressed [ 90.992211][ T7454] loop2: detected capacity change from 0 to 2048 [ 90.997844][ T7360] hsr_slave_1: entered promiscuous mode [ 91.014640][ T7360] debugfs: 'hsr0' already exists in 'hsr' [ 91.020389][ T7360] Cannot create hsr debugfs directory [ 91.035999][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.074627][ T7454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.089757][ T7454] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 91.102106][ T7454] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.102106][ T7454] [ 91.111864][ T7454] EXT4-fs (loop2): Total free blocks count 0 [ 91.117945][ T7454] EXT4-fs (loop2): Free/Dirty block details [ 91.123950][ T7454] EXT4-fs (loop2): free_blocks=2415919104 [ 91.129789][ T7454] EXT4-fs (loop2): dirty_blocks=32 [ 91.134970][ T7454] EXT4-fs (loop2): Block reservation details [ 91.140983][ T7454] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 91.203378][ T3554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.223701][ T7360] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.243694][ T7360] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.257797][ T7360] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.274778][ T7360] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.296048][ T7261] veth0_vlan: entered promiscuous mode [ 91.321514][ T7261] veth1_vlan: entered promiscuous mode [ 91.360806][ T7261] veth0_macvtap: entered promiscuous mode [ 91.377527][ T7261] veth1_macvtap: entered promiscuous mode [ 91.393056][ T29] audit: type=1326 audit(1767659533.708:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.430029][ T29] audit: type=1326 audit(1767659533.708:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.435666][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.453977][ T29] audit: type=1326 audit(1767659533.738:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.479358][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.484344][ T29] audit: type=1326 audit(1767659533.738:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.484379][ T29] audit: type=1326 audit(1767659533.738:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.534327][ T2487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.538882][ T29] audit: type=1326 audit(1767659533.738:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.561428][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.571176][ T29] audit: type=1326 audit(1767659533.738:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.601362][ T29] audit: type=1326 audit(1767659533.738:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.610189][ T2487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.624853][ T29] audit: type=1326 audit(1767659533.738:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1165dff749 code=0x7ffc0000 [ 91.670335][ T7482] loop2: detected capacity change from 0 to 2048 [ 91.681757][ T2487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700236][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.718079][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.725279][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.734954][ T7482] Alternate GPT is invalid, using primary GPT. [ 91.741418][ T7482] loop2: p1 p2 p3 [ 91.745257][ T7482] loop2: partition table partially beyond EOD, truncated [ 91.758935][ T2487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.778093][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785267][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.879389][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.957795][ T7515] netlink: 'syz.6.1634': attribute type 298 has an invalid length. [ 92.058272][ T7528] loop1: detected capacity change from 0 to 1024 [ 92.091553][ T7360] veth0_vlan: entered promiscuous mode [ 92.100390][ T7360] veth1_vlan: entered promiscuous mode [ 92.110910][ T7528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.138610][ T7360] veth0_macvtap: entered promiscuous mode [ 92.139497][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 92.154970][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.162391][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.170844][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.178355][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.191430][ T7360] veth1_macvtap: entered promiscuous mode [ 92.209912][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.230603][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.242297][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.255585][ T3536] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.279154][ T3536] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300695][ T7544] bridge0: port 3(batadv1) entered blocking state [ 92.307362][ T7544] bridge0: port 3(batadv1) entered disabled state [ 92.339209][ T7544] batadv1: entered allmulticast mode [ 92.352071][ T7544] batadv1: entered promiscuous mode [ 92.366033][ T3536] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.395407][ T3536] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.411327][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1590'. [ 92.423645][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1590'. [ 92.439492][ T7555] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.460479][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1590'. [ 92.471257][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1590'. [ 92.513838][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.521423][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.528894][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.536359][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.543890][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.551308][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.558796][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.566549][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.574189][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.586720][ T3487] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.620776][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1652'. [ 92.790320][ T7589] loop8: detected capacity change from 0 to 128 [ 92.796936][ T3593] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 92.806352][ T3593] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 92.820384][ T7589] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.833990][ T7589] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.846504][ T7590] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.855332][ T7590] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.912996][ T7360] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.942557][ T7595] hub 2-0:1.0: USB hub found [ 92.952128][ T7595] hub 2-0:1.0: 8 ports detected [ 93.223714][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1682'. [ 93.232764][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1682'. [ 93.423649][ T7651] capability: warning: `syz.6.1689' uses 32-bit capabilities (legacy support in use) [ 93.498168][ T7663] loop6: detected capacity change from 0 to 1024 [ 93.505898][ T7663] EXT4-fs: Ignoring removed nobh option [ 93.529112][ T7663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.568776][ T7674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.588174][ T7663] EXT4-fs (loop6): pa ffff888107edc770: logic 1, phys. 129, len 4 [ 93.596141][ T7663] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 93.607504][ T7663] EXT4-fs (loop6): Remounting filesystem read-only [ 93.614700][ T7663] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1606: inode #19: comm syz.6.1696: cleanup dec ref error -30 [ 93.641441][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.857475][ T7695] loop1: detected capacity change from 0 to 512 [ 93.885047][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.898718][ T7695] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.990652][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.017954][ T7702] loop1: detected capacity change from 0 to 512 [ 94.033728][ T7702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.048781][ T7702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.061868][ T7702] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.250187][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.557489][ T7753] 9p: Bad value for 'rfdno' [ 94.607342][ T7763] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 94.723705][ T7777] netem: change failed [ 94.761131][ T7784] tipc: Started in network mode [ 94.766198][ T7784] tipc: Node identity ac14140f, cluster identity 4711 [ 94.793858][ T7784] tipc: New replicast peer: 255.255.255.83 [ 94.799990][ T7784] tipc: Enabled bearer , priority 10 [ 94.938317][ T7815] loop8: detected capacity change from 0 to 512 [ 94.954341][ T7816] netlink: 'syz.7.1761': attribute type 6 has an invalid length. [ 94.955061][ T7815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.982724][ T7816] bond1 (unregistering): Released all slaves [ 94.991783][ T7820] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 94.998149][ T7815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.014476][ T7815] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.246431][ T7834] loop1: detected capacity change from 0 to 8192 [ 95.302620][ T7840] loop7: detected capacity change from 0 to 512 [ 95.315499][ T7840] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1772: inode has both inline data and extents flags [ 95.329806][ T7840] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1772: couldn't read orphan inode 15 (err -117) [ 95.342632][ T7840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.344497][ T7360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.391247][ T7261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.513647][ T7868] serio: Serial port ptm0 [ 95.560073][ T3397] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.669727][ T7868] serio: Serial port ptm0 [ 95.751942][ T7899] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 95.816929][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 95.816945][ T29] audit: type=1400 audit(1767659538.138:2327): avc: denied { name_bind } for pid=7905 comm="syz.8.1804" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.877743][ T29] audit: type=1400 audit(1767659538.198:2328): avc: denied { read write } for pid=7914 comm="syz.6.1806" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.901590][ T29] audit: type=1400 audit(1767659538.198:2329): avc: denied { open } for pid=7914 comm="syz.6.1806" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.933481][ T3500] tipc: Node number set to 2886997007 [ 95.946969][ T29] audit: type=1400 audit(1767659538.268:2330): avc: denied { read } for pid=7918 comm="syz.6.1809" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.971312][ T29] audit: type=1400 audit(1767659538.268:2331): avc: denied { open } for pid=7918 comm="syz.6.1809" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.996844][ T29] audit: type=1400 audit(1767659538.318:2332): avc: denied { ioctl } for pid=7918 comm="syz.6.1809" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.031483][ T7921] binfmt_misc: register: failed to install interpreter file ./file0 [ 96.227856][ T29] audit: type=1326 audit(1767659538.548:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.8.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1960f749 code=0x7ffc0000 [ 96.257893][ T29] audit: type=1326 audit(1767659538.548:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.8.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcf1960f749 code=0x7ffc0000 [ 96.281480][ T29] audit: type=1326 audit(1767659538.548:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.8.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1960f749 code=0x7ffc0000 [ 96.304947][ T29] audit: type=1326 audit(1767659538.548:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.8.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1960f749 code=0x7ffc0000 [ 96.358801][ T7941] loop6: detected capacity change from 0 to 256 [ 96.366663][ T7941] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.379739][ T7941] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 96.388391][ T7941] FAT-fs (loop6): Filesystem has been set read-only [ 96.558219][ T7950] loop7: detected capacity change from 0 to 2048 [ 96.582354][ T7955] loop6: detected capacity change from 0 to 512 [ 96.594049][ T7955] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.608601][ T7950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.636310][ T7261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.691382][ T6479] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 96.831639][ T3593] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.887573][ T3593] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.963934][ T3593] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.047200][ T3593] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.109771][ T8018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.149558][ T8018] wireguard0: entered promiscuous mode [ 97.223287][ T3593] bridge_slave_1: left allmulticast mode [ 97.229038][ T3593] bridge_slave_1: left promiscuous mode [ 97.234796][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.247242][ T3593] bridge_slave_0: left allmulticast mode [ 97.252997][ T3593] bridge_slave_0: left promiscuous mode [ 97.258761][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.494016][ T8046] netlink: 'syz.6.1864': attribute type 21 has an invalid length. [ 97.695590][ T3593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.710081][ T3593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.730244][ T3593] bond0 (unregistering): Released all slaves [ 97.747427][ T8046] __nla_validate_parse: 24 callbacks suppressed [ 97.747445][ T8046] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1864'. [ 97.762881][ T8046] netlink: 'syz.6.1864': attribute type 1 has an invalid length. [ 97.772251][ T8063] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1872'. [ 97.807465][ T3593] tipc: Disabling bearer [ 97.812512][ T3593] tipc: Left network mode [ 97.850238][ T3593] hsr_slave_0: left promiscuous mode [ 97.864475][ T3593] hsr_slave_1: left promiscuous mode [ 97.878438][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.886070][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.902403][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.909974][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.925897][ T3593] veth1_macvtap: left promiscuous mode [ 97.931703][ T3593] veth0_macvtap: left promiscuous mode [ 97.937311][ T3593] veth1_vlan: left promiscuous mode [ 97.942613][ T3593] veth0_vlan: left promiscuous mode [ 98.049258][ T3593] team0 (unregistering): Port device team_slave_1 removed [ 98.067390][ T3593] team0 (unregistering): Port device team_slave_0 removed [ 98.159631][ T8071] netlink: 'syz.2.1875': attribute type 3 has an invalid length. [ 98.167472][ T8071] netlink: 'syz.2.1875': attribute type 1 has an invalid length. [ 98.175255][ T8071] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1875'. [ 98.221245][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 98.237264][ T8075] loop6: detected capacity change from 0 to 2048 [ 98.274480][ T8075] loop6: p1 < > p4 [ 98.283396][ T8075] loop6: p4 size 8388608 extends beyond EOD, truncated [ 98.437418][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.444665][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.462161][ T7998] bridge_slave_0: entered allmulticast mode [ 98.472202][ T7998] bridge_slave_0: entered promiscuous mode [ 98.501954][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.509135][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.537012][ T7998] bridge_slave_1: entered allmulticast mode [ 98.548824][ T7998] bridge_slave_1: entered promiscuous mode [ 98.576472][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.588148][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.598760][ T8092] loop2: detected capacity change from 0 to 164 [ 98.613785][ T8092] syz.2.1883: attempt to access beyond end of device [ 98.613785][ T8092] loop2: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 98.633663][ T8092] syz.2.1883: attempt to access beyond end of device [ 98.633663][ T8092] loop2: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 98.656897][ T7998] team0: Port device team_slave_0 added [ 98.664119][ T7998] team0: Port device team_slave_1 added [ 98.703200][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.710271][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.736303][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.754523][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1885'. [ 98.763560][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1885'. [ 98.774567][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.781546][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.807794][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.850200][ T7998] hsr_slave_0: entered promiscuous mode [ 98.860267][ T8104] loop6: detected capacity change from 0 to 512 [ 98.867157][ T7998] hsr_slave_1: entered promiscuous mode [ 98.874511][ T8104] journal_path: Lookup failure for './file0' [ 98.880532][ T8104] EXT4-fs: error: could not find journal device path [ 98.888008][ T7998] debugfs: 'hsr0' already exists in 'hsr' [ 98.893791][ T7998] Cannot create hsr debugfs directory [ 98.990351][ T7998] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 98.999964][ T7998] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 99.010756][ T7998] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 99.019935][ T7998] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 99.053427][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.060576][ T7998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.068229][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.075399][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.111295][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.126214][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.134814][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.147493][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.172392][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.179628][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.198427][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.205576][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.220435][ T7998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.329898][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.581858][ T7998] veth0_vlan: entered promiscuous mode [ 99.596243][ T7998] veth1_vlan: entered promiscuous mode [ 99.621894][ T7998] veth0_macvtap: entered promiscuous mode [ 99.638149][ T7998] veth1_macvtap: entered promiscuous mode [ 99.667319][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.690460][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.724115][ T2487] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.734193][ T2487] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761629][ T2487] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.791312][ T2487] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.303166][ T8177] loop6: detected capacity change from 0 to 1024 [ 100.337146][ T8181] loop9: detected capacity change from 0 to 512 [ 100.355550][ T8177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.369010][ T8181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.383206][ T8181] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.854352][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 100.854370][ T29] audit: type=1326 audit(1767659543.178:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 100.887018][ T29] audit: type=1326 audit(1767659543.178:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 100.910784][ T29] audit: type=1326 audit(1767659543.178:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 100.934498][ T29] audit: type=1326 audit(1767659543.178:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 100.958036][ T29] audit: type=1326 audit(1767659543.178:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 100.981602][ T29] audit: type=1326 audit(1767659543.178:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 101.005252][ T29] audit: type=1326 audit(1767659543.178:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.9.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e71bf749 code=0x7ffc0000 [ 101.062060][ T29] audit: type=1400 audit(1767659543.378:2422): avc: denied { write } for pid=8231 comm="syz.9.1930" name="anycast6" dev="proc" ino=4026532986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.118598][ T8237] geneve2: entered promiscuous mode [ 101.123920][ T8237] geneve2: entered allmulticast mode [ 101.142715][ T3536] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.152875][ T3536] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.163550][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 101.182461][ T3536] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.210407][ T3536] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.278201][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1940'. [ 101.307175][ T29] audit: type=1326 audit(1767659543.628:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8252 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 101.331793][ T8249] loop2: detected capacity change from 0 to 4096 [ 101.341731][ T29] audit: type=1326 audit(1767659543.658:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8252 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 101.365909][ T8249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.451538][ T8258] pim6reg: entered allmulticast mode [ 101.473942][ T8258] pim6reg: left allmulticast mode [ 101.772729][ T8281] netlink: 'syz.9.1952': attribute type 29 has an invalid length. [ 101.837803][ T8285] loop9: detected capacity change from 0 to 128 [ 101.863555][ T8285] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.092683][ T8298] pim6reg: entered allmulticast mode [ 102.116623][ T8298] pim6reg: left allmulticast mode [ 102.735172][ T8339] bridge0: port 3(batadv1) entered blocking state [ 102.741874][ T8339] bridge0: port 3(batadv1) entered disabled state [ 102.748774][ T8339] batadv1: entered allmulticast mode [ 102.752932][ T3404] hid_parser_main: 24 callbacks suppressed [ 102.752983][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.755575][ T8339] batadv1: entered promiscuous mode [ 102.760013][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.782053][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.789963][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.797878][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.805906][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x1 [ 102.813967][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.821758][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.829572][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.838161][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 102.846777][ T3404] hid-generic 0000:0000:FFFFFFFC.0007: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 102.901479][ T8349] loop2: detected capacity change from 0 to 164 [ 102.910952][ T8349] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.921292][ T8349] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.930093][ T8349] Symlink component flag not implemented [ 102.935337][ T8353] geneve2: entered promiscuous mode [ 102.936013][ T8349] Symlink component flag not implemented [ 102.940993][ T8353] geneve2: entered allmulticast mode [ 102.952069][ T8349] Symlink component flag not implemented (7) [ 102.958163][ T8349] Symlink component flag not implemented (116) [ 102.964478][ T3545] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.975803][ T3545] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.984778][ T3545] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.993852][ T3545] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.233512][ T3545] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 103.242788][ T3545] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 103.259704][ T8371] pimreg: entered allmulticast mode [ 103.271712][ T8371] pimreg: left allmulticast mode [ 103.315394][ T8374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.568623][ T8390] loop6: detected capacity change from 0 to 512 [ 103.583603][ T8390] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.604650][ T8390] EXT4-fs (loop6): 1 truncate cleaned up [ 103.613730][ T8390] EXT4-fs mount: 6 callbacks suppressed [ 103.613751][ T8390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.654996][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.698889][ T8402] netlink: 'syz.6.2003': attribute type 16 has an invalid length. [ 103.706881][ T8402] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2003'. [ 103.792755][ T8412] pimreg: entered allmulticast mode [ 103.818899][ T8412] pimreg: left allmulticast mode [ 103.851314][ T8416] bridge0: port 4(batadv2) entered blocking state [ 103.857960][ T8416] bridge0: port 4(batadv2) entered disabled state [ 103.868083][ T8416] batadv2: entered allmulticast mode [ 103.874104][ T8416] batadv2: entered promiscuous mode [ 104.055679][ T8439] Falling back ldisc for ptm0. [ 104.079798][ T3499] hid-generic 0000:0000:FFFFFFFC.0008: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 104.097865][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.106848][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.116648][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.159810][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.168914][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.179744][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.205778][ T8455] hub 9-0:1.0: USB hub found [ 104.217514][ T8455] hub 9-0:1.0: 8 ports detected [ 104.235468][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.244657][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.254441][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 104.353167][ T3593] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 104.362453][ T3593] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 104.377649][ T8469] random: crng reseeded on system resumption [ 104.440815][ T8475] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 104.469012][ T3499] hid-generic 0000:0000:FFFFFFFC.0009: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 104.520069][ T8483] loop9: detected capacity change from 0 to 512 [ 104.537569][ T8483] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 104.562516][ T8483] EXT4-fs (loop9): 1 truncate cleaned up [ 104.593768][ T8483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.668406][ T7998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.758671][ T3500] hid-generic 0000:0000:FFFFFFFC.000A: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 104.838765][ T8520] SELinux: failed to load policy [ 104.969703][ T8536] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.004642][ T8538] netlink: 'syz.1.2065': attribute type 6 has an invalid length. [ 105.026413][ T8538] bond1 (unregistering): Released all slaves [ 105.620869][ T3500] hid-generic 0000:0000:FFFFFFFC.000B: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 105.996523][ T8573] SELinux: failed to load policy [ 106.074752][ T8583] vlan3: entered allmulticast mode [ 106.316617][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 106.316634][ T29] audit: type=1400 audit(1767659548.638:2514): avc: denied { sqpoll } for pid=8599 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.351609][ T8603] program syz.6.2092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.500501][ T29] audit: type=1326 audit(1767659548.748:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.524166][ T29] audit: type=1326 audit(1767659548.748:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.547905][ T29] audit: type=1326 audit(1767659548.748:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.571548][ T29] audit: type=1326 audit(1767659548.748:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.595343][ T29] audit: type=1326 audit(1767659548.748:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.618804][ T29] audit: type=1326 audit(1767659548.748:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.642372][ T29] audit: type=1326 audit(1767659548.748:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.666037][ T29] audit: type=1326 audit(1767659548.748:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 106.689680][ T29] audit: type=1326 audit(1767659548.748:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565007f749 code=0x7ffc0000 [ 107.089719][ T8653] vlan2: entered allmulticast mode [ 107.127456][ T8653] dummy0: entered allmulticast mode [ 107.157842][ T8667] vlan2: entered allmulticast mode [ 107.168854][ T8668] IPVS: Error connecting to the multicast addr [ 107.569716][ T8702] vlan2: entered allmulticast mode [ 107.865147][ T8737] vlan2: entered allmulticast mode [ 107.959664][ T8750] batadv1: left allmulticast mode [ 107.964907][ T8750] batadv1: left promiscuous mode [ 107.969996][ T8750] bridge0: port 3(batadv1) entered disabled state [ 107.972990][ T8743] loop2: detected capacity change from 0 to 8192 [ 107.985135][ T8750] bridge_slave_1: left allmulticast mode [ 107.991136][ T8750] bridge_slave_1: left promiscuous mode [ 107.997022][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.015949][ T8750] bridge_slave_0: left promiscuous mode [ 108.021740][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.038619][ T23] Process accounting resumed [ 108.239691][ T8778] vlan2: entered allmulticast mode [ 108.389037][ T8788] hsr_slave_1 (unregistering): left promiscuous mode [ 108.605099][ T8805] uprobe: syz.6.2183:8805 failed to unregister, leaking uprobe [ 108.817020][ T8814] loop6: detected capacity change from 0 to 512 [ 108.833309][ T8814] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 108.841382][ T8814] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 108.850151][ T8814] EXT4-fs (loop6): 1 truncate cleaned up [ 108.857151][ T8814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.256782][ T8840] __nla_validate_parse: 8 callbacks suppressed [ 109.256800][ T8840] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2197'. [ 109.455498][ T8869] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2218'. [ 109.477914][ T8869] 0ªX¹¦À: renamed from caif0 [ 109.492759][ T8869] 0ªX¹¦À: entered allmulticast mode [ 109.498143][ T8869] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 109.597387][ T8876] vlan3: entered allmulticast mode [ 109.687813][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.805838][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2216'. [ 110.708627][ T8925] vlan2: entered allmulticast mode [ 110.818197][ T8931] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2235'. [ 110.914354][ T8951] netlink: 'syz.7.2243': attribute type 1 has an invalid length. [ 111.170698][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2256'. [ 111.289076][ T8994] serio: Serial port ptm0 [ 111.297702][ T8997] loop6: detected capacity change from 0 to 1024 [ 111.321888][ T8997] EXT4-fs: Ignoring removed orlov option [ 111.330554][ T8997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.471889][ T9008] loop9: detected capacity change from 0 to 512 [ 111.898677][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2277'. [ 111.908135][ T6479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.936079][ T9029] ref_ctr_offset mismatch. inode: 0x565 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 111.962082][ T9027] hsr_slave_1 (unregistering): left promiscuous mode [ 111.975087][ T9025] pim6reg: entered allmulticast mode [ 111.982412][ T9025] pim6reg: left allmulticast mode [ 112.019143][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 112.019158][ T29] audit: type=1400 audit(1767659554.338:2670): avc: denied { ioctl } for pid=9032 comm="syz.1.2281" path="socket:[30319]" dev="sockfs" ino=30319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.124835][ T9037] loop6: detected capacity change from 0 to 2048 [ 112.148866][ T9037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.283506][ T9055] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.310779][ T9055] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.323125][ T9055] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.323125][ T9055] [ 112.333004][ T9055] EXT4-fs (loop6): Total free blocks count 0 [ 112.339105][ T9055] EXT4-fs (loop6): Free/Dirty block details [ 112.345094][ T9055] EXT4-fs (loop6): free_blocks=2415919104 [ 112.350905][ T9055] EXT4-fs (loop6): dirty_blocks=192 [ 112.356191][ T9055] EXT4-fs (loop6): Block reservation details [ 112.362205][ T9055] EXT4-fs (loop6): i_reserved_data_blocks=12 [ 112.418395][ T9036] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 352 with max blocks 192 with error 28 [ 112.489814][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 112.725686][ T29] audit: type=1400 audit(1767659555.048:2671): avc: denied { append } for pid=9077 comm="syz.1.2299" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.784061][ T9084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9084 comm=syz.2.2302 [ 112.796898][ T9083] netlink: 96 bytes leftover after parsing attributes in process `ÿ'. [ 112.817400][ T9084] netlink: 'syz.2.2302': attribute type 1 has an invalid length. [ 112.847145][ T9084] bond1: (slave bridge1): making interface the new active one [ 112.855140][ T9084] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.946128][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 112.955255][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 113.004798][ T29] audit: type=1400 audit(1767659555.318:2672): avc: denied { connect } for pid=9098 comm="syz.7.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.113475][ T9109] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 113.196574][ T29] audit: type=1326 audit(1767659555.518:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.220196][ T29] audit: type=1326 audit(1767659555.518:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd4e73ede97 code=0x7ffc0000 [ 113.243883][ T29] audit: type=1326 audit(1767659555.518:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.267346][ T29] audit: type=1326 audit(1767659555.518:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.325642][ T9125] batadv2: left allmulticast mode [ 113.330759][ T9125] batadv2: left promiscuous mode [ 113.335933][ T9125] bridge0: port 4(batadv2) entered disabled state [ 113.373940][ T29] audit: type=1326 audit(1767659555.518:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.374235][ T9125] batadv1: left allmulticast mode [ 113.397434][ T29] audit: type=1326 audit(1767659555.518:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.402499][ T9125] batadv1: left promiscuous mode [ 113.426330][ T29] audit: type=1326 audit(1767659555.518:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e73ef749 code=0x7ffc0000 [ 113.430975][ T9125] bridge0: port 3(batadv1) entered disabled state [ 113.487263][ T9125] bridge_slave_1: left allmulticast mode [ 113.493159][ T9125] bridge_slave_1: left promiscuous mode [ 113.498940][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.519339][ T9125] bridge_slave_0: left promiscuous mode [ 113.525496][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.563861][ T9136] SELinux: failed to load policy [ 113.672337][ T9144] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 113.721388][ T9143] infiniband syz!: set active [ 113.726307][ T9143] infiniband syz!: added team_slave_0 [ 113.738835][ T9143] RDS/IB: syz!: added [ 113.743054][ T9143] smc: adding ib device syz! with port count 1 [ 113.749311][ T9143] smc: ib device syz! port 1 has no pnetid [ 113.753804][ T9150] loop2: detected capacity change from 0 to 1024 [ 113.762446][ T9150] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.774578][ T9150] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.2328: iget: bogus i_mode (1) [ 113.786171][ T9150] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2328: couldn't read orphan inode 11 (err -117) [ 113.798819][ T9150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.823716][ T9150] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.065758][ T9158] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 114.075430][ T9158] 0ªî{X¹¦: entered allmulticast mode [ 114.081857][ T9158] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 114.563792][ T9181] netlink: 'syz.6.2339': attribute type 10 has an invalid length. [ 114.601580][ T9181] veth0_vlan: left promiscuous mode [ 114.644145][ T9181] veth0_vlan: entered promiscuous mode [ 114.670688][ T9181] team0: Device veth0_vlan failed to register rx_handler [ 114.705487][ T9193] __nla_validate_parse: 3 callbacks suppressed [ 114.705515][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'. [ 114.783440][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'. [ 115.015384][ T9212] loop9: detected capacity change from 0 to 1024 [ 115.030691][ T9212] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.076870][ T9212] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 115.085416][ T9212] EXT4-fs (loop9): orphan cleanup on readonly fs [ 115.092225][ T9212] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 115.106800][ T9212] EXT4-fs (loop9): Cannot turn on quotas: error -5 [ 115.114518][ T9212] EXT4-fs (loop9): 1 truncate cleaned up [ 115.120851][ T9212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.180072][ T9224] bridge_slave_0: left promiscuous mode [ 115.186089][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.197993][ T9224] bridge_slave_1: left allmulticast mode [ 115.203856][ T9224] bridge_slave_1: left promiscuous mode [ 115.209582][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.275059][ T9224] bond0: (slave bond_slave_0): Releasing backup interface [ 115.292973][ T9224] bond0: (slave bond_slave_1): Releasing backup interface [ 115.319112][ T9224] team0: Port device team_slave_0 removed [ 115.350260][ T9224] team0: Port device team_slave_1 removed [ 115.382590][ T9224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.482201][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2371'. [ 115.519555][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 115.528598][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 115.562461][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 115.636202][ T9266] bond3: option resend_igmp: invalid value (1024) [ 115.642715][ T9266] bond3: option resend_igmp: allowed values 0 - 255 [ 115.654910][ T9266] bond3 (unregistering): Released all slaves [ 115.853856][ T7998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.912841][ T9282] loop9: detected capacity change from 0 to 512 [ 115.933309][ T9282] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 115.963257][ T9282] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 116.003269][ T9282] EXT4-fs (loop9): 1 truncate cleaned up [ 116.020206][ T9282] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.266361][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2389'. [ 116.370577][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2390'. [ 116.398963][ T9304] dummy0: entered allmulticast mode [ 116.411027][ T9304] dummy0: left allmulticast mode [ 116.514157][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2390'. [ 116.542123][ C0] ================================================================== [ 116.550253][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 116.557512][ C0] [ 116.559854][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 1: [ 116.567943][ C0] can_rcv_filter+0xd9/0x4f0 [ 116.572577][ C0] can_receive+0x163/0x1c0 [ 116.577047][ C0] can_rcv+0xed/0x190 [ 116.581076][ C0] __netif_receive_skb+0x120/0x270 [ 116.586226][ C0] process_backlog+0x228/0x420 [ 116.591048][ C0] __napi_poll+0x5f/0x300 [ 116.595427][ C0] net_rx_action+0x425/0x8c0 [ 116.600050][ C0] handle_softirqs+0xba/0x290 [ 116.604767][ C0] do_softirq+0x45/0x60 [ 116.608969][ C0] __local_bh_enable_ip+0x70/0x80 [ 116.614035][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 116.619084][ C0] wg_packet_encrypt_worker+0xdca/0xe10 [ 116.624668][ C0] process_scheduled_works+0x4ce/0x9d0 [ 116.630202][ C0] worker_thread+0x582/0x770 [ 116.634841][ C0] kthread+0x489/0x510 [ 116.638952][ C0] ret_from_fork+0x149/0x290 [ 116.643581][ C0] ret_from_fork_asm+0x1a/0x30 [ 116.648385][ C0] [ 116.650735][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 0: [ 116.658831][ C0] can_rcv_filter+0xd9/0x4f0 [ 116.663474][ C0] can_receive+0x163/0x1c0 [ 116.667929][ C0] can_rcv+0xed/0x190 [ 116.671942][ C0] __netif_receive_skb+0x120/0x270 [ 116.677105][ C0] process_backlog+0x228/0x420 [ 116.681894][ C0] __napi_poll+0x5f/0x300 [ 116.686268][ C0] net_rx_action+0x425/0x8c0 [ 116.690890][ C0] handle_softirqs+0xba/0x290 [ 116.695612][ C0] do_softirq+0x45/0x60 [ 116.699804][ C0] __local_bh_enable_ip+0x70/0x80 [ 116.704964][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 116.710109][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 116.715792][ C0] process_scheduled_works+0x4ce/0x9d0 [ 116.721292][ C0] worker_thread+0x582/0x770 [ 116.725950][ C0] kthread+0x489/0x510 [ 116.730067][ C0] ret_from_fork+0x149/0x290 [ 116.734872][ C0] ret_from_fork_asm+0x1a/0x30 [ 116.739685][ C0] [ 116.742063][ C0] value changed: 0x00000000000017fa -> 0x00000000000017fb [ 116.749195][ C0] [ 116.751545][ C0] Reported by Kernel Concurrency Sanitizer on: [ 116.757743][ C0] CPU: 0 UID: 0 PID: 3543 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.767761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.778195][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 116.785012][ C0] ================================================================== [ 116.821487][ C1] ================================================================== [ 116.829642][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 116.836900][ C1] [ 116.839250][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 0: [ 116.847341][ C1] can_rcv_filter+0x242/0x4f0 [ 116.852050][ C1] can_receive+0x163/0x1c0 [ 116.856490][ C1] can_rcv+0xed/0x190 [ 116.860500][ C1] __netif_receive_skb+0x120/0x270 [ 116.865644][ C1] process_backlog+0x228/0x420 [ 116.870422][ C1] __napi_poll+0x5f/0x300 [ 116.874871][ C1] net_rx_action+0x425/0x8c0 [ 116.879486][ C1] handle_softirqs+0xba/0x290 [ 116.884202][ C1] do_softirq+0x45/0x60 [ 116.888408][ C1] __local_bh_enable_ip+0x70/0x80 [ 116.893472][ C1] copy_fpstate_to_sigframe+0x311/0x7d0 [ 116.899043][ C1] get_sigframe+0x34d/0x490 [ 116.903570][ C1] x64_setup_rt_frame+0xa8/0x580 [ 116.908549][ C1] arch_do_signal_or_restart+0x24c/0x450 [ 116.914204][ C1] exit_to_user_mode_loop+0x6a/0x740 [ 116.919532][ C1] do_syscall_64+0x1dd/0x2b0 [ 116.924161][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.930085][ C1] [ 116.932421][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 1: [ 116.940495][ C1] can_rcv_filter+0x242/0x4f0 [ 116.945203][ C1] can_receive+0x163/0x1c0 [ 116.949659][ C1] can_rcv+0xed/0x190 [ 116.953669][ C1] __netif_receive_skb+0x120/0x270 [ 116.958820][ C1] process_backlog+0x228/0x420 [ 116.963598][ C1] __napi_poll+0x5f/0x300 [ 116.967964][ C1] net_rx_action+0x425/0x8c0 [ 116.972575][ C1] handle_softirqs+0xba/0x290 [ 116.977305][ C1] do_softirq+0x45/0x60 [ 116.981488][ C1] __local_bh_enable_ip+0x70/0x80 [ 116.986546][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 116.991504][ C1] lock_sock_nested+0x112/0x140 [ 116.996379][ C1] tcp_recvmsg+0x10e/0x480 [ 117.000820][ C1] inet_recvmsg+0xb7/0x290 [ 117.005258][ C1] sock_recvmsg+0xf6/0x170 [ 117.009703][ C1] sock_read_iter+0x152/0x1a0 [ 117.014427][ C1] vfs_read+0x64c/0x770 [ 117.018613][ C1] ksys_read+0xda/0x1a0 [ 117.022784][ C1] __x64_sys_read+0x40/0x50 [ 117.027324][ C1] x64_sys_call+0x2889/0x3000 [ 117.032021][ C1] do_syscall_64+0xca/0x2b0 [ 117.036566][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.042489][ C1] [ 117.044827][ C1] value changed: 0x0000000000003d09 -> 0x0000000000003d0a [ 117.051949][ C1] [ 117.054282][ C1] Reported by Kernel Concurrency Sanitizer on: [ 117.060452][ C1] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.070449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.080531][ C1] ================================================================== [ 117.097172][ C1] ================================================================== [ 117.105297][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 117.112543][ C1] [ 117.114889][ C1] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 0: [ 117.122994][ C1] can_can_gw_rcv+0x807/0x820 [ 117.127702][ C1] can_rcv_filter+0xc7/0x4f0 [ 117.132335][ C1] can_receive+0x163/0x1c0 [ 117.136805][ C1] can_rcv+0xed/0x190 [ 117.140840][ C1] __netif_receive_skb+0x120/0x270 [ 117.146002][ C1] process_backlog+0x228/0x420 [ 117.150800][ C1] __napi_poll+0x5f/0x300 [ 117.155172][ C1] net_rx_action+0x425/0x8c0 [ 117.159800][ C1] handle_softirqs+0xba/0x290 [ 117.164526][ C1] run_ksoftirqd+0x1c/0x30 [ 117.168966][ C1] smpboot_thread_fn+0x32b/0x530 [ 117.173948][ C1] kthread+0x489/0x510 [ 117.178066][ C1] ret_from_fork+0x149/0x290 [ 117.182693][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.187495][ C1] [ 117.189842][ C1] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 1: [ 117.197926][ C1] can_can_gw_rcv+0x807/0x820 [ 117.202632][ C1] can_rcv_filter+0xc7/0x4f0 [ 117.207264][ C1] can_receive+0x163/0x1c0 [ 117.211740][ C1] can_rcv+0xed/0x190 [ 117.215758][ C1] __netif_receive_skb+0x120/0x270 [ 117.220910][ C1] process_backlog+0x228/0x420 [ 117.225726][ C1] __napi_poll+0x5f/0x300 [ 117.230109][ C1] net_rx_action+0x425/0x8c0 [ 117.234729][ C1] handle_softirqs+0xba/0x290 [ 117.239477][ C1] do_softirq+0x45/0x60 [ 117.243695][ C1] __local_bh_enable_ip+0x70/0x80 [ 117.249027][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 117.253998][ C1] lock_sock_nested+0x112/0x140 [ 117.258875][ C1] tcp_sock_set_nodelay+0x1c/0xb0 [ 117.263950][ C1] rds_tcp_tune+0x49/0x3a0 [ 117.268413][ C1] rds_tcp_conn_path_connect+0x1a0/0x440 [ 117.274097][ C1] rds_connect_worker+0x12f/0x1b0 [ 117.279161][ C1] process_scheduled_works+0x4ce/0x9d0 [ 117.284669][ C1] worker_thread+0x582/0x770 [ 117.289297][ C1] kthread+0x489/0x510 [ 117.293412][ C1] ret_from_fork+0x149/0x290 [ 117.298043][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.302853][ C1] [ 117.305195][ C1] value changed: 0x000048bb -> 0x000048bc [ 117.310935][ C1] [ 117.313286][ C1] Reported by Kernel Concurrency Sanitizer on: [ 117.319472][ C1] CPU: 1 UID: 0 PID: 3545 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.329581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.339674][ C1] Workqueue: krdsd rds_connect_worker [ 117.345103][ C1] ================================================================== [ 117.818414][ T9285] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 117.886248][ T9285] EXT4-fs (loop9): Remounting filesystem read-only [ 118.052020][ T7998] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.553074][ C0] ================================================================== [ 119.561251][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 119.568597][ C0] [ 119.570941][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 1: [ 119.579068][ C0] can_rcv_filter+0xd9/0x4f0 [ 119.583729][ C0] can_receive+0x163/0x1c0 [ 119.588187][ C0] can_rcv+0xed/0x190 [ 119.592216][ C0] __netif_receive_skb+0x120/0x270 [ 119.597375][ C0] process_backlog+0x228/0x420 [ 119.602208][ C0] __napi_poll+0x5f/0x300 [ 119.606666][ C0] net_rx_action+0x425/0x8c0 [ 119.611289][ C0] handle_softirqs+0xba/0x290 [ 119.616034][ C0] do_softirq+0x45/0x60 [ 119.620241][ C0] __local_bh_enable_ip+0x70/0x80 [ 119.625313][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 119.630280][ C0] batadv_tt_purge+0x2cd/0x610 [ 119.635077][ C0] process_scheduled_works+0x4ce/0x9d0 [ 119.640586][ C0] worker_thread+0x582/0x770 [ 119.645214][ C0] kthread+0x489/0x510 [ 119.649323][ C0] ret_from_fork+0x149/0x290 [ 119.653957][ C0] ret_from_fork_asm+0x1a/0x30 [ 119.658793][ C0] [ 119.661224][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 0: [ 119.669320][ C0] can_rcv_filter+0xd9/0x4f0 [ 119.673960][ C0] can_receive+0x163/0x1c0 [ 119.678457][ C0] can_rcv+0xed/0x190 [ 119.682482][ C0] __netif_receive_skb+0x120/0x270 [ 119.687636][ C0] process_backlog+0x228/0x420 [ 119.692423][ C0] __napi_poll+0x5f/0x300 [ 119.696813][ C0] net_rx_action+0x425/0x8c0 [ 119.701442][ C0] handle_softirqs+0xba/0x290 [ 119.706337][ C0] do_softirq+0x45/0x60 [ 119.710547][ C0] __local_bh_enable_ip+0x70/0x80 [ 119.715620][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 119.720592][ C0] lock_sock_nested+0x112/0x140 [ 119.725470][ C0] __inet_bind+0x2ce/0x5e0 [ 119.729910][ C0] inet_bind+0x93/0xa0 [ 119.734013][ C0] kernel_bind+0x97/0xe0 [ 119.738344][ C0] rds_tcp_conn_path_connect+0x2e4/0x440 [ 119.744034][ C0] rds_connect_worker+0x12f/0x1b0 [ 119.749104][ C0] process_scheduled_works+0x4ce/0x9d0 [ 119.754602][ C0] worker_thread+0x582/0x770 [ 119.759230][ C0] kthread+0x489/0x510 [ 119.763346][ C0] ret_from_fork+0x149/0x290 [ 119.767982][ C0] ret_from_fork_asm+0x1a/0x30 [ 119.772775][ C0] [ 119.775122][ C0] value changed: 0x000000000003e8e7 -> 0x000000000003e8e8 [ 119.782251][ C0] [ 119.784595][ C0] Reported by Kernel Concurrency Sanitizer on: [ 119.790791][ C0] CPU: 0 UID: 0 PID: 3592 Comm: kworker/u8:63 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.800826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.810980][ C0] Workqueue: krdsd rds_connect_worker [ 119.816390][ C0] ================================================================== [ 119.900341][ C0] ================================================================== [ 119.908491][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 119.915919][ C0] [ 119.918260][ C0] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 1: [ 119.926354][ C0] can_rcv_filter+0x242/0x4f0 [ 119.931071][ C0] can_receive+0x163/0x1c0 [ 119.935526][ C0] can_rcv+0xed/0x190 [ 119.939546][ C0] __netif_receive_skb+0x120/0x270 [ 119.944703][ C0] process_backlog+0x228/0x420 [ 119.949500][ C0] __napi_poll+0x5f/0x300 [ 119.953867][ C0] net_rx_action+0x425/0x8c0 [ 119.958573][ C0] handle_softirqs+0xba/0x290 [ 119.963293][ C0] do_softirq+0x45/0x60 [ 119.967494][ C0] __local_bh_enable_ip+0x70/0x80 [ 119.972649][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 119.977630][ C0] batadv_tt_purge+0x2cd/0x610 [ 119.982428][ C0] process_scheduled_works+0x4ce/0x9d0 [ 119.987920][ C0] worker_thread+0x582/0x770 [ 119.992543][ C0] kthread+0x489/0x510 [ 119.996655][ C0] ret_from_fork+0x149/0x290 [ 120.001307][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.006117][ C0] [ 120.008471][ C0] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 0: [ 120.016580][ C0] can_rcv_filter+0x242/0x4f0 [ 120.021303][ C0] can_receive+0x163/0x1c0 [ 120.025761][ C0] can_rcv+0xed/0x190 [ 120.029785][ C0] __netif_receive_skb+0x120/0x270 [ 120.034942][ C0] process_backlog+0x228/0x420 [ 120.039747][ C0] __napi_poll+0x5f/0x300 [ 120.044117][ C0] net_rx_action+0x425/0x8c0 [ 120.048735][ C0] handle_softirqs+0xba/0x290 [ 120.053450][ C0] do_softirq+0x45/0x60 [ 120.057653][ C0] __local_bh_enable_ip+0x70/0x80 [ 120.062717][ C0] __alloc_skb+0x476/0x4b0 [ 120.067163][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 120.072844][ C0] process_scheduled_works+0x4ce/0x9d0 [ 120.078345][ C0] worker_thread+0x582/0x770 [ 120.082965][ C0] kthread+0x489/0x510 [ 120.087079][ C0] ret_from_fork+0x149/0x290 [ 120.091714][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.096507][ C0] [ 120.098853][ C0] value changed: 0x0000000000043483 -> 0x0000000000043484 [ 120.105977][ C0] [ 120.108316][ C0] Reported by Kernel Concurrency Sanitizer on: [ 120.114480][ C0] CPU: 0 UID: 0 PID: 2487 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.124522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.134616][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 120.141423][ C0] ================================================================== [ 120.189369][ C0] ================================================================== [ 120.197501][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 120.204738][ C0] [ 120.207077][ C0] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 1: [ 120.215170][ C0] can_can_gw_rcv+0x807/0x820 [ 120.219884][ C0] can_rcv_filter+0xc7/0x4f0 [ 120.224517][ C0] can_receive+0x163/0x1c0 [ 120.228970][ C0] can_rcv+0xed/0x190 [ 120.232994][ C0] __netif_receive_skb+0x120/0x270 [ 120.238151][ C0] process_backlog+0x228/0x420 [ 120.242947][ C0] __napi_poll+0x5f/0x300 [ 120.247328][ C0] net_rx_action+0x425/0x8c0 [ 120.251939][ C0] handle_softirqs+0xba/0x290 [ 120.256656][ C0] do_softirq+0x45/0x60 [ 120.260856][ C0] __local_bh_enable_ip+0x70/0x80 [ 120.265935][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 120.270901][ C0] batadv_tt_purge+0x2cd/0x610 [ 120.275698][ C0] process_scheduled_works+0x4ce/0x9d0 [ 120.281191][ C0] worker_thread+0x582/0x770 [ 120.285822][ C0] kthread+0x489/0x510 [ 120.289929][ C0] ret_from_fork+0x149/0x290 [ 120.294646][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.299456][ C0] [ 120.301796][ C0] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 0: [ 120.309890][ C0] can_can_gw_rcv+0x807/0x820 [ 120.314601][ C0] can_rcv_filter+0xc7/0x4f0 [ 120.319228][ C0] can_receive+0x163/0x1c0 [ 120.323695][ C0] can_rcv+0xed/0x190 [ 120.327717][ C0] __netif_receive_skb+0x120/0x270 [ 120.332880][ C0] process_backlog+0x228/0x420 [ 120.337676][ C0] __napi_poll+0x5f/0x300 [ 120.342044][ C0] net_rx_action+0x425/0x8c0 [ 120.346657][ C0] handle_softirqs+0xba/0x290 [ 120.351376][ C0] do_softirq+0x45/0x60 [ 120.355580][ C0] __local_bh_enable_ip+0x70/0x80 [ 120.360647][ C0] kernel_fpu_end+0x6c/0x80 [ 120.365182][ C0] blake2s_compress+0x67/0x1740 [ 120.370073][ C0] blake2s_final+0x6a/0xb0 [ 120.374529][ C0] hmac+0x208/0x270 [ 120.378381][ C0] message_ephemeral+0x134/0x1d0 [ 120.383361][ C0] wg_noise_handshake_create_initiation+0x15a/0x520 [ 120.390004][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 120.396102][ C0] process_scheduled_works+0x4ce/0x9d0 [ 120.401597][ C0] worker_thread+0x582/0x770 [ 120.406220][ C0] kthread+0x489/0x510 [ 120.410339][ C0] ret_from_fork+0x149/0x290 [ 120.414971][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.419776][ C0] [ 120.422115][ C0] value changed: 0x00044d48 -> 0x00044d49 [ 120.427846][ C0] [ 120.430183][ C0] Reported by Kernel Concurrency Sanitizer on: [ 120.436448][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.446202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.456293][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 120.463268][ C0] ================================================================== [ 122.563121][ C0] ================================================================== [ 122.571272][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 122.578526][ C0] [ 122.580870][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 1: [ 122.588962][ C0] can_rcv_filter+0xd9/0x4f0 [ 122.593600][ C0] can_receive+0x163/0x1c0 [ 122.598062][ C0] can_rcv+0xed/0x190 [ 122.602135][ C0] __netif_receive_skb+0x120/0x270 [ 122.607302][ C0] process_backlog+0x228/0x420 [ 122.612101][ C0] __napi_poll+0x5f/0x300 [ 122.616485][ C0] net_rx_action+0x425/0x8c0 [ 122.621110][ C0] handle_softirqs+0xba/0x290 [ 122.625841][ C0] do_softirq+0x45/0x60 [ 122.630054][ C0] __local_bh_enable_ip+0x70/0x80 [ 122.635121][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 122.640095][ C0] neigh_periodic_work+0x5e9/0x690 [ 122.645238][ C0] process_scheduled_works+0x4ce/0x9d0 [ 122.650734][ C0] worker_thread+0x582/0x770 [ 122.655375][ C0] kthread+0x489/0x510 [ 122.659486][ C0] ret_from_fork+0x149/0x290 [ 122.664119][ C0] ret_from_fork_asm+0x1a/0x30 [ 122.668921][ C0] [ 122.671258][ C0] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 0: [ 122.679347][ C0] can_rcv_filter+0xd9/0x4f0 [ 122.683993][ C0] can_receive+0x163/0x1c0 [ 122.688465][ C0] can_rcv+0xed/0x190 [ 122.692483][ C0] __netif_receive_skb+0x120/0x270 [ 122.697659][ C0] process_backlog+0x228/0x420 [ 122.702443][ C0] __napi_poll+0x5f/0x300 [ 122.706913][ C0] net_rx_action+0x425/0x8c0 [ 122.711521][ C0] handle_softirqs+0xba/0x290 [ 122.716248][ C0] run_ksoftirqd+0x1c/0x30 [ 122.720695][ C0] smpboot_thread_fn+0x32b/0x530 [ 122.725679][ C0] kthread+0x489/0x510 [ 122.729794][ C0] ret_from_fork+0x149/0x290 [ 122.734424][ C0] ret_from_fork_asm+0x1a/0x30 [ 122.739224][ C0] [ 122.741563][ C0] value changed: 0x000000000007c96c -> 0x000000000007c96d [ 122.748690][ C0] [ 122.751037][ C0] Reported by Kernel Concurrency Sanitizer on: [ 122.757228][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.766976][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.777057][ C0] ================================================================== [ 122.952483][ C1] ================================================================== [ 122.960727][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 122.967989][ C1] [ 122.970334][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 0: [ 122.978427][ C1] can_rcv_filter+0x242/0x4f0 [ 122.983150][ C1] can_receive+0x163/0x1c0 [ 122.987607][ C1] can_rcv+0xed/0x190 [ 122.991646][ C1] __netif_receive_skb+0x120/0x270 [ 122.996803][ C1] process_backlog+0x228/0x420 [ 123.001597][ C1] __napi_poll+0x5f/0x300 [ 123.005970][ C1] net_rx_action+0x425/0x8c0 [ 123.010597][ C1] handle_softirqs+0xba/0x290 [ 123.015326][ C1] do_softirq+0x45/0x60 [ 123.019527][ C1] __local_bh_enable_ip+0x70/0x80 [ 123.024600][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 123.029568][ C1] release_sock+0x116/0x150 [ 123.034104][ C1] rds_tcp_tune+0x326/0x3a0 [ 123.038654][ C1] rds_tcp_conn_path_connect+0x1a0/0x440 [ 123.044329][ C1] rds_connect_worker+0x12f/0x1b0 [ 123.049394][ C1] process_scheduled_works+0x4ce/0x9d0 [ 123.054891][ C1] worker_thread+0x582/0x770 [ 123.059518][ C1] kthread+0x489/0x510 [ 123.063629][ C1] ret_from_fork+0x149/0x290 [ 123.068253][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.073054][ C1] [ 123.075392][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 1: [ 123.083506][ C1] can_rcv_filter+0x242/0x4f0 [ 123.088225][ C1] can_receive+0x163/0x1c0 [ 123.092683][ C1] can_rcv+0xed/0x190 [ 123.096707][ C1] __netif_receive_skb+0x120/0x270 [ 123.101869][ C1] process_backlog+0x228/0x420 [ 123.106663][ C1] __napi_poll+0x5f/0x300 [ 123.111038][ C1] net_rx_action+0x425/0x8c0 [ 123.115655][ C1] handle_softirqs+0xba/0x290 [ 123.120375][ C1] run_ksoftirqd+0x1c/0x30 [ 123.124817][ C1] smpboot_thread_fn+0x32b/0x530 [ 123.129796][ C1] kthread+0x489/0x510 [ 123.133905][ C1] ret_from_fork+0x149/0x290 [ 123.138541][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.143343][ C1] [ 123.145687][ C1] value changed: 0x0000000000083933 -> 0x0000000000083934 [ 123.152813][ C1] [ 123.155159][ C1] Reported by Kernel Concurrency Sanitizer on: [ 123.161331][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.170995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.181084][ C1] ================================================================== [ 123.273807][ C1] ================================================================== [ 123.281949][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 123.289191][ C1] [ 123.291536][ C1] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 0: [ 123.299626][ C1] can_can_gw_rcv+0x807/0x820 [ 123.304356][ C1] can_rcv_filter+0xc7/0x4f0 [ 123.309087][ C1] can_receive+0x163/0x1c0 [ 123.313551][ C1] can_rcv+0xed/0x190 [ 123.317569][ C1] __netif_receive_skb+0x120/0x270 [ 123.322731][ C1] process_backlog+0x228/0x420 [ 123.327539][ C1] __napi_poll+0x5f/0x300 [ 123.331915][ C1] net_rx_action+0x425/0x8c0 [ 123.336540][ C1] handle_softirqs+0xba/0x290 [ 123.341262][ C1] do_softirq+0x45/0x60 [ 123.345450][ C1] __local_bh_enable_ip+0x70/0x80 [ 123.350517][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 123.355568][ C1] __tcp_close+0x79f/0x1130 [ 123.360107][ C1] tcp_close+0x28/0xd0 [ 123.364203][ C1] inet_release+0xce/0xf0 [ 123.368560][ C1] sock_release+0x4b/0xe0 [ 123.372919][ C1] rds_tcp_conn_path_connect+0x26c/0x440 [ 123.378591][ C1] rds_connect_worker+0x12f/0x1b0 [ 123.383647][ C1] process_scheduled_works+0x4ce/0x9d0 [ 123.389144][ C1] worker_thread+0x582/0x770 [ 123.393767][ C1] kthread+0x489/0x510 [ 123.397877][ C1] ret_from_fork+0x149/0x290 [ 123.402496][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.407288][ C1] [ 123.409620][ C1] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 1: [ 123.417696][ C1] can_can_gw_rcv+0x807/0x820 [ 123.422399][ C1] can_rcv_filter+0xc7/0x4f0 [ 123.427012][ C1] can_receive+0x163/0x1c0 [ 123.431451][ C1] can_rcv+0xed/0x190 [ 123.435458][ C1] __netif_receive_skb+0x120/0x270 [ 123.440608][ C1] process_backlog+0x228/0x420 [ 123.445387][ C1] __napi_poll+0x5f/0x300 [ 123.449760][ C1] net_rx_action+0x425/0x8c0 [ 123.454369][ C1] handle_softirqs+0xba/0x290 [ 123.459086][ C1] do_softirq+0x45/0x60 [ 123.463270][ C1] __local_bh_enable_ip+0x70/0x80 [ 123.468342][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 123.473299][ C1] neigh_periodic_work+0x5e9/0x690 [ 123.478434][ C1] process_scheduled_works+0x4ce/0x9d0 [ 123.483920][ C1] worker_thread+0x582/0x770 [ 123.488557][ C1] kthread+0x489/0x510 [ 123.492656][ C1] ret_from_fork+0x149/0x290 [ 123.497273][ C1] ret_from_fork_asm+0x1a/0x30 [ 123.502063][ C1] [ 123.504403][ C1] value changed: 0x000861fc -> 0x000861fd [ 123.510223][ C1] [ 123.512556][ C1] Reported by Kernel Concurrency Sanitizer on: [ 123.518725][ C1] CPU: 1 UID: 0 PID: 3501 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.528546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.538617][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 123.545576][ C1] ================================================================== [ 125.592506][ C1] ================================================================== [ 125.600740][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 125.608001][ C1] [ 125.610429][ C1] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 0: [ 125.618516][ C1] can_rcv_filter+0xd9/0x4f0 [ 125.623146][ C1] can_receive+0x163/0x1c0 [ 125.627803][ C1] can_rcv+0xed/0x190 [ 125.631819][ C1] __netif_receive_skb+0x120/0x270 [ 125.636979][ C1] process_backlog+0x228/0x420 [ 125.641767][ C1] __napi_poll+0x5f/0x300 [ 125.646142][ C1] net_rx_action+0x425/0x8c0 [ 125.650884][ C1] handle_softirqs+0xba/0x290 [ 125.655603][ C1] do_softirq+0x45/0x60 [ 125.659801][ C1] __local_bh_enable_ip+0x70/0x80 [ 125.664873][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 125.669846][ C1] batadv_tt_purge+0x2cd/0x610 [ 125.674641][ C1] process_scheduled_works+0x4ce/0x9d0 [ 125.680139][ C1] worker_thread+0x582/0x770 [ 125.684769][ C1] kthread+0x489/0x510 [ 125.688884][ C1] ret_from_fork+0x149/0x290 [ 125.693509][ C1] ret_from_fork_asm+0x1a/0x30 [ 125.698314][ C1] [ 125.700661][ C1] read-write to 0xffff8881019cd158 of 8 bytes by interrupt on cpu 1: [ 125.708746][ C1] can_rcv_filter+0xd9/0x4f0 [ 125.713379][ C1] can_receive+0x163/0x1c0 [ 125.717843][ C1] can_rcv+0xed/0x190 [ 125.721867][ C1] __netif_receive_skb+0x120/0x270 [ 125.727025][ C1] process_backlog+0x228/0x420 [ 125.731819][ C1] __napi_poll+0x5f/0x300 [ 125.736200][ C1] net_rx_action+0x425/0x8c0 [ 125.740819][ C1] handle_softirqs+0xba/0x290 [ 125.745587][ C1] run_ksoftirqd+0x1c/0x30 [ 125.750032][ C1] smpboot_thread_fn+0x32b/0x530 [ 125.755022][ C1] kthread+0x489/0x510 [ 125.759125][ C1] ret_from_fork+0x149/0x290 [ 125.763754][ C1] ret_from_fork_asm+0x1a/0x30 [ 125.768555][ C1] [ 125.770891][ C1] value changed: 0x00000000000bc993 -> 0x00000000000bc994 [ 125.778015][ C1] [ 125.780358][ C1] Reported by Kernel Concurrency Sanitizer on: [ 125.786537][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.796193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.806282][ C1] ================================================================== [ 125.975206][ C1] ================================================================== [ 125.983364][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 125.990620][ C1] [ 125.992964][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 0: [ 126.001051][ C1] can_rcv_filter+0x242/0x4f0 [ 126.005766][ C1] can_receive+0x163/0x1c0 [ 126.010218][ C1] can_rcv+0xed/0x190 [ 126.014242][ C1] __netif_receive_skb+0x120/0x270 [ 126.019478][ C1] process_backlog+0x228/0x420 [ 126.024272][ C1] __napi_poll+0x5f/0x300 [ 126.028652][ C1] net_rx_action+0x425/0x8c0 [ 126.033284][ C1] handle_softirqs+0xba/0x290 [ 126.038009][ C1] do_softirq+0x45/0x60 [ 126.042214][ C1] __local_bh_enable_ip+0x70/0x80 [ 126.047283][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 126.052251][ C1] batadv_tt_purge+0x2cd/0x610 [ 126.057043][ C1] process_scheduled_works+0x4ce/0x9d0 [ 126.062537][ C1] worker_thread+0x582/0x770 [ 126.067154][ C1] kthread+0x489/0x510 [ 126.071267][ C1] ret_from_fork+0x149/0x290 [ 126.075900][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.080700][ C1] [ 126.083048][ C1] read-write to 0xffff888104eef2e8 of 8 bytes by interrupt on cpu 1: [ 126.091132][ C1] can_rcv_filter+0x242/0x4f0 [ 126.095872][ C1] can_receive+0x163/0x1c0 [ 126.100351][ C1] can_rcv+0xed/0x190 [ 126.104368][ C1] __netif_receive_skb+0x120/0x270 [ 126.109527][ C1] process_backlog+0x228/0x420 [ 126.114319][ C1] __napi_poll+0x5f/0x300 [ 126.118739][ C1] net_rx_action+0x425/0x8c0 [ 126.123375][ C1] handle_softirqs+0xba/0x290 [ 126.128092][ C1] do_softirq+0x45/0x60 [ 126.132289][ C1] __local_bh_enable_ip+0x70/0x80 [ 126.137359][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 126.142333][ C1] neigh_periodic_work+0x5e9/0x690 [ 126.147479][ C1] process_scheduled_works+0x4ce/0x9d0 [ 126.152980][ C1] worker_thread+0x582/0x770 [ 126.157605][ C1] kthread+0x489/0x510 [ 126.161718][ C1] ret_from_fork+0x149/0x290 [ 126.166345][ C1] ret_from_fork_asm+0x1a/0x30 [ 126.171160][ C1] [ 126.173501][ C1] value changed: 0x00000000000c32b8 -> 0x00000000000c32b9 [ 126.180632][ C1] [ 126.182974][ C1] Reported by Kernel Concurrency Sanitizer on: [ 126.189581][ C1] CPU: 1 UID: 0 PID: 3501 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.199456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.209541][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 126.216533][ C1] ================================================================== [ 126.317525][ C0] ================================================================== [ 126.325669][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 126.332905][ C0] [ 126.335247][ C0] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 1: [ 126.343335][ C0] can_can_gw_rcv+0x807/0x820 [ 126.348040][ C0] can_rcv_filter+0xc7/0x4f0 [ 126.352760][ C0] can_receive+0x163/0x1c0 [ 126.357215][ C0] can_rcv+0xed/0x190 [ 126.361263][ C0] __netif_receive_skb+0x120/0x270 [ 126.366422][ C0] process_backlog+0x228/0x420 [ 126.371232][ C0] __napi_poll+0x5f/0x300 [ 126.375610][ C0] net_rx_action+0x425/0x8c0 [ 126.380238][ C0] handle_softirqs+0xba/0x290 [ 126.384964][ C0] do_softirq+0x45/0x60 [ 126.389162][ C0] __local_bh_enable_ip+0x70/0x80 [ 126.394236][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 126.399216][ C0] j1939_sk_sendmsg+0x906/0xc00 [ 126.404119][ C0] __sock_sendmsg+0x145/0x180 [ 126.408823][ C0] ____sys_sendmsg+0x345/0x4a0 [ 126.413632][ C0] ___sys_sendmsg+0x17b/0x1d0 [ 126.418347][ C0] __sys_sendmmsg+0x178/0x300 [ 126.423060][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 126.427952][ C0] x64_sys_call+0x1e28/0x3000 [ 126.432666][ C0] do_syscall_64+0xca/0x2b0 [ 126.437225][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.443157][ C0] [ 126.445503][ C0] read-write to 0xffff8881001537a0 of 4 bytes by interrupt on cpu 0: [ 126.453594][ C0] can_can_gw_rcv+0x807/0x820 [ 126.458306][ C0] can_rcv_filter+0xc7/0x4f0 [ 126.462940][ C0] can_receive+0x163/0x1c0 [ 126.467405][ C0] can_rcv+0xed/0x190 [ 126.471441][ C0] __netif_receive_skb+0x120/0x270 [ 126.476631][ C0] process_backlog+0x228/0x420 [ 126.481433][ C0] __napi_poll+0x5f/0x300 [ 126.485831][ C0] net_rx_action+0x425/0x8c0 [ 126.490451][ C0] handle_softirqs+0xba/0x290 [ 126.495190][ C0] do_softirq+0x45/0x60 [ 126.499389][ C0] __local_bh_enable_ip+0x70/0x80 [ 126.504457][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 126.509434][ C0] batadv_tt_purge+0x2cd/0x610