last executing test programs: 1.086340475s ago: executing program 3 (id=54): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) 1.061062935s ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, r2}, 0x38) 1.045283325s ago: executing program 3 (id=56): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.028646865s ago: executing program 3 (id=57): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 981.267195ms ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 925.809265ms ago: executing program 3 (id=63): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 709.154026ms ago: executing program 2 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0xfffffffd}, &(0x7f00000000c0), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) 684.791227ms ago: executing program 2 (id=73): socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 673.529347ms ago: executing program 4 (id=74): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x1}}, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 639.151037ms ago: executing program 2 (id=75): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 541.792717ms ago: executing program 4 (id=76): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x6de, &(0x7f0000000480)={0x0, 0x6d02, 0x1000, 0x0, 0x323, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4003, @fd=r0, 0x4, 0x0, 0x0, 0x0, 0x0, {0xffed}}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 502.709607ms ago: executing program 4 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x258, &(0x7f0000001140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 463.496938ms ago: executing program 1 (id=78): r0 = io_uring_setup(0x59f8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x39d}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x17) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 436.607037ms ago: executing program 4 (id=80): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = dup3(r1, r0, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="0213000005000000000000000000000003000058"], 0x28}}, 0x0) 416.079888ms ago: executing program 4 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 395.392648ms ago: executing program 4 (id=82): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000001a40), 0x3, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x4, 0x0, 0x0, 0x0, "40fcff008b20aaf0"}, 0x10}}, 0x8000) 365.047238ms ago: executing program 1 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 340.134898ms ago: executing program 1 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 317.650798ms ago: executing program 1 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 305.071238ms ago: executing program 0 (id=87): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 282.672928ms ago: executing program 1 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 265.297059ms ago: executing program 1 (id=89): pipe(&(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x23, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 227.498419ms ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x301, 0x0, 0x25dfdbfd, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 211.408439ms ago: executing program 0 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) 193.829839ms ago: executing program 0 (id=92): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) 180.306359ms ago: executing program 0 (id=93): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) r1 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) fallocate(r1, 0x3, 0x11, 0x2c55) 114.183569ms ago: executing program 2 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x296, &(0x7f0000000540)="$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") r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 71.426599ms ago: executing program 2 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 58.981899ms ago: executing program 0 (id=96): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 0s ago: executing program 2 (id=97): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.474775][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 17.474792][ T29] audit: type=1400 audit(1731576125.164:76): avc: denied { transition } for pid=3193 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.478995][ T29] audit: type=1400 audit(1731576125.164:77): avc: denied { noatsecure } for pid=3193 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.481652][ T29] audit: type=1400 audit(1731576125.174:78): avc: denied { write } for pid=3193 comm="sh" path="pipe:[2224]" dev="pipefs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.484971][ T29] audit: type=1400 audit(1731576125.174:79): avc: denied { rlimitinh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.487585][ T29] audit: type=1400 audit(1731576125.174:80): avc: denied { siginh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.092192][ T29] audit: type=1400 audit(1731576128.784:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 25.513307][ T29] audit: type=1400 audit(1731576133.204:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.514554][ T3301] cgroup: Unknown subsys name 'net' [ 25.536060][ T29] audit: type=1400 audit(1731576133.204:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.563459][ T29] audit: type=1400 audit(1731576133.234:84): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.697010][ T3301] cgroup: Unknown subsys name 'cpuset' [ 25.703188][ T3301] cgroup: Unknown subsys name 'rlimit' [ 25.830842][ T29] audit: type=1400 audit(1731576133.524:85): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.855720][ T29] audit: type=1400 audit(1731576133.524:86): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.876225][ T29] audit: type=1400 audit(1731576133.524:87): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.896599][ T29] audit: type=1400 audit(1731576133.524:88): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.905169][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.916859][ T29] audit: type=1400 audit(1731576133.524:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.950240][ T29] audit: type=1400 audit(1731576133.524:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.973551][ T29] audit: type=1400 audit(1731576133.614:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.008036][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.108904][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.129755][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.165747][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 27.195039][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.278589][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.285711][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.292917][ T3313] bridge_slave_0: entered allmulticast mode [ 27.299764][ T3313] bridge_slave_0: entered promiscuous mode [ 27.310340][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.321554][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.328673][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.335886][ T3320] bridge_slave_0: entered allmulticast mode [ 27.342267][ T3320] bridge_slave_0: entered promiscuous mode [ 27.348990][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.356081][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.363298][ T3313] bridge_slave_1: entered allmulticast mode [ 27.369712][ T3313] bridge_slave_1: entered promiscuous mode [ 27.380816][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.388057][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.395207][ T3324] bridge_slave_0: entered allmulticast mode [ 27.401917][ T3324] bridge_slave_0: entered promiscuous mode [ 27.420428][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.427641][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.434870][ T3320] bridge_slave_1: entered allmulticast mode [ 27.441298][ T3320] bridge_slave_1: entered promiscuous mode [ 27.452328][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.459428][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.466693][ T3324] bridge_slave_1: entered allmulticast mode [ 27.473197][ T3324] bridge_slave_1: entered promiscuous mode [ 27.499100][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.514538][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.521643][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.528887][ T3317] bridge_slave_0: entered allmulticast mode [ 27.535313][ T3317] bridge_slave_0: entered promiscuous mode [ 27.542022][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.549111][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.556366][ T3317] bridge_slave_1: entered allmulticast mode [ 27.562761][ T3317] bridge_slave_1: entered promiscuous mode [ 27.570038][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.584832][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.608115][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.627359][ T3313] team0: Port device team_slave_0 added [ 27.634167][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.653706][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.663456][ T3313] team0: Port device team_slave_1 added [ 27.674763][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.693282][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.700561][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.707761][ T3314] bridge_slave_0: entered allmulticast mode [ 27.714119][ T3314] bridge_slave_0: entered promiscuous mode [ 27.726371][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.744656][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.751768][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.759066][ T3314] bridge_slave_1: entered allmulticast mode [ 27.765447][ T3314] bridge_slave_1: entered promiscuous mode [ 27.772133][ T3320] team0: Port device team_slave_0 added [ 27.778641][ T3320] team0: Port device team_slave_1 added [ 27.789146][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.796253][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.822271][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.833554][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.840545][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.866624][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.877976][ T3324] team0: Port device team_slave_0 added [ 27.903239][ T3317] team0: Port device team_slave_0 added [ 27.912595][ T3324] team0: Port device team_slave_1 added [ 27.927795][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.934754][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.960740][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.972335][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.979346][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.005279][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.016632][ T3317] team0: Port device team_slave_1 added [ 28.028468][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.054300][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.061373][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.087575][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.099268][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.119941][ T3314] team0: Port device team_slave_0 added [ 28.128108][ T3313] hsr_slave_0: entered promiscuous mode [ 28.134011][ T3313] hsr_slave_1: entered promiscuous mode [ 28.151736][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.158799][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.184771][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.201928][ T3314] team0: Port device team_slave_1 added [ 28.212750][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.219819][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.245822][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.257094][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.264107][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.290009][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.309159][ T3320] hsr_slave_0: entered promiscuous mode [ 28.315122][ T3320] hsr_slave_1: entered promiscuous mode [ 28.321166][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.328740][ T3320] Cannot create hsr debugfs directory [ 28.341885][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.348946][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.375005][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.392706][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.399728][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.425676][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.451413][ T3324] hsr_slave_0: entered promiscuous mode [ 28.457557][ T3324] hsr_slave_1: entered promiscuous mode [ 28.463419][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.471160][ T3324] Cannot create hsr debugfs directory [ 28.493129][ T3317] hsr_slave_0: entered promiscuous mode [ 28.499235][ T3317] hsr_slave_1: entered promiscuous mode [ 28.505108][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.512721][ T3317] Cannot create hsr debugfs directory [ 28.562619][ T3314] hsr_slave_0: entered promiscuous mode [ 28.568795][ T3314] hsr_slave_1: entered promiscuous mode [ 28.574655][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.582237][ T3314] Cannot create hsr debugfs directory [ 28.722363][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.731070][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.744185][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.755098][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.782644][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.791484][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.800317][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.809640][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.837292][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.849368][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.863227][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.881106][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.894247][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.909041][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.918081][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.928286][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.965358][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.975320][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.985579][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.996589][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.014863][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.026884][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.060583][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.067746][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.084694][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.091864][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.116591][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.128595][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.145535][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.168204][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.177601][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.188052][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.207572][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.229236][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.240435][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.247702][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.256726][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.263878][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.272717][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.279868][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.299545][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.306748][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.318620][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.325856][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.347128][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.354251][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.364478][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.409544][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.419934][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.449632][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.456779][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.476989][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.484153][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.513893][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.558714][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.580755][ T3320] veth0_vlan: entered promiscuous mode [ 29.634266][ T3320] veth1_vlan: entered promiscuous mode [ 29.648375][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.670039][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.693324][ T3320] veth0_macvtap: entered promiscuous mode [ 29.722495][ T3324] veth0_vlan: entered promiscuous mode [ 29.743023][ T3320] veth1_macvtap: entered promiscuous mode [ 29.756960][ T3324] veth1_vlan: entered promiscuous mode [ 29.765338][ T3317] veth0_vlan: entered promiscuous mode [ 29.788360][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.797312][ T3317] veth1_vlan: entered promiscuous mode [ 29.809104][ T3324] veth0_macvtap: entered promiscuous mode [ 29.826783][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.836233][ T3320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.845002][ T3320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.853879][ T3320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.862662][ T3320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.880685][ T3324] veth1_macvtap: entered promiscuous mode [ 29.895470][ T3317] veth0_macvtap: entered promiscuous mode [ 29.915122][ T3314] veth0_vlan: entered promiscuous mode [ 29.922948][ T3317] veth1_macvtap: entered promiscuous mode [ 29.939926][ T3314] veth1_vlan: entered promiscuous mode [ 29.951698][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.962247][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.973720][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.983923][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.994475][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.006478][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.015111][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.034558][ T3314] veth0_macvtap: entered promiscuous mode [ 30.048674][ T3324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.057539][ T3324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.066393][ T3324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.075163][ T3324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.088097][ T3314] veth1_macvtap: entered promiscuous mode [ 30.114579][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.125111][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.135034][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.145503][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.157303][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.168178][ T3313] veth0_vlan: entered promiscuous mode [ 30.175588][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.186190][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.196031][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.206529][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.216369][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.226817][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.237743][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.245038][ T3454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.261003][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.271545][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.281430][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.292141][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.302869][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.313258][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.323745][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.333643][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.344126][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.353984][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.364551][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.375144][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.383167][ T3313] veth1_vlan: entered promiscuous mode [ 30.391664][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.400516][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.409279][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.418013][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.444080][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.452875][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.461607][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.470372][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.512587][ T3313] veth0_macvtap: entered promiscuous mode [ 30.519307][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 30.519320][ T29] audit: type=1400 audit(1731576138.214:126): avc: denied { map_read map_write } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.545327][ T29] audit: type=1400 audit(1731576138.214:127): avc: denied { prog_load } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.564192][ T29] audit: type=1400 audit(1731576138.214:128): avc: denied { perfmon } for pid=3456 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.584826][ T29] audit: type=1400 audit(1731576138.224:129): avc: denied { prog_run } for pid=3456 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.625123][ T29] audit: type=1326 audit(1731576138.314:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.628634][ T3313] veth1_macvtap: entered promiscuous mode [ 30.648291][ T29] audit: type=1326 audit(1731576138.314:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.665024][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.677365][ T29] audit: type=1326 audit(1731576138.314:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.687797][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.687809][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.687822][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.687831][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.687843][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.687854][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.710878][ T29] audit: type=1326 audit(1731576138.314:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.720723][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.738334][ T29] audit: type=1326 audit(1731576138.434:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.744840][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.751620][ T29] audit: type=1326 audit(1731576138.434:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561673e719 code=0x7ffc0000 [ 30.823274][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.868898][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.878867][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.889486][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.899413][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.909875][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.919938][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.930442][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.943225][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.953458][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.962238][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.964656][ T3465] loop2: detected capacity change from 0 to 512 [ 30.970976][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.986373][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.992667][ T3465] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.008292][ T3465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.047254][ T3465] EXT4-fs (loop2): 1 truncate cleaned up [ 31.082965][ T3465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.144451][ T3482] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.144565][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.162811][ T3479] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 31.203467][ T3488] loop4: detected capacity change from 0 to 256 [ 31.225087][ T3488] FAT-fs (loop4): Directory bread(block 64) failed [ 31.234512][ T3488] FAT-fs (loop4): Directory bread(block 65) failed [ 31.245067][ T3488] FAT-fs (loop4): Directory bread(block 66) failed [ 31.260571][ T3488] FAT-fs (loop4): Directory bread(block 67) failed [ 31.286211][ T3488] FAT-fs (loop4): Directory bread(block 68) failed [ 31.302538][ T3488] FAT-fs (loop4): Directory bread(block 69) failed [ 31.317025][ T3488] FAT-fs (loop4): Directory bread(block 70) failed [ 31.332235][ T3488] FAT-fs (loop4): Directory bread(block 71) failed [ 31.340135][ T3488] FAT-fs (loop4): Directory bread(block 72) failed [ 31.347460][ T3488] FAT-fs (loop4): Directory bread(block 73) failed [ 31.378871][ T3488] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15'. [ 31.398959][ T3507] loop1: detected capacity change from 0 to 2048 [ 31.442872][ T3507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.470375][ T3507] process 'syz.1.23' launched './file1' with NULL argv: empty string added [ 31.474181][ T3517] tipc: Failed to remove unknown binding: 66,1,1/0:4175431350/4175431352 [ 31.487705][ T3517] tipc: Failed to remove unknown binding: 66,1,1/0:4175431350/4175431352 [ 31.553044][ T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.568073][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 31.580367][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.580367][ T28] [ 31.590066][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 31.596147][ T28] EXT4-fs (loop1): Free/Dirty block details [ 31.602063][ T28] EXT4-fs (loop1): free_blocks=2415919104 [ 31.607954][ T28] EXT4-fs (loop1): dirty_blocks=16 [ 31.613128][ T28] EXT4-fs (loop1): Block reservation details [ 31.619215][ T28] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 31.627700][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.653009][ T3529] Zero length message leads to an empty skb [ 31.679702][ T3532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.34'. [ 31.729018][ T3540] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 31.762992][ T3543] hsr0: entered promiscuous mode [ 31.769812][ T3543] hsr_slave_0: left promiscuous mode [ 31.776589][ T3543] hsr_slave_1: left promiscuous mode [ 31.788454][ T3543] hsr0 (unregistering): left promiscuous mode [ 32.064010][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.068603][ T3558] loop2: detected capacity change from 0 to 1024 [ 32.071483][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.085314][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.092766][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.100237][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.107728][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.115155][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.122442][ T3558] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 32.122578][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.122601][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.145270][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.152780][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.160221][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.167733][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.175224][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.182853][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.190287][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.197871][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.205275][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.212825][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.220269][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.227808][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.235255][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.242739][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.250183][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.257674][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.265079][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.272532][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.280082][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.287516][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.294911][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.302328][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.309794][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.319927][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.437061][ T3569] veth1_macvtap: left promiscuous mode [ 32.442666][ T3569] macsec0: entered promiscuous mode [ 32.478699][ T3575] loop2: detected capacity change from 0 to 1024 [ 32.494865][ T3575] EXT4-fs: test_dummy_encryption option not supported [ 32.503258][ T3577] 9pnet_fd: p9_fd_create_tcp (3577): problem connecting socket to 127.0.0.1 [ 32.532133][ T3579] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 32.638383][ T3592] ======================================================= [ 32.638383][ T3592] WARNING: The mand mount option has been deprecated and [ 32.638383][ T3592] and is ignored by this kernel. Remove the mand [ 32.638383][ T3592] option from the mount to silence this warning. [ 32.638383][ T3592] ======================================================= [ 32.661912][ T3595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.957188][ T3619] loop4: detected capacity change from 0 to 256 [ 32.971280][ T3619] vfat: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 33.124446][ T3627] loop4: detected capacity change from 0 to 128 [ 33.254230][ T3640] xt_l2tp: wrong L2TP version: 0 [ 33.316192][ T3649] serio: Serial port ptm0 [ 33.438051][ T3663] loop0: detected capacity change from 0 to 512 [ 33.457093][ T3663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.496102][ T3663] loop0: detected capacity change from 512 to 64 [ 33.507964][ T3667] loop2: detected capacity change from 0 to 128 [ 33.512898][ T3663] syz.0.93: attempt to access beyond end of device [ 33.512898][ T3663] loop0: rw=0, sector=70, nr_sectors = 2 limit=64 [ 33.551541][ T3314] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 33.551618][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 33.565858][ T3314] EXT4-fs error (device loop0): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 33.585944][ T3314] EXT4-fs error (device loop0): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 33.846756][ T3314] ================================================================== [ 33.854876][ T3314] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 33.862171][ T3314] [ 33.864485][ T3314] read-write to 0xffff888106488fd8 of 8 bytes by task 55 on cpu 1: [ 33.872385][ T3314] xas_clear_mark+0x90/0x180 [ 33.876976][ T3314] __folio_start_writeback+0x2e2/0x440 [ 33.882438][ T3314] __block_write_full_folio+0x506/0x8c0 [ 33.887988][ T3314] block_write_full_folio+0x293/0x2b0 [ 33.893468][ T3314] write_cache_pages+0x62/0x100 [ 33.898319][ T3314] blkdev_writepages+0x59/0x90 [ 33.903079][ T3314] do_writepages+0x1d8/0x480 [ 33.907683][ T3314] __writeback_single_inode+0x89/0x850 [ 33.913157][ T3314] writeback_sb_inodes+0x461/0xa30 [ 33.918279][ T3314] __writeback_inodes_wb+0x9a/0x1a0 [ 33.923501][ T3314] wb_writeback+0x274/0x640 [ 33.928030][ T3314] wb_workfn+0x67f/0x940 [ 33.932300][ T3314] process_scheduled_works+0x483/0x9a0 [ 33.937799][ T3314] worker_thread+0x51d/0x6f0 [ 33.942396][ T3314] kthread+0x1d1/0x210 [ 33.946476][ T3314] ret_from_fork+0x4b/0x60 [ 33.950902][ T3314] ret_from_fork_asm+0x1a/0x30 [ 33.955680][ T3314] [ 33.958028][ T3314] read to 0xffff888106488fd8 of 8 bytes by task 3314 on cpu 0: [ 33.965577][ T3314] xas_find_marked+0x216/0x660 [ 33.970380][ T3314] find_get_entry+0x54/0x390 [ 33.975099][ T3314] filemap_get_folios_tag+0x136/0x210 [ 33.980547][ T3314] writeback_iter+0x4b0/0x830 [ 33.985325][ T3314] write_cache_pages+0x4b/0x100 [ 33.990233][ T3314] blkdev_writepages+0x59/0x90 [ 33.995024][ T3314] do_writepages+0x1d8/0x480 [ 33.999640][ T3314] filemap_fdatawrite_wbc+0xdb/0x100 [ 34.004958][ T3314] filemap_flush+0x61/0x90 [ 34.009398][ T3314] sync_blockdev_nowait+0x29/0x40 [ 34.014449][ T3314] sync_filesystem+0xe3/0x190 [ 34.019137][ T3314] generic_shutdown_super+0x46/0x220 [ 34.024442][ T3314] kill_block_super+0x2a/0x70 [ 34.029162][ T3314] ext4_kill_sb+0x44/0x80 [ 34.033512][ T3314] deactivate_locked_super+0x7d/0x1c0 [ 34.038906][ T3314] deactivate_super+0x9f/0xb0 [ 34.043620][ T3314] cleanup_mnt+0x268/0x2e0 [ 34.048054][ T3314] __cleanup_mnt+0x19/0x20 [ 34.052488][ T3314] task_work_run+0x13a/0x1a0 [ 34.057113][ T3314] do_exit+0x5dd/0x17f0 [ 34.061315][ T3314] do_group_exit+0x142/0x150 [ 34.065942][ T3314] __x64_sys_exit_group+0x1f/0x20 [ 34.071026][ T3314] x64_sys_call+0x2d5d/0x2d60 [ 34.075735][ T3314] do_syscall_64+0xc9/0x1c0 [ 34.080258][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.086197][ T3314] [ 34.088564][ T3314] value changed: 0x000000000000000f -> 0x0000000000000008 [ 34.095691][ T3314] [ 34.098027][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 34.104204][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 34.115083][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.125164][ T3314] ================================================================== [ 34.138502][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.150736][ T3434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.162914][ T3314] syz-executor (3314) used greatest stack depth: 10840 bytes left [ 34.209418][ T3434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.249210][ T3434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.309684][ T3434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.406001][ T3434] bridge_slave_1: left allmulticast mode [ 34.411723][ T3434] bridge_slave_1: left promiscuous mode [ 34.417497][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.438695][ T3434] bridge_slave_0: left allmulticast mode [ 34.444385][ T3434] bridge_slave_0: left promiscuous mode [ 34.450105][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.598402][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.610214][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.621597][ T3434] bond0 (unregistering): Released all slaves [ 34.677895][ T3434] hsr_slave_0: left promiscuous mode [ 34.697007][ T3434] hsr_slave_1: left promiscuous mode [ 34.702950][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.710425][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.737373][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.744929][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.758403][ T3434] veth1_macvtap: left promiscuous mode [ 34.763948][ T3434] veth0_macvtap: left promiscuous mode [ 34.769599][ T3434] veth1_vlan: left promiscuous mode [ 34.774890][ T3434] veth0_vlan: left promiscuous mode [ 34.872843][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 34.884171][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 35.240384][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.300152][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.360757][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.409267][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.485841][ T11] bridge_slave_1: left allmulticast mode [ 35.491527][ T11] bridge_slave_1: left promiscuous mode [ 35.497219][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.512828][ T11] bridge_slave_0: left allmulticast mode [ 35.518539][ T11] bridge_slave_0: left promiscuous mode [ 35.524343][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.628610][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.640204][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.650769][ T11] bond0 (unregistering): Released all slaves [ 35.727571][ T11] hsr_slave_0: left promiscuous mode [ 35.733277][ T11] hsr_slave_1: left promiscuous mode [ 35.747208][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.754659][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.777132][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.784601][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.793818][ T11] veth0_macvtap: left promiscuous mode [ 35.799390][ T11] veth1_vlan: left promiscuous mode [ 35.804613][ T11] veth0_vlan: left promiscuous mode [ 35.900750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 35.913101][ T11] team0 (unregistering): Port device team_slave_0 removed