last executing test programs: 2.91737179s ago: executing program 2 (id=94): keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8010) socket(0x400000000010, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.737746697s ago: executing program 2 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 2.457412133s ago: executing program 2 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.507938591s ago: executing program 2 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0xfffffffffffffdc0) ioctl$TCSETA(r2, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.093068819s ago: executing program 4 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}}}}, 0x32) 940.952333ms ago: executing program 4 (id=142): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname$unix(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 940.548693ms ago: executing program 1 (id=143): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") 940.159413ms ago: executing program 2 (id=144): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xc0, &(0x7f0000000040), 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x20000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x1800, r3}) 860.768971ms ago: executing program 4 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 838.373303ms ago: executing program 1 (id=147): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102030400fefdffffff000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 838.046343ms ago: executing program 4 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 733.010633ms ago: executing program 2 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfdef) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 724.360803ms ago: executing program 1 (id=151): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001"], 0x64}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 700.264355ms ago: executing program 4 (id=153): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 557.099219ms ago: executing program 3 (id=154): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000020000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, 0x0) 545.47322ms ago: executing program 3 (id=156): socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000100f300000000002e00000008000200", @ANYRES32=r1], 0x1c}}, 0x0) 517.984802ms ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 495.644424ms ago: executing program 4 (id=158): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) 421.039701ms ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r2, 0x1) 420.598831ms ago: executing program 3 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 413.319722ms ago: executing program 3 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 411.244282ms ago: executing program 1 (id=163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 349.930978ms ago: executing program 0 (id=164): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x354a, &(0x7f0000000100)) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000007080)=[{}], 0x1, 0xffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 277.092084ms ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 270.778545ms ago: executing program 3 (id=166): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, &(0x7f0000000000)=0x4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000080)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) 257.468197ms ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) 189.032023ms ago: executing program 0 (id=168): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x44, &(0x7f00000012c0)=""/68, 0x41000, 0x16, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x1, 0x6, 0x2, 0x4}, 0x10, 0x13e2f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x10, 0xa, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 175.101374ms ago: executing program 0 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 94.160692ms ago: executing program 0 (id=170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000b0c0000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='percpu_free_percpu\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x59, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=171): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5e, &(0x7f0000000300)={[{@debug}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x1, 0x44b, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001fc0)=""/4086, 0xff6) 0s ago: executing program 0 (id=172): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) kernel console output (not intermixed with test programs): [ 18.249304][ T29] audit: type=1400 audit(1727871418.119:81): avc: denied { read } for pid=2948 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 21.779110][ T29] audit: type=1400 audit(1727871421.649:82): avc: denied { mounton } for pid=3253 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.780024][ T3253] cgroup: Unknown subsys name 'net' [ 21.801865][ T29] audit: type=1400 audit(1727871421.649:83): avc: denied { mount } for pid=3253 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829162][ T29] audit: type=1400 audit(1727871421.679:84): avc: denied { unmount } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.964562][ T3253] cgroup: Unknown subsys name 'cpuset' [ 21.970572][ T3253] cgroup: Unknown subsys name 'rlimit' [ 22.097791][ T29] audit: type=1400 audit(1727871421.969:85): avc: denied { setattr } for pid=3253 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.121097][ T29] audit: type=1400 audit(1727871421.969:86): avc: denied { create } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.127912][ T3256] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.141519][ T29] audit: type=1400 audit(1727871421.969:87): avc: denied { write } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.170449][ T29] audit: type=1400 audit(1727871421.969:88): avc: denied { read } for pid=3253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.190688][ T29] audit: type=1400 audit(1727871421.969:89): avc: denied { mounton } for pid=3253 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.215487][ T29] audit: type=1400 audit(1727871421.969:90): avc: denied { mount } for pid=3253 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.238753][ T29] audit: type=1400 audit(1727871422.019:91): avc: denied { relabelto } for pid=3256 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.267826][ T3253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.347628][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 23.366759][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 23.375533][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 23.388089][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 23.476183][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.483251][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.490476][ T3269] bridge_slave_0: entered allmulticast mode [ 23.496823][ T3269] bridge_slave_0: entered promiscuous mode [ 23.507532][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.514606][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.521811][ T3269] bridge_slave_1: entered allmulticast mode [ 23.528408][ T3269] bridge_slave_1: entered promiscuous mode [ 23.544740][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.551845][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.558998][ T3270] bridge_slave_0: entered allmulticast mode [ 23.565396][ T3270] bridge_slave_0: entered promiscuous mode [ 23.584046][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591103][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.598297][ T3263] bridge_slave_0: entered allmulticast mode [ 23.604641][ T3263] bridge_slave_0: entered promiscuous mode [ 23.611109][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.618173][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.625343][ T3270] bridge_slave_1: entered allmulticast mode [ 23.631678][ T3270] bridge_slave_1: entered promiscuous mode [ 23.652039][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659178][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.666277][ T3264] bridge_slave_0: entered allmulticast mode [ 23.672451][ T3264] bridge_slave_0: entered promiscuous mode [ 23.678829][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.685975][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.693024][ T3263] bridge_slave_1: entered allmulticast mode [ 23.699391][ T3263] bridge_slave_1: entered promiscuous mode [ 23.719463][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.728578][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.735632][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.742781][ T3264] bridge_slave_1: entered allmulticast mode [ 23.749186][ T3264] bridge_slave_1: entered promiscuous mode [ 23.760525][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.776507][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 23.786486][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.796288][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.806138][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.816699][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.831222][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.860636][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.877082][ T3269] team0: Port device team_slave_0 added [ 23.883203][ T3270] team0: Port device team_slave_0 added [ 23.889493][ T3263] team0: Port device team_slave_0 added [ 23.896770][ T3263] team0: Port device team_slave_1 added [ 23.912372][ T3270] team0: Port device team_slave_1 added [ 23.918663][ T3269] team0: Port device team_slave_1 added [ 23.945788][ T3264] team0: Port device team_slave_0 added [ 23.972301][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.979431][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.005406][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.016601][ T3264] team0: Port device team_slave_1 added [ 24.026150][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.033099][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.059073][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.070290][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.077305][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.103380][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.114440][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.121403][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.147287][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.158309][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.165307][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.191269][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.212532][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.219507][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.245403][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.262762][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.269777][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.295667][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.306343][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.313393][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.320613][ T3267] bridge_slave_0: entered allmulticast mode [ 24.326893][ T3267] bridge_slave_0: entered promiscuous mode [ 24.333783][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.340857][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.348084][ T3267] bridge_slave_1: entered allmulticast mode [ 24.354428][ T3267] bridge_slave_1: entered promiscuous mode [ 24.371207][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.378237][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.404139][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.427169][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.452480][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.475476][ T3270] hsr_slave_0: entered promiscuous mode [ 24.481367][ T3270] hsr_slave_1: entered promiscuous mode [ 24.497674][ T3263] hsr_slave_0: entered promiscuous mode [ 24.503645][ T3263] hsr_slave_1: entered promiscuous mode [ 24.509698][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.517258][ T3263] Cannot create hsr debugfs directory [ 24.525031][ T3269] hsr_slave_0: entered promiscuous mode [ 24.530976][ T3269] hsr_slave_1: entered promiscuous mode [ 24.536824][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.544381][ T3269] Cannot create hsr debugfs directory [ 24.558728][ T3267] team0: Port device team_slave_0 added [ 24.571843][ T3264] hsr_slave_0: entered promiscuous mode [ 24.577843][ T3264] hsr_slave_1: entered promiscuous mode [ 24.583689][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.591250][ T3264] Cannot create hsr debugfs directory [ 24.597168][ T3267] team0: Port device team_slave_1 added [ 24.629547][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.636511][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.662440][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.673774][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.680864][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.706825][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.770511][ T3267] hsr_slave_0: entered promiscuous mode [ 24.776547][ T3267] hsr_slave_1: entered promiscuous mode [ 24.782354][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.789938][ T3267] Cannot create hsr debugfs directory [ 24.900045][ T3270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.908316][ T3270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.918826][ T3270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.934849][ T3270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.952786][ T3263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.964344][ T3263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.975284][ T3263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.985767][ T3263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.002066][ T3269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.011021][ T3269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.019336][ T3269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.031747][ T3269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.066766][ T3264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.079131][ T3264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.087411][ T3264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.096185][ T3264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.123096][ T3267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.132255][ T3267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.141113][ T3267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.150308][ T3267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.168121][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.195389][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.204505][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.211525][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.233163][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.240289][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.255212][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.274879][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.289621][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.301487][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.308559][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.323697][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.330736][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.354510][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.376200][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.385279][ T3263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.395655][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.408770][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.415888][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.433974][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.441018][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.457671][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.473031][ T3269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.483581][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.503696][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.537261][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.545128][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.552168][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.561726][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.568819][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.586133][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.593267][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.601955][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.609051][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.627978][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.651231][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.665876][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.675660][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.756465][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.812165][ T3270] veth0_vlan: entered promiscuous mode [ 25.831577][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.842122][ T3263] veth0_vlan: entered promiscuous mode [ 25.851064][ T3270] veth1_vlan: entered promiscuous mode [ 25.865890][ T3263] veth1_vlan: entered promiscuous mode [ 25.878813][ T3269] veth0_vlan: entered promiscuous mode [ 25.895598][ T3270] veth0_macvtap: entered promiscuous mode [ 25.909222][ T3269] veth1_vlan: entered promiscuous mode [ 25.917204][ T3270] veth1_macvtap: entered promiscuous mode [ 25.935167][ T3263] veth0_macvtap: entered promiscuous mode [ 25.946544][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.959580][ T3263] veth1_macvtap: entered promiscuous mode [ 25.971327][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.982795][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.993540][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.006529][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.017851][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.028374][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.039094][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.047504][ T3270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.056252][ T3270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.064965][ T3270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.073733][ T3270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.096379][ T3269] veth0_macvtap: entered promiscuous mode [ 26.103074][ T3267] veth0_vlan: entered promiscuous mode [ 26.112421][ T3263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.121273][ T3263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.130049][ T3263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.138787][ T3263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.150668][ T3264] veth0_vlan: entered promiscuous mode [ 26.160842][ T3264] veth1_vlan: entered promiscuous mode [ 26.169441][ T3269] veth1_macvtap: entered promiscuous mode [ 26.180157][ T3267] veth1_vlan: entered promiscuous mode [ 26.203584][ T3264] veth0_macvtap: entered promiscuous mode [ 26.211575][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.222048][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.231943][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.242367][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.253338][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.262501][ T3263] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.271413][ T3264] veth1_macvtap: entered promiscuous mode [ 26.285759][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.296263][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.306185][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.316617][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.327040][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.345567][ T3269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.354410][ T3269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.363182][ T3269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.371899][ T3269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.388994][ T3267] veth0_macvtap: entered promiscuous mode [ 26.411828][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.411847][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.411855][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.411867][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.411875][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.411887][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.412486][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.481433][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.491940][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.501866][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.512455][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.522276][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.532767][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.543350][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.562232][ T3267] veth1_macvtap: entered promiscuous mode [ 26.584948][ T3264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.593688][ T3264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.602512][ T3264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.611277][ T3264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.631663][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.642132][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.652025][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.662553][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.672466][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.682909][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.692799][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.703219][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.715319][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.734588][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.745071][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.754989][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.765464][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.775316][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.785783][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.795599][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.806011][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.816914][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.832834][ T3267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.832872][ T3267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.832953][ T3267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.832983][ T3267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.919500][ T3440] loop2: detected capacity change from 0 to 1024 [ 26.919936][ T3440] EXT4-fs: Ignoring removed nobh option [ 26.944173][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 26.944187][ T29] audit: type=1326 audit(1727871426.809:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.944322][ T29] audit: type=1326 audit(1727871426.809:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949296][ T29] audit: type=1326 audit(1727871426.819:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949328][ T29] audit: type=1326 audit(1727871426.819:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949352][ T29] audit: type=1326 audit(1727871426.819:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949376][ T29] audit: type=1326 audit(1727871426.819:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01251bc990 code=0x7ffc0000 [ 26.949397][ T29] audit: type=1326 audit(1727871426.819:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01251bc990 code=0x7ffc0000 [ 26.949427][ T29] audit: type=1326 audit(1727871426.819:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949450][ T29] audit: type=1326 audit(1727871426.819:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.949502][ T29] audit: type=1326 audit(1727871426.819:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01251bdff9 code=0x7ffc0000 [ 26.974130][ T3440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.976929][ T3440] Non-string source [ 27.348603][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.821927][ T3515] loop4: detected capacity change from 0 to 1024 [ 27.828624][ T3515] EXT4-fs: Ignoring removed nobh option [ 27.848026][ T3515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.880304][ T3515] Non-string source [ 27.910688][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.977417][ T3533] loop2: detected capacity change from 0 to 1024 [ 28.020722][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 28.092215][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 28.218444][ T3563] loop0: detected capacity change from 0 to 1024 [ 28.226549][ T3565] syz.1.54[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.226684][ T3565] syz.1.54[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.237106][ T3563] EXT4-fs: Ignoring removed nobh option [ 28.251473][ T3565] syz.1.54[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.260315][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.288560][ T3563] Non-string source [ 28.298884][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.380215][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.380257][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.391834][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.404891][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.416942][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.430419][ T3580] syz.1.67[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.470567][ T3584] loop1: detected capacity change from 0 to 2048 [ 28.509654][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.545479][ T3593] pim6reg1: entered promiscuous mode [ 28.550821][ T3593] pim6reg1: entered allmulticast mode [ 28.600429][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.645200][ T3599] loop1: detected capacity change from 0 to 512 [ 28.656249][ T3599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.669221][ T3599] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.687205][ T3599] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.63: corrupted inode contents [ 28.699405][ T3599] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #18: comm syz.1.63: mark_inode_dirty error [ 28.710951][ T3599] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.63: corrupted inode contents [ 28.722943][ T3599] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #18: comm syz.1.63: mark_inode_dirty error [ 28.735118][ T3599] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #18: comm syz.1.63: mark inode dirty (error -117) [ 28.748394][ T3599] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 28.778477][ T3599] syz.1.63 (3599) used greatest stack depth: 10728 bytes left [ 28.786772][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.126099][ T3620] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.228167][ T3630] netlink: 'syz.1.75': attribute type 27 has an invalid length. [ 29.276563][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.283711][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.326034][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.336562][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.371533][ T3630] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.380522][ T3630] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.389489][ T3630] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.398442][ T3630] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.493702][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.502067][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.512009][ T3635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 29.595679][ T3654] loop3: detected capacity change from 0 to 1024 [ 29.618989][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 29.693190][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 29.759686][ C0] ------------[ cut here ]------------ [ 29.765214][ C0] refcount_t: underflow; use-after-free. [ 29.766599][ T3669] loop3: detected capacity change from 0 to 1764 [ 29.771026][ C0] WARNING: CPU: 0 PID: 3672 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 29.783040][ T3669] iso9660: Bad value for 'uid' [ 29.786537][ C0] Modules linked in: [ 29.791299][ T3669] iso9660: Bad value for 'uid' [ 29.795175][ C0] CPU: 0 UID: 0 PID: 3672 Comm: syz.4.90 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 29.810506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.820615][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 29.826817][ C0] Code: 72 ff ff ff e8 7b 87 71 ff 48 c7 c7 be d6 b2 86 e8 0f 6d 8a ff c6 05 26 2d f4 04 01 90 48 c7 c7 02 a6 1b 86 e8 4b 4c 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 4c 87 71 ff 48 c7 c7 bb d6 b2 86 e8 [ 29.846466][ C0] RSP: 0018:ffffc90000003b60 EFLAGS: 00010246 [ 29.852530][ C0] RAX: 3b2ec9e699b4ed00 RBX: ffff888115a90ce4 RCX: ffff888115254200 [ 29.860509][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.868502][ C0] RBP: 0000000000000003 R08: ffffffff8111f757 R09: 0000000000000000 [ 29.876490][ C0] R10: 0001ffffffffffff R11: 0001ffff88bc7950 R12: ffff88811519a468 [ 29.884503][ C0] R13: ffff888104782000 R14: ffff888115a90ce4 R15: 0000000000000000 [ 29.892489][ C0] FS: 00007fd29eea76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 29.901484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.908099][ C0] CR2: 0000000020002700 CR3: 00000001155b6000 CR4: 00000000003506f0 [ 29.916099][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.924115][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.932102][ C0] Call Trace: [ 29.935414][ C0] [ 29.938264][ C0] ? __warn+0x141/0x350 [ 29.942439][ C0] ? report_bug+0x315/0x420 [ 29.947000][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 29.952558][ C0] ? handle_bug+0x60/0x90 [ 29.956926][ C0] ? exc_invalid_op+0x1a/0x50 [ 29.961608][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 29.966670][ C0] ? __warn_printk+0x167/0x1b0 [ 29.971461][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 29.977056][ C0] sk_skb_reason_drop+0xe9/0x290 [ 29.982041][ C0] j1939_session_put+0x157/0x2a0 [ 29.987018][ C0] j1939_xtp_rx_eoma+0x1f0/0x260 [ 29.991999][ C0] j1939_tp_recv+0x651/0xa80 [ 29.996723][ C0] j1939_can_recv+0x45f/0x550 [ 29.997425][ T3683] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 30.001396][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 30.014165][ C0] can_rcv_filter+0x225/0x4c0 [ 30.018832][ C0] can_receive+0x182/0x1f0 [ 30.023266][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 30.027794][ C0] can_rcv+0xe7/0x180 [ 30.031784][ C0] ? __pfx_can_rcv+0x10/0x10 [ 30.036382][ C0] __netif_receive_skb+0x123/0x280 [ 30.041526][ C0] process_backlog+0x22e/0x440 [ 30.046311][ C0] __napi_poll+0x63/0x3c0 [ 30.050667][ C0] ? net_rx_action+0x376/0x7f0 [ 30.055439][ C0] net_rx_action+0x3a1/0x7f0 [ 30.060057][ C0] handle_softirqs+0xbf/0x280 [ 30.064743][ C0] irq_exit_rcu+0x3e/0x90 [ 30.069090][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 30.074740][ C0] [ 30.077665][ C0] [ 30.080578][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 30.086585][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60 [ 30.093013][ C0] Code: 86 e8 37 c1 17 fc 48 83 3d 17 e7 32 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d 3b 81 d1 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e [ 30.112649][ C0] RSP: 0018:ffffc9000c463af0 EFLAGS: 00000286 [ 30.118727][ C0] RAX: 0000000000000001 RBX: ffff888237c1ff80 RCX: ffffffff853161e9 [ 30.126704][ C0] RDX: 0000000000000799 RSI: 0000000000000000 RDI: ffff888237c1ff80 [ 30.134696][ C0] RBP: ffff888237c1ff80 R08: 0001ffff8664490f R09: 0000000000000000 [ 30.142677][ C0] R10: 0001ffffffffffff R11: ffffffff810c1250 R12: ffff88811519a0e8 [ 30.150682][ C0] R13: 0000000000000246 R14: 0000000000000246 R15: ffff88811519a0b8 [ 30.158681][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 30.164075][ C0] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 30.169897][ C0] hrtimer_start_range_ns+0x53d/0x580 [ 30.175285][ C0] j1939_tp_schedule_txtimer+0x67/0xa0 [ 30.180768][ C0] j1939_sk_sendmsg+0x954/0xc00 [ 30.185630][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 30.191027][ C0] __sock_sendmsg+0x140/0x180 [ 30.195714][ C0] ____sys_sendmsg+0x312/0x410 [ 30.200492][ C0] __sys_sendmsg+0x1d9/0x270 [ 30.205104][ C0] __x64_sys_sendmsg+0x46/0x50 [ 30.209882][ C0] x64_sys_call+0x2689/0x2d60 [ 30.214579][ C0] do_syscall_64+0xc9/0x1c0 [ 30.219118][ C0] ? clear_bhb_loop+0x55/0xb0 [ 30.223789][ C0] ? clear_bhb_loop+0x55/0xb0 [ 30.228497][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.234409][ C0] RIP: 0033:0x7fd2a022dff9 [ 30.238837][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.258546][ C0] RSP: 002b:00007fd29eea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.266974][ C0] RAX: ffffffffffffffda RBX: 00007fd2a03e5f80 RCX: 00007fd2a022dff9 [ 30.274958][ C0] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000003 [ 30.282937][ C0] RBP: 00007fd2a02a0296 R08: 0000000000000000 R09: 0000000000000000 [ 30.290945][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.298941][ C0] R13: 0000000000000000 R14: 00007fd2a03e5f80 R15: 00007ffefa647e78 [ 30.306931][ C0] [ 30.309960][ C0] ---[ end trace 0000000000000000 ]--- [ 30.391084][ T3696] loop0: detected capacity change from 0 to 512 [ 30.398002][ T3687] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 30.419427][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.432991][ T3694] bridge0: port 3(syz_tun) entered blocking state [ 30.439503][ T3694] bridge0: port 3(syz_tun) entered disabled state [ 30.439850][ T3696] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.456490][ T3694] syz_tun: entered allmulticast mode [ 30.465192][ T3694] syz_tun: entered promiscuous mode [ 30.470667][ T3694] bridge0: port 3(syz_tun) entered blocking state [ 30.477141][ T3694] bridge0: port 3(syz_tun) entered forwarding state [ 30.484149][ T3696] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.99: corrupted inode contents [ 30.496080][ T3696] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.99: mark_inode_dirty error [ 30.513697][ T3696] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.99: corrupted inode contents [ 30.534144][ T3696] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3005: inode #19: comm syz.0.99: mark_inode_dirty error [ 30.573513][ T3696] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3008: inode #19: comm syz.0.99: mark inode dirty (error -117) [ 30.579434][ T3709] loop1: detected capacity change from 0 to 512 [ 30.586537][ T3696] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 30.602922][ T3707] loop4: detected capacity change from 0 to 128 [ 30.624268][ T3707] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.632151][ T3707] FAT-fs (loop4): Filesystem has been set read-only [ 30.639718][ T3707] syz.4.103: attempt to access beyond end of device [ 30.639718][ T3707] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 30.653413][ T3707] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.653632][ T3709] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 30.661241][ T3707] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.677606][ T3709] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 30.682256][ T3707] syz.4.103: attempt to access beyond end of device [ 30.682256][ T3707] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.700798][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.710545][ T3707] syz.4.103: attempt to access beyond end of device [ 30.710545][ T3707] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.713695][ T3709] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.113: attempt to clear invalid blocks 1024 len 1 [ 30.749664][ T3717] loop0: detected capacity change from 0 to 512 [ 30.760608][ T3717] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.773669][ T3717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.784795][ T3709] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.113: invalid indirect mapped block 1819239214 (level 0) [ 30.798160][ T3717] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.799860][ T3709] EXT4-fs (loop1): 1 truncate cleaned up [ 30.818324][ T3717] EXT4-fs (loop0): 1 truncate cleaned up [ 30.824514][ T3717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.843295][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.891683][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.921246][ T3726] loop4: detected capacity change from 0 to 256 [ 30.928195][ T3726] ======================================================= [ 30.928195][ T3726] WARNING: The mand mount option has been deprecated and [ 30.928195][ T3726] and is ignored by this kernel. Remove the mand [ 30.928195][ T3726] option from the mount to silence this warning. [ 30.928195][ T3726] ======================================================= [ 30.973531][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.359048][ T3770] pim6reg1: entered promiscuous mode [ 31.364483][ T3770] pim6reg1: entered allmulticast mode [ 31.644308][ C0] ------------[ cut here ]------------ [ 31.649801][ C0] WARNING: CPU: 0 PID: 3792 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x444/0x450 [ 31.659336][ C0] Modules linked in: [ 31.663239][ C0] CPU: 0 UID: 0 PID: 3792 Comm: syz.3.135 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 31.675340][ C0] Tainted: [W]=WARN [ 31.679136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 31.689210][ C0] RIP: 0010:inet_sock_destruct+0x444/0x450 [ 31.695084][ C0] Code: 0f 0b 90 e9 ab fe ff ff e8 69 3a c3 fc 90 0f 0b 90 e9 c5 fe ff ff e8 5b 3a c3 fc 90 0f 0b 90 e9 df fe ff ff e8 4d 3a c3 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 [ 31.714922][ C0] RSP: 0000:ffffc90000003e38 EFLAGS: 00010246 [ 31.721002][ C0] RAX: ffffffff846cf6b3 RBX: 00000000000003ff RCX: ffff888107a4c200 [ 31.729018][ C0] RDX: 0000000000000100 RSI: 00000000000003ff RDI: 0000000000000000 [ 31.737027][ C0] RBP: ffff88810382d200 R08: ffffffff846cf5e4 R09: 0000000000000000 [ 31.745052][ C0] R10: 0001ffffffffffff R11: 000188810382d360 R12: ffff88810382d4e8 [ 31.753035][ C0] R13: ffff88810382d4e8 R14: ffff88810382d228 R15: ffff88810382d212 [ 31.761047][ C0] FS: 00005555682c1500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 31.770023][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.776636][ C0] CR2: 0000001b2f920000 CR3: 000000011592c000 CR4: 00000000003506f0 [ 31.784633][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.792652][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.800654][ C0] Call Trace: [ 31.803945][ C0] [ 31.806813][ C0] ? __warn+0x141/0x350 [ 31.810997][ C0] ? report_bug+0x315/0x420 [ 31.815528][ C0] ? inet_sock_destruct+0x444/0x450 [ 31.820771][ C0] ? handle_bug+0x60/0x90 [ 31.825125][ C0] ? exc_invalid_op+0x1a/0x50 [ 31.829847][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 31.834946][ C0] ? inet_sock_destruct+0x374/0x450 [ 31.840168][ C0] ? inet_sock_destruct+0x443/0x450 [ 31.845393][ C0] ? inet_sock_destruct+0x444/0x450 [ 31.850602][ C0] ? inet_sock_destruct+0x443/0x450 [ 31.855818][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 31.860982][ C0] inet6_sock_destruct+0x1d/0x30 [ 31.865959][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 31.871595][ C0] __sk_destruct+0x3d/0x440 [ 31.876153][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 31.881297][ C0] rcu_core+0x57b/0xbc0 [ 31.885501][ C0] rcu_core_si+0xd/0x20 [ 31.889679][ C0] handle_softirqs+0xbf/0x280 [ 31.894385][ C0] irq_exit_rcu+0x3e/0x90 [ 31.898739][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 31.904421][ C0] [ 31.907353][ C0] [ 31.910280][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 31.916305][ C0] RIP: 0010:__pti_set_user_pgtbl+0x0/0xa0 [ 31.922040][ C0] Code: 41 5e 41 5f 5d c3 cc cc cc cc e8 3b 0b 20 04 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 57 41 56 53 49 89 f6 48 89 fb e8 ec 4c 21 00 48 89 [ 31.941676][ C0] RSP: 0000:ffffc9000ce43d88 EFLAGS: 00000293 [ 31.947777][ C0] RAX: ffffffff8159622e RBX: 00000001153c4067 RCX: ffff888107a4c200 [ 31.955783][ C0] RDX: 0000000000000000 RSI: 00000001153c4067 RDI: ffff88811592c000 [ 31.963758][ C0] RBP: 0000777f80000000 R08: ffffffff81596189 R09: 0000000000000000 [ 31.971752][ C0] R10: 0001ffffffffffff R11: 0001c9000ce43d98 R12: ffff888114512f40 [ 31.979754][ C0] R13: ffffea000454f100 R14: 0000000000000000 R15: ffff88811592c000 [ 31.987776][ C0] ? __pud_alloc+0x159/0x3e0 [ 31.992388][ C0] ? __pud_alloc+0x1fe/0x3e0 [ 31.997014][ C0] __pud_alloc+0x209/0x3e0 [ 32.001482][ C0] handle_mm_fault+0x18d1/0x2a80 [ 32.006552][ C0] exc_page_fault+0x3b9/0x650 [ 32.011267][ C0] asm_exc_page_fault+0x26/0x30 [ 32.016175][ C0] RIP: 0033:0x7f0125091b84 [ 32.020614][ C0] Code: 20 00 48 89 df 74 e7 e8 4a c4 ff ff 84 c0 74 d7 80 3d 18 5f 2e 00 00 48 8b 83 a8 00 00 00 75 be 8b 00 89 83 9c 00 00 00 eb bd <89> 32 e9 dc f1 ff ff 64 f0 83 04 25 90 ff ff ff 01 64 48 8b 04 25 [ 32.040252][ C0] RSP: 002b:00007fffbaf90780 EFLAGS: 00010246 [ 32.046368][ C0] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 00007f01251bcc60 [ 32.054361][ C0] RDX: 0000001b2f920000 RSI: 0000000000400000 RDI: 00007f01252b1f90 [ 32.062346][ C0] RBP: 00007fffbaf909dc R08: 0000000000000004 R09: 0000000000040000 [ 32.070352][ C0] R10: 0000000000000011 R11: 0000000000000202 R12: 0000000000000032 [ 32.078348][ C0] R13: 0000000000007b7b R14: 0000000000007b70 R15: 00007fffbaf90a30 [ 32.086362][ C0] [ 32.089381][ C0] ---[ end trace 0000000000000000 ]--- [ 32.098414][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 32.098425][ T29] audit: type=1400 audit(1727871431.969:556): avc: denied { write } for pid=3799 comm="syz.0.138" path="socket:[5223]" dev="sockfs" ino=5223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.128979][ T29] audit: type=1400 audit(1727871431.969:557): avc: denied { read } for pid=3799 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.158707][ T29] audit: type=1400 audit(1727871432.029:558): avc: denied { name_bind } for pid=3802 comm="syz.1.139" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.202221][ T3808] loop0: detected capacity change from 0 to 512 [ 32.219443][ T3808] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 32.227900][ T29] audit: type=1400 audit(1727871432.099:559): avc: denied { create } for pid=3805 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.249309][ T29] audit: type=1400 audit(1727871432.119:560): avc: denied { connect } for pid=3805 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.304040][ T3814] loop1: detected capacity change from 0 to 1024 [ 32.311050][ T3814] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.322069][ T3814] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.328123][ T3817] loop2: detected capacity change from 0 to 512 [ 32.335499][ T3814] JBD2: no valid journal superblock found [ 32.343571][ T3814] EXT4-fs (loop1): Could not load journal inode [ 32.361650][ T29] audit: type=1400 audit(1727871432.229:561): avc: denied { getopt } for pid=3811 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.414359][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.431971][ T3817] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.469993][ T29] audit: type=1400 audit(1727871432.339:562): avc: denied { write } for pid=3816 comm="syz.2.144" name="cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.507513][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.550747][ T3837] loop4: detected capacity change from 0 to 512 [ 32.564032][ T29] audit: type=1400 audit(1727871432.429:563): avc: denied { read write } for pid=3838 comm="syz.3.152" name="rdma_cm" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.595243][ T29] audit: type=1400 audit(1727871432.459:564): avc: denied { open } for pid=3838 comm="syz.3.152" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.619248][ T29] audit: type=1400 audit(1727871432.459:565): avc: denied { create } for pid=3838 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.670798][ T3844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.696124][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.709015][ T3837] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.737222][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.758397][ T3853] mmap: syz.3.157 (3853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.861946][ T3864] tipc: Started in network mode [ 32.866910][ T3864] tipc: Node identity ac1414aa, cluster identity 4711 [ 32.876026][ T3859] syz.0.160 (3859) used greatest stack depth: 10128 bytes left [ 32.885494][ T3864] tipc: Enabled bearer , priority 10 [ 32.898528][ T3864] tipc: Disabling bearer [ 32.908619][ T3869] syz.0.164[3869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.074218][ T3883] loop0: detected capacity change from 0 to 512 [ 33.093179][ T3883] EXT4-fs: Ignoring removed i_version option [ 33.099271][ T3883] EXT4-fs: Ignoring removed nobh option [ 33.106352][ T3883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.117503][ T3883] EXT4-fs (loop0): 1 truncate cleaned up [ 33.123567][ T3883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.149044][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.192745][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.202381][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.247292][ T3889] loop0: detected capacity change from 0 to 512 [ 33.253772][ T3889] EXT4-fs: Ignoring removed i_version option [ 33.262087][ T3889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 33.270125][ T3889] System zones: 1-12 [ 33.274892][ T3889] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.171: bg 0: block 131: padding at end of block bitmap is not set [ 33.289605][ T3889] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 33.299651][ T3889] EXT4-fs (loop0): 1 truncate cleaned up [ 33.305696][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.334854][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.353099][ T3892] loop0: detected capacity change from 0 to 512 [ 33.359791][ T3892] ================================================================== [ 33.367879][ T3892] BUG: KCSAN: data-race in fsnotify / fsnotify_put_mark [ 33.374825][ T3892] [ 33.377157][ T3892] write to 0xffff888101441150 of 4 bytes by task 3257 on cpu 1: [ 33.384783][ T3892] fsnotify_put_mark+0x2db/0x5d0 [ 33.389728][ T3892] __se_sys_inotify_rm_watch+0xf9/0x170 [ 33.395276][ T3892] __x64_sys_inotify_rm_watch+0x31/0x40 [ 33.400824][ T3892] x64_sys_call+0x1ae0/0x2d60 [ 33.405513][ T3892] do_syscall_64+0xc9/0x1c0 [ 33.410012][ T3892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.415908][ T3892] [ 33.418228][ T3892] read to 0xffff888101441150 of 4 bytes by task 3892 on cpu 0: [ 33.425759][ T3892] fsnotify+0x36c/0x11a0 [ 33.429997][ T3892] __fsnotify_parent+0x285/0x380 [ 33.434922][ T3892] __fput+0x5a6/0x6d0 [ 33.438901][ T3892] __fput_sync+0x43/0x60 [ 33.443137][ T3892] __se_sys_close+0xf9/0x1a0 [ 33.447719][ T3892] __x64_sys_close+0x1f/0x30 [ 33.452302][ T3892] x64_sys_call+0x25cb/0x2d60 [ 33.456972][ T3892] do_syscall_64+0xc9/0x1c0 [ 33.461464][ T3892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.467358][ T3892] [ 33.469665][ T3892] value changed: 0x00002008 -> 0x00000000 [ 33.475364][ T3892] [ 33.477670][ T3892] Reported by Kernel Concurrency Sanitizer on: [ 33.483865][ T3892] CPU: 0 UID: 0 PID: 3892 Comm: syz.0.172 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 33.495922][ T3892] Tainted: [W]=WARN [ 33.499708][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.509750][ T3892] ================================================================== [ 33.551602][ T3892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.566105][ T3892] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.632183][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.