last executing test programs: 3.74956404s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x0) 3.662772438s ago: executing program 2 (id=10): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 1.912825397s ago: executing program 0 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000010000000080007000300000018000180140002006e657464657673696d300000000000000800060000000000080008"], 0x44}}, 0x0) 1.850519362s ago: executing program 0 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x1000, 0x8002}, 0x20) 1.819210154s ago: executing program 0 (id=54): socket(0xa, 0x40000000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x111, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000011}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)) 1.037758381s ago: executing program 1 (id=68): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x3}, 0xe) creat(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') 1.007430754s ago: executing program 1 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r3, r2, 0x0, 0x100801700) 964.396017ms ago: executing program 0 (id=70): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39dd7b) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b933d007d4b0000000000000400000001000000647a196a9f029061036923e5e14d1e0200000000000000eeaf4921567a6e6333b2124b0b3796d34b3bdff44dea718e8a1d09833c316bfd28ba2f81b251e125dff5ef01b2d89e2cf8eddbfb9586a469e786667b925c70b343156d80238ee7ddd8b8310bd33dfd5f72e6b0faa79d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000e000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x6d74, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1a3a, &(0x7f00000005c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x33ae, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 814.298441ms ago: executing program 0 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r3, 0x24, 0x0, @void}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x5, 0x6, 0x7, 0x2, 0x1, "2789f71db8834933b06ceffab8f71826690b11", 0x9, 0x124}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x4a060480) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r4, 0x660c, 0x0) 749.291286ms ago: executing program 1 (id=75): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 668.353143ms ago: executing program 1 (id=76): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r1}, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x86, 0xf5, &(0x7f0000000540)="86ccf99085c22d185d4fbef20d4f5967236245661df4ee20138d169025074ca674f13ee1f42d5457d85dea55dd991a2e9b921d21a4dbc53f293fdb1e4e798c9c389439cc4eb3b03db6c8c798772506aeefcd82cd2d137fee0f6accbd37beab8bf1408c8e94f06ec1c257ea849586c30dee2a9f7438e33e256cac5badee9ac3767adb03e28b91", &(0x7f0000000800)=""/245, 0x8, 0x0, 0xb2, 0xb7, &(0x7f0000000900)="682075408343486573d42c3196a226b265762fa32dc78830e19c1ff320d478a4e8e81d59e3ffb88706f2e04f103069d61ce1d970e8909356ef117e5220783dcb37cb8239e2ffedde812b8460d48bacc1423d0cf0aba887876819982362b32f4dd69f53cf6eecda6e80ab6fed902ff66fa117869fd141b233f3390df5bd464bcbdf80ce1ae79ef06a763033281306609b9630b3cda20f8229242d2ef861d78bdaf9af1b85225281fe9f9d58ef57abae80ec47", &(0x7f0000000b00)="11e3414f16fc254756fb52a265d4617707120a056730d69c8d7017cc961affc8fff5421e816c258e9ae43340f37ffd13537ab0a30bd54d7146e4c53b0f7a2503a220b1118f43275ecaad12fdbee79346fe2ddc2290a6c1544f7ced0372ca9882eaedb30eab793d0fe14ac0f7b637fb7d783fdaf7e49bef857768e037a7991ca5e9fee7d43d5a758b916f8c6511109f49150eb71e37cdfa40431d6d6b1acee63c51160908137cce807fa01552a693bf4821bb61e2c7cdae", 0x0, 0x0, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x3ff, 0x8a, 0x1, {0x22, 0xe52}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb, 0x7, 0x3}}}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x6, 0xfe, 0x20, 0x8, 0x80}, 0x19d, &(0x7f0000000c40)={0x5, 0xf, 0x19d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0xff, 0xc604, 0xc}, @ptm_cap={0x3}, @generic={0xf3, 0x10, 0xb, "3e7457a9a6eb15a27dd760aaddd6f7cbb51bdddd7b999186c2b04f21dec8fbe896178ada36630980bfd32409126b835e59c54b4a6ad30b34e2c2597e5cc7f539db129c759d47d371443c2f534b8386c67fdb3576fc97b97bf819ac655c0ab5b6ac48da0d0d138f2c0f68fd1ceef09c5c452f723cb3c7a96a702fab6f988e21285dc32ea6673c6ca6be408355a4138ac04c4fd1a151354e6af755ca7984fdd849ad26244a1a3d9883b8eac15a717c7e66b318ae2dd3033516189ea93e729f3e2ec152975faebfe93cd59734285ecbb8e90ade88f46beda912a79be10f2a9a438457461ba69ef58f860b39be47246fd73b"}, @generic={0x6f, 0x10, 0x1, "5079965712970520953bcad52b50afcc92fd147e1c18e0d0dc96e27b0b878cf9ea427b69bf6a8041030dcf25423387ae5f70ae54f5067d408a71ca6a39a6526b204d097d34d3dff01ac6f4d8cbde18d188470ec5d275f6e5215e7cbf22b7ba907422d22053c0c1b4b206837e"}, @ss_container_id={0x14, 0x10, 0x4, 0xa0, "f062c6529477db575a1da7be925373bb"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "dc83bf4911b8a4de7ecc16eacc1786b9"}]}, 0x5, [{0xe, &(0x7f0000000e00)=@string={0xe, 0x3, "fbecd3ae9c728dd4687910fb"}}, {0xd0, &(0x7f0000000e40)=@string={0xd0, 0x3, "a2b511a205b969d73e661ec313f530bac334f76345ebc95f6f467b4ba03d21e7d380336f79d5c096e3ee33245569a441652a45ed285d5aa6d0417f19bed44085a342929d2498d02ee37d87ec2eb38cd2da539cf090e3988b91fd604612f8a18294779db2fb2bcd29b65c0f8bf76f2e47372c5ee74225785cf591321df1956c0b72b13c927b1be3d12577d71fd55276f24790ef57038781790ddd98f8c2caf5fc5466f53be5a5220c82f97281b476345a790723ab37593868d4ccaff74b8c76d08fe3fe172e5ebfc9f55ae1da5b97"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x300a}}, {0x90, &(0x7f0000000f80)=@string={0x90, 0x3, "606c892b1ceb19bf064ee72619fbee5d2f394ab482ecca40531c13ea5b1053b50d691b76a7e4f13163cf4555ee86ee14de6d061acf8ea45db0c2253132c9d1d55b550e606f3a602d00e7bf0daf5bf80bdede096dc89be4167ae86fdb1f94001a399346af15b6f412067b7a3c9255af704ac57cf1088267a9ee5ccf36a750bbef3dee036b9567a48107279f26a6fb"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x41e}}]}) r7 = syz_socket_connect_nvme_tcp() bind(r7, &(0x7f0000000180)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) setuid(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) fchdir(0xffffffffffffffff) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2400, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}], [{@appraise_type}, {@fowner_lt={'fowner<', r9}}, {@subj_role={'subj_role', 0x3d, 'workqueue_queue_work\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '/,@]{-*{]]'}}, {@euid_lt={'euid<', r11}}, {@measure}, {@fowner_gt}]}}) 431.325663ms ago: executing program 0 (id=81): socket(0xa, 0x40000000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x111, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000011}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)) 362.512339ms ago: executing program 4 (id=84): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 287.055565ms ago: executing program 4 (id=85): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x0) 271.719947ms ago: executing program 4 (id=86): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 227.84059ms ago: executing program 3 (id=87): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 210.043592ms ago: executing program 4 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x1000, 0x8002}, 0x20) 203.671202ms ago: executing program 3 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 174.595975ms ago: executing program 4 (id=90): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32], 0x20}}, 0x0) 174.147345ms ago: executing program 3 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) 171.738635ms ago: executing program 4 (id=92): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r3, 0x24, 0x0, @void}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x5, 0x6, 0x7, 0x2, 0x1, "2789f71db8834933b06ceffab8f71826690b11", 0x9, 0x124}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x4a060480) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r4, 0x660c, 0x0) 79.295723ms ago: executing program 3 (id=93): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 60.251055ms ago: executing program 1 (id=94): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b00000081"]) 10.245949ms ago: executing program 3 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9.933139ms ago: executing program 3 (id=96): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b00000081"]) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 0s ago: executing program 1 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r3, r2, 0x0, 0x100801700) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. [ 28.354839][ T29] audit: type=1400 audit(1728610390.441:82): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.356025][ T3259] cgroup: Unknown subsys name 'net' [ 28.377751][ T29] audit: type=1400 audit(1728610390.441:83): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.405172][ T29] audit: type=1400 audit(1728610390.471:84): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.566672][ T3259] cgroup: Unknown subsys name 'cpuset' [ 28.572831][ T3259] cgroup: Unknown subsys name 'rlimit' [ 28.720778][ T29] audit: type=1400 audit(1728610390.811:85): avc: denied { setattr } for pid=3259 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.745984][ T29] audit: type=1400 audit(1728610390.811:86): avc: denied { create } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.766460][ T29] audit: type=1400 audit(1728610390.811:87): avc: denied { write } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.768961][ T3261] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.786817][ T29] audit: type=1400 audit(1728610390.811:88): avc: denied { read } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.815693][ T29] audit: type=1400 audit(1728610390.821:89): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.840549][ T29] audit: type=1400 audit(1728610390.821:90): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.844365][ T3259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.863769][ T29] audit: type=1400 audit(1728610390.891:91): avc: denied { relabelto } for pid=3261 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.841005][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 29.969772][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.976941][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.984102][ T3268] bridge_slave_0: entered allmulticast mode [ 29.990581][ T3268] bridge_slave_0: entered promiscuous mode [ 29.999273][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006371][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.013511][ T3268] bridge_slave_1: entered allmulticast mode [ 30.019904][ T3268] bridge_slave_1: entered promiscuous mode [ 30.049644][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.061704][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.096892][ T3268] team0: Port device team_slave_0 added [ 30.104689][ T3268] team0: Port device team_slave_1 added [ 30.131091][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.138241][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.164234][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.177416][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.184504][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.210432][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.286361][ T3278] chnl_net:caif_netlink_parms(): no params data found [ 30.304489][ T3268] hsr_slave_0: entered promiscuous mode [ 30.310401][ T3268] hsr_slave_1: entered promiscuous mode [ 30.328159][ T3281] chnl_net:caif_netlink_parms(): no params data found [ 30.346323][ T3276] chnl_net:caif_netlink_parms(): no params data found [ 30.388498][ T3280] chnl_net:caif_netlink_parms(): no params data found [ 30.430459][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.437560][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.444684][ T3278] bridge_slave_0: entered allmulticast mode [ 30.451198][ T3278] bridge_slave_0: entered promiscuous mode [ 30.457898][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.464966][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.472116][ T3278] bridge_slave_1: entered allmulticast mode [ 30.478499][ T3278] bridge_slave_1: entered promiscuous mode [ 30.535110][ T3278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.544370][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.551490][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.558750][ T3276] bridge_slave_0: entered allmulticast mode [ 30.565175][ T3276] bridge_slave_0: entered promiscuous mode [ 30.571729][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.578869][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.586027][ T3281] bridge_slave_0: entered allmulticast mode [ 30.592421][ T3281] bridge_slave_0: entered promiscuous mode [ 30.598803][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.605911][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.613030][ T3280] bridge_slave_0: entered allmulticast mode [ 30.619522][ T3280] bridge_slave_0: entered promiscuous mode [ 30.626171][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.633263][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.640414][ T3280] bridge_slave_1: entered allmulticast mode [ 30.646994][ T3280] bridge_slave_1: entered promiscuous mode [ 30.655527][ T3278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.664933][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.672062][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.679349][ T3276] bridge_slave_1: entered allmulticast mode [ 30.685826][ T3276] bridge_slave_1: entered promiscuous mode [ 30.692222][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.699396][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.706627][ T3281] bridge_slave_1: entered allmulticast mode [ 30.713018][ T3281] bridge_slave_1: entered promiscuous mode [ 30.751257][ T3280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.761074][ T3278] team0: Port device team_slave_0 added [ 30.767601][ T3278] team0: Port device team_slave_1 added [ 30.788277][ T3280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.806952][ T3276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.817415][ T3276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.827610][ T3281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.845151][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.852143][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.878098][ T3278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.898297][ T3281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.918599][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.925606][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.951668][ T3278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.968050][ T3276] team0: Port device team_slave_0 added [ 30.981174][ T3280] team0: Port device team_slave_0 added [ 30.990068][ T3280] team0: Port device team_slave_1 added [ 30.996419][ T3276] team0: Port device team_slave_1 added [ 31.002806][ T3281] team0: Port device team_slave_0 added [ 31.009515][ T3281] team0: Port device team_slave_1 added [ 31.050354][ T3280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.057491][ T3280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.083475][ T3280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.099602][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.106667][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.132680][ T3276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.143955][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.150976][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.176887][ T3276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.188014][ T3281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.194968][ T3281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.220952][ T3281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.233909][ T3278] hsr_slave_0: entered promiscuous mode [ 31.240028][ T3278] hsr_slave_1: entered promiscuous mode [ 31.245919][ T3278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.253486][ T3278] Cannot create hsr debugfs directory [ 31.259253][ T3280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.266285][ T3280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.292246][ T3280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.310398][ T3281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.317374][ T3281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.343300][ T3281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.384575][ T3276] hsr_slave_0: entered promiscuous mode [ 31.390879][ T3276] hsr_slave_1: entered promiscuous mode [ 31.397008][ T3276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.404888][ T3276] Cannot create hsr debugfs directory [ 31.425939][ T3280] hsr_slave_0: entered promiscuous mode [ 31.431987][ T3280] hsr_slave_1: entered promiscuous mode [ 31.437994][ T3280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.445546][ T3280] Cannot create hsr debugfs directory [ 31.456262][ T3281] hsr_slave_0: entered promiscuous mode [ 31.462590][ T3281] hsr_slave_1: entered promiscuous mode [ 31.468511][ T3281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.476087][ T3281] Cannot create hsr debugfs directory [ 31.487117][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.510380][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.530951][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.548926][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.678238][ T3278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.689217][ T3278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.699014][ T3278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.708039][ T3278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.740003][ T3280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.750865][ T3280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.759848][ T3280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.768798][ T3280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.783155][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.813336][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.820638][ T3276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.831647][ T3276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.841237][ T3276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.849991][ T3276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.868359][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.875406][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.896317][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.903465][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.919122][ T3281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.928238][ T3281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.938887][ T3281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.949309][ T3281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.989955][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.011248][ T3278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.027659][ T3278] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.052450][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.059581][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.079313][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.086390][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113595][ T3280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.136287][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.146840][ T3280] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.181119][ T3281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.196425][ T3276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.204547][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.211721][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.230592][ T3276] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.254442][ T3280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.265017][ T3280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.278536][ T3281] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.286903][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.293978][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.324094][ T3281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.334545][ T3281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.351152][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.358296][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.368090][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.375196][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.390868][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.397985][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.406810][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.413848][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.463349][ T3276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.473903][ T3276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.490877][ T3278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.534670][ T3268] veth0_vlan: entered promiscuous mode [ 32.559615][ T3280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.570237][ T3281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.606994][ T3268] veth1_vlan: entered promiscuous mode [ 32.632137][ T3268] veth0_macvtap: entered promiscuous mode [ 32.646279][ T3276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.663431][ T3268] veth1_macvtap: entered promiscuous mode [ 32.724305][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.740797][ T3280] veth0_vlan: entered promiscuous mode [ 32.752831][ T3281] veth0_vlan: entered promiscuous mode [ 32.764731][ T3281] veth1_vlan: entered promiscuous mode [ 32.783984][ T3278] veth0_vlan: entered promiscuous mode [ 32.792381][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.801422][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.810229][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819017][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.827882][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.845531][ T3278] veth1_vlan: entered promiscuous mode [ 32.851838][ T3280] veth1_vlan: entered promiscuous mode [ 32.857835][ T3276] veth0_vlan: entered promiscuous mode [ 32.866645][ T3276] veth1_vlan: entered promiscuous mode [ 32.888435][ T3281] veth0_macvtap: entered promiscuous mode [ 32.902749][ T3281] veth1_macvtap: entered promiscuous mode [ 32.919299][ T3276] veth0_macvtap: entered promiscuous mode [ 32.930230][ T3268] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.930390][ T3280] veth0_macvtap: entered promiscuous mode [ 32.952805][ T3276] veth1_macvtap: entered promiscuous mode [ 32.964937][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.975538][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.988708][ T3281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.996951][ T3280] veth1_macvtap: entered promiscuous mode [ 33.004216][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.014792][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.025597][ T3281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.033912][ T3278] veth0_macvtap: entered promiscuous mode [ 33.041676][ T3278] veth1_macvtap: entered promiscuous mode [ 33.048054][ T3409] 9pnet_fd: Insufficient options for proto=fd [ 33.062217][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.072694][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.082556][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.093065][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.109484][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.121165][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.131662][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.141584][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.152089][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.161943][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.172410][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.183368][ T3280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.194940][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.205577][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.206627][ T3413] usb usb9: usbfs: process 3413 (syz.4.8) did not claim interface 0 before use [ 33.215475][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.234831][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.244687][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.255159][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265052][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.275518][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.288829][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.297315][ T3281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306144][ T3281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.314870][ T3281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.323619][ T3281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.339416][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.341460][ T3415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.349928][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.349949][ T3280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.349965][ T3280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.388707][ T3415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.389203][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 33.389218][ T29] audit: type=1400 audit(1728610395.431:128): avc: denied { create } for pid=3414 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.421943][ T29] audit: type=1400 audit(1728610395.431:129): avc: denied { read write } for pid=3414 comm="syz.4.9" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.445094][ T29] audit: type=1400 audit(1728610395.431:130): avc: denied { open } for pid=3414 comm="syz.4.9" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.447439][ T3280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.468490][ T29] audit: type=1400 audit(1728610395.431:131): avc: denied { ioctl } for pid=3414 comm="syz.4.9" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.477375][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.510497][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.520324][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.530845][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.540689][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.551345][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.562179][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.572357][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.582948][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.592842][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.603332][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.613180][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.623710][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.633596][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.644108][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.654844][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.666876][ T3280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.675748][ T3280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.684538][ T3280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.693288][ T3280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.706011][ T3278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714818][ T3278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.723567][ T3278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.732307][ T3278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.749142][ T3276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.757983][ T3276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.766965][ T3276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.775703][ T3276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.861169][ T29] audit: type=1400 audit(1728610395.951:132): avc: denied { mount } for pid=3418 comm="syz.2.3" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 33.899578][ T29] audit: type=1400 audit(1728610395.981:133): avc: denied { unmount } for pid=3418 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 33.973864][ T3431] Process accounting resumed [ 34.000365][ T3437] 9pnet_fd: Insufficient options for proto=fd [ 34.051365][ T3445] usb usb9: usbfs: process 3445 (syz.0.16) did not claim interface 0 before use [ 34.091785][ T3451] loop4: detected capacity change from 0 to 256 [ 34.105291][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.133170][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.146133][ T29] audit: type=1400 audit(1728610396.241:134): avc: denied { create } for pid=3453 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.148548][ T3451] FAT-fs (loop4): Directory bread(block 64) failed [ 34.182211][ T3451] FAT-fs (loop4): Directory bread(block 65) failed [ 34.187082][ T29] audit: type=1400 audit(1728610396.261:135): avc: denied { create } for pid=3453 comm="syz.3.21" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.204743][ T3451] FAT-fs (loop4): Directory bread(block 66) failed [ 34.209771][ T29] audit: type=1400 audit(1728610396.261:136): avc: denied { map } for pid=3453 comm="syz.3.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.225625][ T3457] Process accounting resumed [ 34.240148][ T29] audit: type=1400 audit(1728610396.261:137): avc: denied { read write } for pid=3453 comm="syz.3.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.252540][ T3451] FAT-fs (loop4): Directory bread(block 67) failed [ 34.300743][ T3451] FAT-fs (loop4): Directory bread(block 68) failed [ 34.322827][ T3464] 9pnet_fd: Insufficient options for proto=fd [ 34.331661][ T3451] FAT-fs (loop4): Directory bread(block 69) failed [ 34.339503][ T3451] FAT-fs (loop4): Directory bread(block 70) failed [ 34.347512][ T3451] FAT-fs (loop4): Directory bread(block 71) failed [ 34.354117][ T3451] FAT-fs (loop4): Directory bread(block 72) failed [ 34.360958][ T3451] FAT-fs (loop4): Directory bread(block 73) failed [ 34.390666][ T3451] syz.4.19: attempt to access beyond end of device [ 34.390666][ T3451] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 34.408019][ T3470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.418032][ T3470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.502435][ T3474] loop4: detected capacity change from 0 to 8192 [ 34.536157][ T3474] loop4: p2 p3 p4 [ 34.540103][ T3474] loop4: p2 start 452985600 is beyond EOD, truncated [ 34.546862][ T3474] loop4: p3 size 33554432 extends beyond EOD, truncated [ 34.559473][ T3474] loop4: p4 start 8388607 is beyond EOD, truncated [ 34.577246][ T3474] netlink: 88 bytes leftover after parsing attributes in process `syz.4.29'. [ 34.627595][ T3484] Process accounting resumed [ 34.650740][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 34.666695][ T3487] bridge_slave_1: left allmulticast mode [ 34.672412][ T3487] bridge_slave_1: left promiscuous mode [ 34.678223][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.690849][ T3487] bridge_slave_0: left allmulticast mode [ 34.696775][ T3487] bridge_slave_0: left promiscuous mode [ 34.702712][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.724813][ T3493] 9pnet_fd: Insufficient options for proto=fd [ 34.775390][ T3497] bridge_slave_0: left allmulticast mode [ 34.781146][ T3497] bridge_slave_0: left promiscuous mode [ 34.786958][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.797590][ T3497] bridge_slave_1: left allmulticast mode [ 34.803282][ T3497] bridge_slave_1: left promiscuous mode [ 34.809066][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.819059][ T3497] bond0: (slave bond_slave_0): Releasing backup interface [ 34.829820][ T3497] bond0: (slave bond_slave_1): Releasing backup interface [ 34.844098][ T3497] team0: Port device team_slave_0 removed [ 34.857157][ T3497] team0: Port device team_slave_1 removed [ 34.863836][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.871337][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.879880][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.887387][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.976465][ T3505] tipc: Started in network mode [ 34.981531][ T3505] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 34.988999][ T3505] tipc: Enabled bearer , priority 0 [ 35.081033][ T3512] Process accounting resumed [ 35.092498][ T3514] ------------[ cut here ]------------ [ 35.098135][ T3514] refcount_t: underflow; use-after-free. [ 35.104103][ T3514] WARNING: CPU: 0 PID: 3514 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 35.113607][ T3514] Modules linked in: [ 35.117532][ T3514] CPU: 0 UID: 0 PID: 3514 Comm: syz.1.44 Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 [ 35.128060][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.138194][ T3514] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 35.144423][ T3514] Code: 72 ff ff ff e8 db 8a 71 ff 48 c7 c7 3e d7 b2 86 e8 8f 70 8a ff c6 05 46 34 f4 04 01 90 48 c7 c7 05 a8 1b 86 e8 db 50 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 ac 8a 71 ff 48 c7 c7 3b d7 b2 86 e8 [ 35.164118][ T3514] RSP: 0018:ffffc90003963b38 EFLAGS: 00010246 [ 35.170294][ T3514] RAX: 51d172a9205f7f00 RBX: ffff88810432c8e4 RCX: 0000000000040000 [ 35.178338][ T3514] RDX: ffffc90005af9000 RSI: 00000000000044b5 RDI: 00000000000044b6 [ 35.186351][ T3514] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 35.194424][ T3514] R10: 0001ffffffffffff R11: ffff888116cdb180 R12: ffff888116d2d068 [ 35.202433][ T3514] R13: ffff888116dcb388 R14: ffff88810432c8e4 R15: 0000000000000000 [ 35.202949][ T3517] loop1: detected capacity change from 0 to 512 [ 35.210422][ T3514] FS: 00007fbbcf4d06c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 35.210444][ T3514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.210460][ T3514] CR2: 00007fd29d6856c0 CR3: 0000000116c7c000 CR4: 00000000003506f0 [ 35.210478][ T3514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.221053][ T3517] ======================================================= [ 35.221053][ T3517] WARNING: The mand mount option has been deprecated and [ 35.221053][ T3517] and is ignored by this kernel. Remove the mand [ 35.221053][ T3517] option from the mount to silence this warning. [ 35.221053][ T3517] ======================================================= [ 35.225686][ T3514] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 35.225703][ T3514] Call Trace: [ 35.225709][ T3514] [ 35.225718][ T3514] ? __warn+0x141/0x350 [ 35.225771][ T3514] ? report_bug+0x315/0x420 [ 35.239562][ T3517] EXT4-fs: Ignoring removed i_version option [ 35.240413][ T3514] ? refcount_warn_saturate+0x1c6/0x230 [ 35.283682][ T3517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.291238][ T3514] ? handle_bug+0x60/0x90 [ 35.291313][ T3514] ? exc_invalid_op+0x1a/0x50 [ 35.291336][ T3514] ? asm_exc_invalid_op+0x1a/0x20 [ 35.309331][ T3517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 35.312316][ T3514] ? __warn_printk+0x167/0x1b0 [ 35.319739][ T3517] System zones: [ 35.330918][ T3514] ? refcount_warn_saturate+0x1c6/0x230 [ 35.335348][ T3517] 1-12 [ 35.340092][ T3514] ? refcount_warn_saturate+0x1c5/0x230 [ 35.345517][ T3517] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.44: bg 0: block 131: padding at end of block bitmap is not set [ 35.352999][ T3514] sk_skb_reason_drop+0xe9/0x290 [ 35.359571][ T3517] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 35.361346][ T3514] j1939_session_put+0x157/0x2a0 [ 35.367337][ T3517] EXT4-fs (loop1): 1 truncate cleaned up [ 35.369582][ T3514] j1939_sk_netdev_event_netdown+0x159/0x1d0 [ 35.369623][ T3514] j1939_netdev_notify+0x142/0x1b0 [ 35.376045][ T3517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.389259][ T3514] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 35.389348][ T3514] raw_notifier_call_chain+0x6f/0x1d0 [ 35.389380][ T3514] call_netdevice_notifiers_info+0xae/0x100 [ 35.397773][ T3517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.403104][ T3514] __dev_notify_flags+0xff/0x1a0 [ 35.468679][ T3514] dev_change_flags+0xab/0xd0 [ 35.473369][ T3514] dev_ifsioc+0x67f/0xa10 [ 35.477742][ T3514] dev_ioctl+0x7fa/0xab0 [ 35.482054][ T3514] sock_do_ioctl+0x11c/0x260 [ 35.486674][ T3514] sock_ioctl+0x46a/0x640 [ 35.491022][ T3514] ? __pfx_sock_ioctl+0x10/0x10 [ 35.495900][ T3514] __se_sys_ioctl+0xcd/0x140 [ 35.500563][ T3514] __x64_sys_ioctl+0x43/0x50 [ 35.505202][ T3514] x64_sys_call+0x15cc/0x2d60 [ 35.509911][ T3514] do_syscall_64+0xc9/0x1c0 [ 35.514499][ T3514] ? clear_bhb_loop+0x55/0xb0 [ 35.519215][ T3514] ? clear_bhb_loop+0x55/0xb0 [ 35.523987][ T3514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.529997][ T3514] RIP: 0033:0x7fbbd087dff9 [ 35.534445][ T3514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.554143][ T3514] RSP: 002b:00007fbbcf4d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.562601][ T3514] RAX: ffffffffffffffda RBX: 00007fbbd0a36058 RCX: 00007fbbd087dff9 [ 35.570632][ T3514] RDX: 0000000020000080 RSI: 0000000000008914 RDI: 000000000000000d [ 35.578679][ T3514] RBP: 00007fbbd08f0296 R08: 0000000000000000 R09: 0000000000000000 [ 35.586677][ T3514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.594725][ T3514] R13: 0000000000000000 R14: 00007fbbd0a36058 R15: 00007fffa40ff238 [ 35.602806][ T3514] [ 35.605879][ T3514] ---[ end trace 0000000000000000 ]--- [ 35.673193][ T3525] 9pnet_fd: Insufficient options for proto=fd [ 35.710581][ T3527] loop4: detected capacity change from 0 to 512 [ 35.719549][ T3531] loop3: detected capacity change from 0 to 256 [ 35.730550][ T3529] usb usb9: usbfs: process 3529 (syz.1.51) did not claim interface 0 before use [ 35.750319][ T3527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.764881][ T3527] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.769643][ T3531] FAT-fs (loop3): Directory bread(block 64) failed [ 35.787440][ T3531] FAT-fs (loop3): Directory bread(block 65) failed [ 35.794167][ T3531] FAT-fs (loop3): Directory bread(block 66) failed [ 35.801137][ T3531] FAT-fs (loop3): Directory bread(block 67) failed [ 35.808105][ T3531] FAT-fs (loop3): Directory bread(block 68) failed [ 35.816336][ T3531] FAT-fs (loop3): Directory bread(block 69) failed [ 35.817261][ T3527] Zero length message leads to an empty skb [ 35.823284][ T3531] FAT-fs (loop3): Directory bread(block 70) failed [ 35.839261][ T3531] FAT-fs (loop3): Directory bread(block 71) failed [ 35.840111][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.846045][ T3531] FAT-fs (loop3): Directory bread(block 72) failed [ 35.863734][ T3540] Process accounting resumed [ 35.864015][ T3531] FAT-fs (loop3): Directory bread(block 73) failed [ 35.892204][ T3544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.908397][ T3544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.916871][ T3531] syz.3.52: attempt to access beyond end of device [ 35.916871][ T3531] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 36.026086][ T3346] tipc: Node number set to 11578026 [ 36.040495][ T3555] loop3: detected capacity change from 0 to 2048 [ 36.048421][ T3555] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.067749][ T3555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.179066][ T3559] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 234: padding at end of block bitmap is not set [ 36.211777][ T3559] EXT4-fs (loop3): Remounting filesystem read-only [ 36.268425][ T3559] syz.3.62 (3559) used greatest stack depth: 10104 bytes left [ 36.299770][ T3280] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.353436][ T3563] 9pnet_fd: Insufficient options for proto=fd [ 36.416426][ T3565] tipc: Started in network mode [ 36.421364][ T3565] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 36.428763][ T3565] tipc: Enabled bearer , priority 0 [ 36.547418][ T3572] Process accounting resumed [ 36.575151][ T3575] loop1: detected capacity change from 0 to 256 [ 36.603464][ T3575] FAT-fs (loop1): Directory bread(block 64) failed [ 36.612938][ T3575] FAT-fs (loop1): Directory bread(block 65) failed [ 36.630326][ T3575] FAT-fs (loop1): Directory bread(block 66) failed [ 36.646132][ T3575] FAT-fs (loop1): Directory bread(block 67) failed [ 36.663194][ T3575] FAT-fs (loop1): Directory bread(block 68) failed [ 36.675864][ T3575] FAT-fs (loop1): Directory bread(block 69) failed [ 36.685745][ T3575] FAT-fs (loop1): Directory bread(block 70) failed [ 36.695083][ T3575] FAT-fs (loop1): Directory bread(block 71) failed [ 36.708471][ T3575] FAT-fs (loop1): Directory bread(block 72) failed [ 36.719971][ T3575] FAT-fs (loop1): Directory bread(block 73) failed [ 36.732692][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.762883][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.786962][ T3575] syz.1.69: attempt to access beyond end of device [ 36.786962][ T3575] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 36.835979][ T3585] loop0: detected capacity change from 0 to 2048 [ 36.847969][ T3587] 9pnet_fd: Insufficient options for proto=fd [ 36.852986][ T3585] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.879366][ T3585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.920184][ T3591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.953570][ T3591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.995589][ T3596] tipc: Started in network mode [ 37.000590][ T3596] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 37.007812][ T3596] tipc: Enabled bearer , priority 0 [ 37.052347][ T3585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.74: bg 0: block 234: padding at end of block bitmap is not set [ 37.072871][ T3585] EXT4-fs (loop0): Remounting filesystem read-only [ 37.121926][ T3600] Process accounting resumed [ 37.149192][ T3278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.344249][ T3615] 9pnet_fd: Insufficient options for proto=fd [ 37.372027][ T3619] tipc: Enabling of bearer rejected, already enabled [ 37.403046][ T3624] pim6reg: entered allmulticast mode [ 37.410137][ T3624] pim6reg: left allmulticast mode [ 37.421395][ T3625] loop4: detected capacity change from 0 to 2048 [ 37.428168][ T3625] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.457386][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.521158][ T3631] usb usb9: usbfs: process 3631 (syz.1.94) did not claim interface 0 before use [ 37.546586][ T3344] tipc: Node number set to 11578026 [ 37.570983][ T3636] ================================================================== [ 37.579109][ T3636] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 37.586418][ T3636] [ 37.588744][ T3636] read-write to 0xffff888110042228 of 8 bytes by task 3625 on cpu 0: [ 37.596818][ T3636] __xa_set_mark+0xdb/0x1b0 [ 37.601345][ T3636] __folio_mark_dirty+0x3b5/0x4e0 [ 37.606389][ T3636] mark_buffer_dirty+0x148/0x250 [ 37.611338][ T3636] block_write_end+0x123/0x210 [ 37.616130][ T3636] ext4_da_write_end+0x1ff/0x7e0 [ 37.621086][ T3636] generic_perform_write+0x33c/0x4a0 [ 37.626390][ T3636] ext4_buffered_write_iter+0x1ea/0x370 [ 37.631960][ T3636] ext4_file_write_iter+0x293/0xe10 [ 37.637196][ T3636] vfs_write+0x76a/0x910 [ 37.641465][ T3636] ksys_write+0xeb/0x1b0 [ 37.645727][ T3636] __x64_sys_write+0x42/0x50 [ 37.650349][ T3636] x64_sys_call+0x27dd/0x2d60 [ 37.655057][ T3636] do_syscall_64+0xc9/0x1c0 [ 37.659585][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.665604][ T3636] [ 37.667946][ T3636] read to 0xffff888110042228 of 8 bytes by task 3636 on cpu 1: [ 37.675505][ T3636] xas_find_marked+0x216/0x660 [ 37.680293][ T3636] find_get_entry+0x54/0x390 [ 37.684930][ T3636] filemap_get_folios_tag+0x136/0x210 [ 37.690325][ T3636] mpage_prepare_extent_to_map+0x329/0xb80 [ 37.696152][ T3636] ext4_do_writepages+0xa20/0x2130 [ 37.701277][ T3636] ext4_writepages+0x159/0x2e0 [ 37.706073][ T3636] do_writepages+0x1d8/0x480 [ 37.710682][ T3636] filemap_fdatawrite_wbc+0xdb/0x100 [ 37.715982][ T3636] filemap_flush+0x61/0x90 [ 37.720435][ T3636] ext4_alloc_da_blocks+0x50/0x130 [ 37.725556][ T3636] ext4_ioctl+0x1014/0x2dd0 [ 37.730069][ T3636] __se_sys_ioctl+0xcd/0x140 [ 37.734671][ T3636] __x64_sys_ioctl+0x43/0x50 [ 37.739274][ T3636] x64_sys_call+0x15cc/0x2d60 [ 37.743968][ T3636] do_syscall_64+0xc9/0x1c0 [ 37.748478][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.754386][ T3636] [ 37.756710][ T3636] value changed: 0x00000003ffffffff -> 0x0000000fffffffff [ 37.763816][ T3636] [ 37.766136][ T3636] Reported by Kernel Concurrency Sanitizer on: [ 37.772286][ T3636] CPU: 1 UID: 0 PID: 3636 Comm: syz.4.92 Tainted: G W 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 [ 37.784276][ T3636] Tainted: [W]=WARN [ 37.788081][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.798143][ T3636] ================================================================== [ 37.818665][ T3636] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.92: bg 0: block 234: padding at end of block bitmap is not set [ 37.819692][ T3640] loop1: detected capacity change from 0 to 256 [ 37.833095][ T3636] EXT4-fs (loop4): Remounting filesystem read-only [ 37.859665][ T3640] FAT-fs (loop1): Directory bread(block 64) failed [ 37.867004][ T3640] FAT-fs (loop1): Directory bread(block 65) failed [ 37.875956][ T3640] FAT-fs (loop1): Directory bread(block 66) failed [ 37.882677][ T3640] FAT-fs (loop1): Directory bread(block 67) failed [ 37.884188][ T3636] syz.4.92 (3636) used greatest stack depth: 9760 bytes left [ 37.893917][ T3640] FAT-fs (loop1): Directory bread(block 68) failed [ 37.903283][ T3640] FAT-fs (loop1): Directory bread(block 69) failed [ 37.910035][ T3640] FAT-fs (loop1): Directory bread(block 70) failed [ 37.917090][ T3640] FAT-fs (loop1): Directory bread(block 71) failed [ 37.923717][ T3640] FAT-fs (loop1): Directory bread(block 72) failed [ 37.930406][ T3640] FAT-fs (loop1): Directory bread(block 73) failed [ 37.960601][ T3640] syz.1.97: attempt to access beyond end of device [ 37.960601][ T3640] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 37.976050][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.095719][ T35] tipc: Node number set to 11578026