last executing test programs: 3.877795173s ago: executing program 4 (id=271): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x82}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 2.952872896s ago: executing program 0 (id=285): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x1000, &(0x7f00000002c0)={0x2d, 0xd5, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semop(0x0, 0x0, 0x0) 2.30843106s ago: executing program 1 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 2.092798172s ago: executing program 0 (id=301): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) 1.999974431s ago: executing program 4 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0x13, 0x7, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) 1.840736656s ago: executing program 4 (id=304): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getuid() syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x1000000, 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x8, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x8006, 0x0, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x2000) 1.751640125s ago: executing program 4 (id=305): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_uring_setup(0x4fee, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x40000018}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x6b6, 0x0, 0x0) 1.433031207s ago: executing program 1 (id=308): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.152764325s ago: executing program 0 (id=313): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044894}, 0x0) 1.021203438s ago: executing program 0 (id=316): syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) finit_module(0xffffffffffffffff, 0x0, 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x354) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x100000000, 0x3) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000170000000d0001007564703a73"], 0x54}}, 0x0) 928.431957ms ago: executing program 0 (id=319): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 900.9243ms ago: executing program 2 (id=321): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 887.705622ms ago: executing program 4 (id=322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 859.954774ms ago: executing program 4 (id=323): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5a8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x188) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 857.140105ms ago: executing program 2 (id=324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) 814.430079ms ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0x13, 0x7, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) 698.213721ms ago: executing program 3 (id=327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012401600ffff16000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xffff, 0x0, &(0x7f0000000240)="d2dcaafb519c2ec18000000020476203a3d9f35c0882c27525231d3c48ab7922b28a3950339533a21be75c3fa49730778c6b3989af3c365814c577f22106b9f6084bec4a564daad788349ad2527c56d590281c3beb459491fb51a9f0047fb451e6076730459b179c56cb2488385c62734a0935e13a3b1dd90a5cf84fe5cbaa2ac9649559f6a8c067bc5dd1e67286381ec453facca4f2369c5b294105d745", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10090) socket(0xb, 0x800, 0x8) 653.206795ms ago: executing program 3 (id=328): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 605.38412ms ago: executing program 2 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 549.835296ms ago: executing program 2 (id=330): syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_io_uring_setup(0x4653, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) 506.13909ms ago: executing program 1 (id=331): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0xfffffffffffffff1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r1, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 503.3558ms ago: executing program 3 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x82, 0x1100) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 446.159036ms ago: executing program 2 (id=333): r0 = syz_io_uring_setup(0x61a1, &(0x7f0000000480)={0x0, 0x9600, 0x0, 0x0, 0x2c3}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x69, 0x2004, @fd, 0x2, 0x0, 0x0, 0x3, 0x0, {0x1}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 445.703826ms ago: executing program 1 (id=334): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r0, 0x1b) 373.179523ms ago: executing program 3 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000400), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 352.101875ms ago: executing program 1 (id=336): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 313.803819ms ago: executing program 3 (id=337): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 312.847869ms ago: executing program 2 (id=338): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 85.554782ms ago: executing program 1 (id=339): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 0 (id=340): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 29.063997][ T29] audit: type=1400 audit(1763311871.092:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.087049][ T29] audit: type=1400 audit(1763311871.122:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.087969][ T3303] cgroup: Unknown subsys name 'net' [ 29.114802][ T29] audit: type=1400 audit(1763311871.152:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.254861][ T3303] cgroup: Unknown subsys name 'cpuset' [ 29.261086][ T3303] cgroup: Unknown subsys name 'rlimit' [ 29.372181][ T29] audit: type=1400 audit(1763311871.402:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.395558][ T29] audit: type=1400 audit(1763311871.402:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.416060][ T29] audit: type=1400 audit(1763311871.402:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.436403][ T29] audit: type=1400 audit(1763311871.402:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.447621][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.456735][ T29] audit: type=1400 audit(1763311871.422:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.490075][ T29] audit: type=1400 audit(1763311871.422:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.500410][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.513372][ T29] audit: type=1400 audit(1763311871.502:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.442168][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 31.477897][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.519436][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.548873][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.595585][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.602649][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.609810][ T3325] bridge_slave_0: entered allmulticast mode [ 31.616472][ T3325] bridge_slave_0: entered promiscuous mode [ 31.635653][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.642781][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.649943][ T3313] bridge_slave_0: entered allmulticast mode [ 31.656378][ T3313] bridge_slave_0: entered promiscuous mode [ 31.662742][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.669864][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.677091][ T3325] bridge_slave_1: entered allmulticast mode [ 31.683377][ T3325] bridge_slave_1: entered promiscuous mode [ 31.700615][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.707754][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.714870][ T3313] bridge_slave_1: entered allmulticast mode [ 31.721152][ T3313] bridge_slave_1: entered promiscuous mode [ 31.738437][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.745555][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.752663][ T3315] bridge_slave_0: entered allmulticast mode [ 31.759045][ T3315] bridge_slave_0: entered promiscuous mode [ 31.778735][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.785859][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.792975][ T3315] bridge_slave_1: entered allmulticast mode [ 31.799538][ T3315] bridge_slave_1: entered promiscuous mode [ 31.811341][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.835756][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.846039][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.856017][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.871904][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.879066][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.886322][ T3318] bridge_slave_0: entered allmulticast mode [ 31.892736][ T3318] bridge_slave_0: entered promiscuous mode [ 31.908515][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.922604][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.929852][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.937019][ T3318] bridge_slave_1: entered allmulticast mode [ 31.943416][ T3318] bridge_slave_1: entered promiscuous mode [ 31.950854][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.972276][ T3325] team0: Port device team_slave_0 added [ 31.978648][ T3313] team0: Port device team_slave_0 added [ 31.985502][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.004863][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.014816][ T3325] team0: Port device team_slave_1 added [ 32.021107][ T3313] team0: Port device team_slave_1 added [ 32.043658][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.071550][ T3315] team0: Port device team_slave_0 added [ 32.083951][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.091032][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.116960][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.128061][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.135033][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.161056][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.172690][ T3315] team0: Port device team_slave_1 added [ 32.185932][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.192980][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.218926][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.229836][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.236860][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.262754][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.285821][ T3318] team0: Port device team_slave_0 added [ 32.294699][ T3318] team0: Port device team_slave_1 added [ 32.316931][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.324042][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.331214][ T3320] bridge_slave_0: entered allmulticast mode [ 32.337678][ T3320] bridge_slave_0: entered promiscuous mode [ 32.350635][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.357721][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.383653][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.395019][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.401958][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.427850][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.439307][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.446451][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.453819][ T3320] bridge_slave_1: entered allmulticast mode [ 32.460234][ T3320] bridge_slave_1: entered promiscuous mode [ 32.476698][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.483728][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.509719][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.520825][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.527804][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.553860][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.589256][ T3313] hsr_slave_0: entered promiscuous mode [ 32.595326][ T3313] hsr_slave_1: entered promiscuous mode [ 32.605998][ T3325] hsr_slave_0: entered promiscuous mode [ 32.611978][ T3325] hsr_slave_1: entered promiscuous mode [ 32.617934][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 32.623737][ T3325] Cannot create hsr debugfs directory [ 32.654639][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.674024][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.699797][ T3318] hsr_slave_0: entered promiscuous mode [ 32.705928][ T3318] hsr_slave_1: entered promiscuous mode [ 32.711846][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.717605][ T3318] Cannot create hsr debugfs directory [ 32.725250][ T3315] hsr_slave_0: entered promiscuous mode [ 32.731250][ T3315] hsr_slave_1: entered promiscuous mode [ 32.737097][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.742819][ T3315] Cannot create hsr debugfs directory [ 32.765432][ T3320] team0: Port device team_slave_0 added [ 32.790715][ T3320] team0: Port device team_slave_1 added [ 32.827700][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.834692][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.860647][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.888291][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.895301][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.921288][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.004735][ T3320] hsr_slave_0: entered promiscuous mode [ 33.010874][ T3320] hsr_slave_1: entered promiscuous mode [ 33.016725][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 33.022469][ T3320] Cannot create hsr debugfs directory [ 33.061705][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.074082][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.098643][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.111792][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.141174][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.152573][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.170417][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.179831][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.210810][ T3325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.223231][ T3325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.237358][ T3325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.251105][ T3325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.263364][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.272982][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.281615][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.294772][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.325023][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.339855][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.354835][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.368580][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.377643][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.393244][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.412568][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.419674][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.443962][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.454473][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.467575][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.474720][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.493755][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.523767][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.541936][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.555658][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.579591][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.592520][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.606230][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.613296][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.622468][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.634470][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.641516][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.654039][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.662414][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.669555][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.678753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.685827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.700650][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.707819][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.724404][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.731505][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.777619][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.799004][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.806141][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.825485][ T3313] veth0_vlan: entered promiscuous mode [ 33.832024][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.839327][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.856430][ T3313] veth1_vlan: entered promiscuous mode [ 33.866313][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.917170][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.931281][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.941743][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.970824][ T3313] veth0_macvtap: entered promiscuous mode [ 33.987091][ T3313] veth1_macvtap: entered promiscuous mode [ 34.009902][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.021639][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.043016][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.054958][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.093458][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.119479][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.119492][ T29] audit: type=1400 audit(1763311876.152:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.shfKtY/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.128565][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.155946][ T29] audit: type=1400 audit(1763311876.152:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.178657][ T29] audit: type=1400 audit(1763311876.152:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.shfKtY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.203904][ T29] audit: type=1400 audit(1763311876.152:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.216447][ T3318] veth0_vlan: entered promiscuous mode [ 34.225668][ T29] audit: type=1400 audit(1763311876.152:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.shfKtY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.257674][ T29] audit: type=1400 audit(1763311876.152:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.shfKtY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.270810][ T1671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.285102][ T29] audit: type=1400 audit(1763311876.152:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.296361][ T3318] veth1_vlan: entered promiscuous mode [ 34.321674][ T29] audit: type=1400 audit(1763311876.362:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.344575][ T29] audit: type=1400 audit(1763311876.362:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.367913][ T1671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386281][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.407857][ T1671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.423184][ T3315] veth0_vlan: entered promiscuous mode [ 34.431307][ T29] audit: type=1400 audit(1763311876.472:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.440749][ T3315] veth1_vlan: entered promiscuous mode [ 34.478258][ T3318] veth0_macvtap: entered promiscuous mode [ 34.502071][ T3320] veth0_vlan: entered promiscuous mode [ 34.516243][ T3318] veth1_macvtap: entered promiscuous mode [ 34.531507][ T3320] veth1_vlan: entered promiscuous mode [ 34.545485][ T3325] veth0_vlan: entered promiscuous mode [ 34.553365][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.565410][ T3315] veth0_macvtap: entered promiscuous mode [ 34.577429][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.587193][ T3325] veth1_vlan: entered promiscuous mode [ 34.608463][ T3315] veth1_macvtap: entered promiscuous mode [ 34.618246][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.629313][ T3320] veth0_macvtap: entered promiscuous mode [ 34.639025][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.663191][ T3320] veth1_macvtap: entered promiscuous mode [ 34.670423][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.682682][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.703260][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.720123][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.735557][ T3325] veth0_macvtap: entered promiscuous mode [ 34.744389][ T3325] veth1_macvtap: entered promiscuous mode [ 34.750807][ T1835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.765591][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.775760][ T1835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.786528][ T1835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.799337][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.834002][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.841356][ T1835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.853592][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.888144][ T1835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.907078][ T1835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.923428][ T1835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.960119][ T1835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.993325][ T1835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.020213][ T1835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.056123][ T3508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.085607][ T1835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.094592][ T1835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.115139][ T3515] Zero length message leads to an empty skb [ 35.211530][ T3525] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 35.271403][ T3529] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0 [ 35.291367][ T3531] futex_wake_op: syz.0.22 tries to shift op by -1; fix this program [ 35.310028][ T3533] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 35.344681][ C1] hrtimer: interrupt took 28888 ns [ 35.936944][ T3544] loop1: detected capacity change from 0 to 2048 [ 35.950500][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 35.968410][ T3304] loop1: p2 p3 p7 [ 35.992687][ T3548] netlink: 240 bytes leftover after parsing attributes in process `syz.3.29'. [ 36.002319][ T3544] loop1: p2 p3 p7 [ 36.031305][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.041755][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.048050][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 36.068983][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.080303][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.091466][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 36.197637][ T3508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.368669][ T3568] vhci_hcd: invalid port number 255 [ 36.374022][ T3568] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 36.467046][ T3576] process 'syz.0.40' launched './file0' with NULL argv: empty string added [ 36.553130][ T3584] serio: Serial port ttyS3 [ 36.729508][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.736839][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.806635][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.817485][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.875172][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.885082][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.932774][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.016742][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.419241][ T3508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.551455][ T3624] wg2: entered promiscuous mode [ 37.556684][ T3624] wg2: entered allmulticast mode [ 37.618634][ T3508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.710990][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.729644][ T1671] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.749020][ T1671] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.764569][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.0.65 [ 37.770909][ T1671] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.806523][ T3633] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 37.818812][ T3637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 37.871843][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.879173][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.921658][ T3647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3647 comm=syz.4.67 [ 37.929346][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.944501][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.002710][ T1009] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.023441][ T1009] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.038748][ T1009] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.048556][ T1009] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.218309][ T3659] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 38.297982][ T3664] tipc: Started in network mode [ 38.302908][ T3664] tipc: Node identity ac14140f, cluster identity 4711 [ 38.357549][ T3664] tipc: New replicast peer: 255.255.255.83 [ 38.363486][ T3664] tipc: Enabled bearer , priority 10 [ 38.371834][ T3666] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.636602][ T3675] xt_hashlimit: max too large, truncated to 1048576 [ 38.678638][ T3675] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 38.813882][ T3680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.840351][ T3680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.872014][ T3687] loop1: detected capacity change from 0 to 512 [ 38.881608][ T3687] ======================================================= [ 38.881608][ T3687] WARNING: The mand mount option has been deprecated and [ 38.881608][ T3687] and is ignored by this kernel. Remove the mand [ 38.881608][ T3687] option from the mount to silence this warning. [ 38.881608][ T3687] ======================================================= [ 38.932082][ T3686] loop2: detected capacity change from 0 to 512 [ 38.941456][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.956671][ T3687] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.970609][ T3687] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.85: corrupted inode contents [ 38.976140][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.982809][ T3687] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.85: mark_inode_dirty error [ 38.994945][ T3686] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.006929][ T3687] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.85: corrupted inode contents [ 39.029435][ T3693] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.85: corrupted inode contents [ 39.037811][ T3686] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.86: corrupted inode contents [ 39.041981][ T3693] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.85: mark_inode_dirty error [ 39.052923][ T3686] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.86: mark_inode_dirty error [ 39.065217][ T3693] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.85: corrupted inode contents [ 39.075482][ T3686] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.86: corrupted inode contents [ 39.111728][ T3686] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.86: mark_inode_dirty error [ 39.125582][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 39.125597][ T29] audit: type=1326 audit(1763311881.162:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 39.160323][ T3693] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.85: mark_inode_dirty error [ 39.174272][ T29] audit: type=1326 audit(1763311881.192:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 39.175067][ T3693] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.85: corrupted inode contents [ 39.198032][ T29] audit: type=1326 audit(1763311881.192:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 39.232747][ T29] audit: type=1326 audit(1763311881.192:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 39.255928][ T29] audit: type=1326 audit(1763311881.192:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f729ac41f85 code=0x7ffc0000 [ 39.279475][ T29] audit: type=1326 audit(1763311881.212:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 39.303025][ T29] audit: type=1326 audit(1763311881.212:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f729ac41f85 code=0x7ffc0000 [ 39.326972][ T3693] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.85: mark_inode_dirty error [ 39.338436][ T29] audit: type=1326 audit(1763311881.272:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f729ac41f85 code=0x7ffc0000 [ 39.361771][ T29] audit: type=1326 audit(1763311881.272:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f729ac41f85 code=0x7ffc0000 [ 39.385326][ T29] audit: type=1326 audit(1763311881.272:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f729ac41f85 code=0x7ffc0000 [ 39.462256][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.474330][ T1040] tipc: Node number set to 2886997007 [ 39.509100][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.626955][ T3726] random: crng reseeded on system resumption [ 39.638389][ T3726] Restarting kernel threads ... [ 39.643663][ T3726] Done restarting kernel threads. [ 39.650999][ T3726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3726 comm=syz.2.97 [ 40.079493][ T3746] bridge_slave_1: left allmulticast mode [ 40.085331][ T3746] bridge_slave_1: left promiscuous mode [ 40.091020][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.115755][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.124548][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.126131][ T3746] bridge_slave_0: left allmulticast mode [ 40.138213][ T3746] bridge_slave_0: left promiscuous mode [ 40.143925][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.154675][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 40.379505][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 40.649443][ T3789] pim6reg1: entered promiscuous mode [ 40.654843][ T3789] pim6reg1: entered allmulticast mode [ 40.870254][ T3787] loop1: detected capacity change from 0 to 512 [ 40.899416][ T3787] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.122: bad orphan inode 11862016 [ 40.914903][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.927801][ T3787] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.091057][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.538073][ T3829] loop0: detected capacity change from 0 to 8192 [ 41.626404][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.634322][ T3315] FAT-fs (loop0): Filesystem has been set read-only [ 41.772668][ T3842] syzkaller0: entered promiscuous mode [ 41.778378][ T3842] syzkaller0: entered allmulticast mode [ 41.850011][ T3847] loop3: detected capacity change from 0 to 512 [ 41.883676][ T3847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.142: error while reading EA inode 32 err=-116 [ 41.908031][ T3847] EXT4-fs (loop3): Remounting filesystem read-only [ 41.918675][ T3847] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.927835][ T3854] loop0: detected capacity change from 0 to 1024 [ 41.931882][ T3847] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.938937][ T3854] EXT4-fs: Ignoring removed orlov option [ 41.950168][ T3847] EXT4-fs (loop3): 1 orphan inode deleted [ 41.960356][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.975738][ T3854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.009860][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.021167][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.441738][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 42.462188][ T3864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3864 comm=syz.3.148 [ 42.566931][ T3870] wg2: entered promiscuous mode [ 42.571910][ T3870] wg2: entered allmulticast mode [ 42.630077][ T3876] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 42.665618][ T3878] netlink: 'syz.3.155': attribute type 20 has an invalid length. [ 42.673411][ T3878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 42.687774][ T1009] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.696752][ T3878] netlink: 'syz.3.155': attribute type 20 has an invalid length. [ 42.704653][ T3878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 42.713692][ T1009] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.722782][ T1009] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.731712][ T1009] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.778903][ T3882] bridge: RTM_NEWNEIGH with invalid ether address [ 42.778912][ T3880] loop4: detected capacity change from 0 to 512 [ 42.817597][ T3880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.841162][ T3880] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.859391][ T3880] syz.4.156 (3880) used greatest stack depth: 10536 bytes left [ 42.879134][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.014287][ T3892] SELinux: failed to load policy [ 43.210817][ T3895] loop3: detected capacity change from 0 to 8192 [ 43.221601][ T3899] loop0: detected capacity change from 0 to 512 [ 43.580565][ T3911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 44.149260][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 44.149289][ T29] audit: type=1400 audit(1763311886.182:588): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file7" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.421687][ T29] audit: type=1400 audit(1763311886.452:589): avc: denied { create } for pid=3950 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.445614][ T29] audit: type=1400 audit(1763311886.482:590): avc: denied { ioctl } for pid=3950 comm="syz.3.181" path="socket:[5802]" dev="sockfs" ino=5802 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.521190][ T29] audit: type=1400 audit(1763311886.552:591): avc: denied { ioctl } for pid=3958 comm="syz.1.185" path="socket:[6804]" dev="sockfs" ino=6804 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.527667][ T3959] syzkaller0: entered allmulticast mode [ 44.600806][ T3959] syzkaller0: entered promiscuous mode [ 44.616017][ T3959] syzkaller0 (unregistering): left allmulticast mode [ 44.622843][ T3959] syzkaller0 (unregistering): left promiscuous mode [ 44.714219][ T3971] loop0: detected capacity change from 0 to 128 [ 44.795842][ T3975] loop9: detected capacity change from 0 to 7 [ 44.812568][ T3975] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.833314][ T3975] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.841318][ T3975] loop9: unable to read partition table [ 44.862293][ T29] audit: type=1400 audit(1763311886.892:592): avc: denied { create } for pid=3977 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.866198][ T3975] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 44.866198][ T3975] ) failed (rc=-5) [ 44.885137][ T3549] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.913155][ T3549] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.921400][ T29] audit: type=1400 audit(1763311886.942:593): avc: denied { ioctl } for pid=3977 comm="syz.3.191" path="socket:[5856]" dev="sockfs" ino=5856 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.947706][ T3549] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.957381][ T3549] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.966251][ T3549] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.159599][ T29] audit: type=1326 audit(1763311887.192:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2f6c9 code=0x7ffc0000 [ 45.183172][ T29] audit: type=1326 audit(1763311887.192:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2f6c9 code=0x7ffc0000 [ 45.257379][ T3992] pim6reg1: entered promiscuous mode [ 45.262872][ T3992] pim6reg1: entered allmulticast mode [ 45.286891][ T3990] loop0: detected capacity change from 0 to 8192 [ 45.293641][ T29] audit: type=1326 audit(1763311887.242:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6181c2f6c9 code=0x7ffc0000 [ 45.316943][ T29] audit: type=1326 audit(1763311887.242:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2f6c9 code=0x7ffc0000 [ 45.389079][ T3994] futex_wake_op: syz.2.199 tries to shift op by -1; fix this program [ 46.265165][ T4005] loop2: detected capacity change from 0 to 1024 [ 46.272812][ T4005] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.282727][ T4005] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 46.325259][ T4005] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.345265][ T4005] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #5: comm syz.2.202: unexpected bad inode w/o EXT4_IGET_BAD [ 46.385519][ T4005] EXT4-fs (loop2): no journal found [ 46.390764][ T4005] EXT4-fs (loop2): can't get journal size [ 46.400083][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.427161][ T4010] tipc: Started in network mode [ 46.432082][ T4010] tipc: Node identity ac14140f, cluster identity 4711 [ 46.469389][ T4010] tipc: New replicast peer: 255.255.255.83 [ 46.475427][ T4010] tipc: Enabled bearer , priority 10 [ 46.510353][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.931143][ T4035] loop4: detected capacity change from 0 to 512 [ 46.939963][ T4035] EXT4-fs: Ignoring removed i_version option [ 46.946081][ T4035] EXT4-fs: Ignoring removed bh option [ 46.976504][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.991459][ T4035] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.048530][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.474330][ T3394] tipc: Node number set to 2886997007 [ 47.578726][ T4064] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.636500][ T4064] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.678254][ T4064] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.738436][ T4064] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.875594][ T1835] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.910362][ T4077] loop2: detected capacity change from 0 to 128 [ 47.925391][ T4077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.944696][ T1835] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.952936][ T1835] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.991201][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 47.993588][ T4077] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.027442][ T1835] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088688][ T4083] netlink: 236 bytes leftover after parsing attributes in process `syz.1.234'. [ 48.110801][ T4077] : renamed from wg2 (while UP) [ 48.175555][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.227766][ T4095] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 48.270456][ T4095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.287812][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 48.302351][ T4095] bond1 (unregistering): Released all slaves [ 48.356589][ T4102] bond0: (slave bond_slave_0): Releasing backup interface [ 48.377297][ T4102] bond0: (slave bond_slave_1): Releasing backup interface [ 48.390515][ T4104] netlink: 44 bytes leftover after parsing attributes in process `syz.4.243'. [ 48.408487][ T4105] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 48.441856][ T4102] team0: Port device team_slave_0 removed [ 48.457746][ T4102] team0: Port device team_slave_1 removed [ 48.460292][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 48.477770][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.485246][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.495319][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.502718][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.514741][ T4102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.538699][ T4105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.546995][ T4105] team0: Port device bond0 added [ 48.560170][ T4110] team0 (unregistering): Port device bond0 removed [ 48.652605][ T4116] loop4: detected capacity change from 0 to 2048 [ 48.675883][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.800067][ T4119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.815503][ T4119] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1926 with error 28 [ 48.828040][ T4119] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.828040][ T4119] [ 48.837710][ T4119] EXT4-fs (loop4): Total free blocks count 0 [ 48.843718][ T4119] EXT4-fs (loop4): Free/Dirty block details [ 48.849715][ T4119] EXT4-fs (loop4): free_blocks=2415919104 [ 48.855456][ T4119] EXT4-fs (loop4): dirty_blocks=1936 [ 48.860762][ T4119] EXT4-fs (loop4): Block reservation details [ 48.866852][ T4119] EXT4-fs (loop4): i_reserved_data_blocks=121 [ 48.984102][ T4119] syz.4.247 (4119) used greatest stack depth: 10120 bytes left [ 49.008257][ T1835] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 49.655506][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 49.655520][ T29] audit: type=1326 audit(1763311891.692:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686743][ T29] audit: type=1326 audit(1763311891.722:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686775][ T29] audit: type=1326 audit(1763311891.722:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686836][ T29] audit: type=1326 audit(1763311891.722:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686863][ T29] audit: type=1326 audit(1763311891.722:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686893][ T29] audit: type=1326 audit(1763311891.722:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.686923][ T29] audit: type=1326 audit(1763311891.722:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.687019][ T29] audit: type=1326 audit(1763311891.722:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.687126][ T29] audit: type=1326 audit(1763311891.722:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.687150][ T29] audit: type=1326 audit(1763311891.722:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.1.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 49.833602][ T4154] macsec0: entered allmulticast mode [ 50.044376][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 50.097149][ T4167] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 50.116244][ T4157] wireguard0: entered promiscuous mode [ 50.121848][ T4157] wireguard0: entered allmulticast mode [ 50.139805][ T4167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.156635][ T4167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 50.166309][ T4167] bond1: entered promiscuous mode [ 50.171391][ T4167] bond1: entered allmulticast mode [ 50.187021][ T4167] bond1: (slave dummy0): making interface the new active one [ 50.197080][ T4167] dummy0: entered promiscuous mode [ 50.202676][ T4167] dummy0: entered allmulticast mode [ 50.209603][ T4167] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.268770][ T4180] loop4: detected capacity change from 0 to 128 [ 50.283508][ T4177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.328465][ T4177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.365699][ T4187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.387994][ T4177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.458164][ T4187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.517950][ T4177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.557890][ T4187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.603068][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.617549][ T1671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.628694][ T1671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.638269][ T4187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.653625][ T1671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.931899][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 50.950812][ T4208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4208 comm=syz.0.278 [ 50.989961][ T4210] syzkaller0: entered promiscuous mode [ 50.995755][ T4210] syzkaller0: entered allmulticast mode [ 51.048705][ T4212] loop0: detected capacity change from 0 to 512 [ 51.060006][ T4212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.075172][ T4212] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 51.088102][ T4212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.100906][ T4212] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.117745][ T4212] serio: Serial port ptm0 [ 51.154799][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.556464][ T4241] loop3: detected capacity change from 0 to 128 [ 51.621867][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 51.636955][ T4243] wireguard0: entered promiscuous mode [ 51.642561][ T4243] wireguard0: entered allmulticast mode [ 51.913552][ T1671] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 52.072209][ T4275] veth0_vlan: entered allmulticast mode [ 52.089089][ T4275] : renamed from vlan1 [ 52.138054][ T4279] program syz.2.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.142817][ T1009] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.184284][ T1009] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.211360][ T1009] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.227905][ T1009] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.854971][ T4300] netlink: 460 bytes leftover after parsing attributes in process `syz.2.309'. [ 52.891088][ T4302] loop2: detected capacity change from 0 to 512 [ 52.899019][ T4302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.920433][ T4302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.946229][ T4302] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.993966][ T4302] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #18: comm syz.2.310: corrupted inode contents [ 53.021285][ T4302] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #18: comm syz.2.310: mark_inode_dirty error [ 53.044700][ T4302] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #18: comm syz.2.310: corrupted inode contents [ 53.069420][ T4302] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #18: comm syz.2.310: mark_inode_dirty error [ 53.106296][ T4302] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #18: comm syz.2.310: mark inode dirty (error -117) [ 53.130857][ T4302] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 53.165201][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.196028][ T4317] tipc: Started in network mode [ 53.200960][ T4317] tipc: Node identity ac14140f, cluster identity 4711 [ 53.215187][ T4317] tipc: New replicast peer: 255.255.255.255 [ 53.221406][ T4317] tipc: Enabled bearer , priority 10 [ 53.366290][ T4332] __nla_validate_parse: 2 callbacks suppressed [ 53.366307][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 53.398004][ T4332] team0: Port device team_slave_1 removed [ 53.532009][ T4334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.591910][ T4345] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.328'. [ 53.616250][ T4345] netlink: zone id is out of range [ 53.621454][ T4345] netlink: zone id is out of range [ 53.627070][ T4345] netlink: zone id is out of range [ 53.632307][ T4345] netlink: zone id is out of range [ 53.637891][ T4345] netlink: zone id is out of range [ 53.643185][ T4345] netlink: zone id is out of range [ 53.664685][ T4345] netlink: set zone limit has 8 unknown bytes [ 53.907104][ T4369] netlink: 'syz.2.338': attribute type 13 has an invalid length. [ 54.096815][ T1009] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.124352][ T1835] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.142896][ T1835] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.160816][ T1835] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.181937][ T4374] loop1: detected capacity change from 0 to 2048 [ 54.215947][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.324332][ T3394] ================================================================== [ 54.332444][ T3394] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 54.339462][ T3394] [ 54.341775][ T3394] read-write to 0xffff888237c29de4 of 4 bytes by task 3426 on cpu 0: [ 54.349827][ T3394] wq_worker_running+0x95/0x120 [ 54.354672][ T3394] schedule_timeout+0xb7/0x170 [ 54.359426][ T3394] msleep+0x50/0x90 [ 54.363227][ T3394] nsim_fib_event_work+0x42e6/0x4790 [ 54.368506][ T3394] process_scheduled_works+0x4ce/0x9d0 [ 54.373991][ T3394] worker_thread+0x582/0x770 [ 54.378567][ T3394] kthread+0x489/0x510 [ 54.382626][ T3394] ret_from_fork+0x122/0x1b0 [ 54.387220][ T3394] ret_from_fork_asm+0x1a/0x30 [ 54.391981][ T3394] [ 54.394294][ T3394] read to 0xffff888237c29de4 of 4 bytes by task 3394 on cpu 1: [ 54.401855][ T3394] kick_pool+0x49/0x2d0 [ 54.406006][ T3394] __queue_work+0x8cb/0xb50 [ 54.410505][ T3394] queue_work_on+0xd1/0x160 [ 54.415000][ T3394] process_srcu+0x999/0xbc0 [ 54.419503][ T3394] process_scheduled_works+0x4ce/0x9d0 [ 54.424967][ T3394] worker_thread+0x582/0x770 [ 54.429548][ T3394] kthread+0x489/0x510 [ 54.433609][ T3394] ret_from_fork+0x122/0x1b0 [ 54.438198][ T3394] ret_from_fork_asm+0x1a/0x30 [ 54.442978][ T3394] [ 54.445287][ T3394] value changed: 0x00000000 -> 0x00000001 [ 54.450985][ T3394] [ 54.453292][ T3394] Reported by Kernel Concurrency Sanitizer on: [ 54.459437][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.469233][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.479277][ T3394] Workqueue: rcu_gp process_srcu [ 54.484229][ T3394] ================================================================== [ 54.494337][ T2968] tipc: Node number set to 2886997007 [ 54.511513][ T4369] syz.2.338 (4369) used greatest stack depth: 10040 bytes left [ 54.595928][ T4374] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.655057][ T4374] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 620 with max blocks 186 with error 28 [ 54.667761][ T4374] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.667761][ T4374] [ 54.677544][ T4374] EXT4-fs (loop1): Total free blocks count 0 [ 54.683540][ T4374] EXT4-fs (loop1): Free/Dirty block details [ 54.689465][ T4374] EXT4-fs (loop1): free_blocks=2415919104 [ 54.695286][ T4374] EXT4-fs (loop1): dirty_blocks=1152 [ 54.700586][ T4374] EXT4-fs (loop1): Block reservation details [ 54.706668][ T4374] EXT4-fs (loop1): i_reserved_data_blocks=72 [ 54.724724][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 54.724738][ T29] audit: type=1326 audit(1763311896.762:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4372 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f729ac06567 code=0x7ffc0000 [ 54.754198][ T29] audit: type=1326 audit(1763311896.762:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4372 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729abab789 code=0x7ffc0000 [ 54.777440][ T29] audit: type=1326 audit(1763311896.762:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4372 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 54.800779][ T29] audit: type=1326 audit(1763311896.762:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4372 comm="syz.1.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ac0f6c9 code=0x7ffc0000 [ 54.825211][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28