last executing test programs: 1.265195556s ago: executing program 1 (id=204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xc5) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0x0) 1.238779478s ago: executing program 1 (id=206): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.192893042s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 1.119260567s ago: executing program 1 (id=210): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 529.380861ms ago: executing program 2 (id=248): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_bond\x00'}) 475.085565ms ago: executing program 2 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) write$P9_RLERRORu(r0, 0x0, 0x18) 460.233336ms ago: executing program 3 (id=256): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc041}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 300.849108ms ago: executing program 4 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 297.099838ms ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x408c5333, &(0x7f0000000080)) 296.726108ms ago: executing program 2 (id=259): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 278.82417ms ago: executing program 2 (id=260): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 257.977731ms ago: executing program 3 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 254.009101ms ago: executing program 0 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) 253.553421ms ago: executing program 4 (id=262): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x2, 0x2, 0x1) chdir(&(0x7f0000000000)='./file0\x00') bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 216.499164ms ago: executing program 2 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 216.146154ms ago: executing program 0 (id=275): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 215.662784ms ago: executing program 4 (id=276): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x7, 0x7fe2, 0x5, 0x141}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) io_uring_setup(0x1e40, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x51) 189.631896ms ago: executing program 3 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x10b, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffff, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x5374}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 178.095397ms ago: executing program 4 (id=265): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001480)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 109.652042ms ago: executing program 0 (id=266): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) setns(r1, 0x24020000) 109.123602ms ago: executing program 3 (id=280): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') 90.178603ms ago: executing program 0 (id=267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 52.879686ms ago: executing program 1 (id=269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) write$P9_RLERRORu(r0, 0x0, 0x18) 52.303046ms ago: executing program 0 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) 38.695917ms ago: executing program 4 (id=270): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc041}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 38.192977ms ago: executing program 3 (id=285): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001480)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 18.816179ms ago: executing program 1 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x2000, @fd=r1, 0xfff, 0x0}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 18.354399ms ago: executing program 4 (id=287): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 447.71µs ago: executing program 2 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 0 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) kernel console output (not intermixed with test programs): [ 18.345655][ T29] audit: type=1400 audit(1725239011.134:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 21.283691][ T29] audit: type=1400 audit(1725239014.064:82): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.284698][ T3244] cgroup: Unknown subsys name 'net' [ 21.306395][ T29] audit: type=1400 audit(1725239014.064:83): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.333770][ T29] audit: type=1400 audit(1725239014.094:84): avc: denied { unmount } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.497248][ T3244] cgroup: Unknown subsys name 'rlimit' [ 21.619105][ T29] audit: type=1400 audit(1725239014.404:85): avc: denied { setattr } for pid=3244 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.642510][ T29] audit: type=1400 audit(1725239014.404:86): avc: denied { create } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.659078][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.662941][ T29] audit: type=1400 audit(1725239014.404:87): avc: denied { write } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.691941][ T29] audit: type=1400 audit(1725239014.404:88): avc: denied { read } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.712412][ T29] audit: type=1400 audit(1725239014.404:89): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.722819][ T3244] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.737262][ T29] audit: type=1400 audit(1725239014.404:90): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.769233][ T29] audit: type=1400 audit(1725239014.454:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.749447][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 22.826531][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 22.841520][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 22.850236][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.857407][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.864513][ T3259] bridge_slave_0: entered allmulticast mode [ 22.870866][ T3259] bridge_slave_0: entered promiscuous mode [ 22.879857][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.886947][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.894176][ T3259] bridge_slave_1: entered allmulticast mode [ 22.900422][ T3259] bridge_slave_1: entered promiscuous mode [ 22.914651][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 22.960749][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.984498][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 22.993667][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.011852][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.019138][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.026314][ T3265] bridge_slave_0: entered allmulticast mode [ 23.032648][ T3265] bridge_slave_0: entered promiscuous mode [ 23.060187][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.067293][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074376][ T3265] bridge_slave_1: entered allmulticast mode [ 23.080845][ T3265] bridge_slave_1: entered promiscuous mode [ 23.093505][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.100622][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.107775][ T3258] bridge_slave_0: entered allmulticast mode [ 23.114105][ T3258] bridge_slave_0: entered promiscuous mode [ 23.120650][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.127805][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.135034][ T3258] bridge_slave_1: entered allmulticast mode [ 23.141392][ T3258] bridge_slave_1: entered promiscuous mode [ 23.148078][ T3259] team0: Port device team_slave_0 added [ 23.166986][ T3259] team0: Port device team_slave_1 added [ 23.195856][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.213436][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220547][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.227680][ T3260] bridge_slave_0: entered allmulticast mode [ 23.234036][ T3260] bridge_slave_0: entered promiscuous mode [ 23.241202][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.255332][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.264590][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.271614][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.297511][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.308283][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.315377][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.322695][ T3264] bridge_slave_0: entered allmulticast mode [ 23.329109][ T3264] bridge_slave_0: entered promiscuous mode [ 23.335511][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.342650][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.349802][ T3260] bridge_slave_1: entered allmulticast mode [ 23.356111][ T3260] bridge_slave_1: entered promiscuous mode [ 23.362910][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.380519][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.387511][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.413385][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.426411][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.433581][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.441166][ T3264] bridge_slave_1: entered allmulticast mode [ 23.447550][ T3264] bridge_slave_1: entered promiscuous mode [ 23.467877][ T3258] team0: Port device team_slave_0 added [ 23.483751][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.494139][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.503799][ T3258] team0: Port device team_slave_1 added [ 23.519651][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.529220][ T3265] team0: Port device team_slave_0 added [ 23.547858][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.557372][ T3260] team0: Port device team_slave_0 added [ 23.563754][ T3265] team0: Port device team_slave_1 added [ 23.578125][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.585103][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.611033][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.622350][ T3260] team0: Port device team_slave_1 added [ 23.638092][ T3259] hsr_slave_0: entered promiscuous mode [ 23.644104][ T3259] hsr_slave_1: entered promiscuous mode [ 23.650191][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.657145][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.683304][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.712189][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.719155][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.745218][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.758293][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.765298][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.791217][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.802594][ T3264] team0: Port device team_slave_0 added [ 23.808945][ T3264] team0: Port device team_slave_1 added [ 23.820546][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.827541][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.853550][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.872687][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.879691][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.905674][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.942988][ T3265] hsr_slave_0: entered promiscuous mode [ 23.948925][ T3265] hsr_slave_1: entered promiscuous mode [ 23.954611][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.962171][ T3265] Cannot create hsr debugfs directory [ 23.968919][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.975882][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.002014][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.020278][ T3258] hsr_slave_0: entered promiscuous mode [ 24.026232][ T3258] hsr_slave_1: entered promiscuous mode [ 24.032069][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.039680][ T3258] Cannot create hsr debugfs directory [ 24.050201][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.057245][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.083175][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.142565][ T3264] hsr_slave_0: entered promiscuous mode [ 24.148576][ T3264] hsr_slave_1: entered promiscuous mode [ 24.154443][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.162037][ T3264] Cannot create hsr debugfs directory [ 24.180345][ T3260] hsr_slave_0: entered promiscuous mode [ 24.186368][ T3260] hsr_slave_1: entered promiscuous mode [ 24.192114][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.199800][ T3260] Cannot create hsr debugfs directory [ 24.308700][ T3259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.317205][ T3259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.329823][ T3259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.340153][ T3259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.387952][ T3265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.397504][ T3265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.409392][ T3265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.419561][ T3265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.439767][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.448958][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.466994][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.479888][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.513947][ T3258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.522360][ T3258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.540347][ T3258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.548985][ T3264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.557493][ T3264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.566471][ T3264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.574851][ T3264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.585586][ T3258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.607112][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.646803][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.659725][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.670210][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.677323][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.685992][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.693226][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.708257][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.736429][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.745492][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.752537][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.762099][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.769326][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.789170][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.802075][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.809170][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.821096][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.840194][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.847308][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.877743][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.896726][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.905690][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.923601][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.930697][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.941696][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.948772][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.967384][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.974498][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.993337][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.000473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.037883][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.059500][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.083404][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.103701][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.181693][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.202999][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.251396][ T3264] veth0_vlan: entered promiscuous mode [ 25.277929][ T3259] veth0_vlan: entered promiscuous mode [ 25.296534][ T3264] veth1_vlan: entered promiscuous mode [ 25.310241][ T3259] veth1_vlan: entered promiscuous mode [ 25.339196][ T3264] veth0_macvtap: entered promiscuous mode [ 25.349002][ T3265] veth0_vlan: entered promiscuous mode [ 25.360001][ T3264] veth1_macvtap: entered promiscuous mode [ 25.384061][ T3260] veth0_vlan: entered promiscuous mode [ 25.394105][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.407378][ T3260] veth1_vlan: entered promiscuous mode [ 25.413831][ T3258] veth0_vlan: entered promiscuous mode [ 25.420698][ T3265] veth1_vlan: entered promiscuous mode [ 25.427181][ T3259] veth0_macvtap: entered promiscuous mode [ 25.434810][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.447513][ T3259] veth1_macvtap: entered promiscuous mode [ 25.454970][ T3264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.463804][ T3264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.472587][ T3264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.481285][ T3264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.497004][ T3258] veth1_vlan: entered promiscuous mode [ 25.520378][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.530976][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.542193][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.560573][ T3260] veth0_macvtap: entered promiscuous mode [ 25.567138][ T3265] veth0_macvtap: entered promiscuous mode [ 25.574606][ T3258] veth0_macvtap: entered promiscuous mode [ 25.584642][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.595144][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.610819][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.618716][ T3260] veth1_macvtap: entered promiscuous mode [ 25.628131][ T3265] veth1_macvtap: entered promiscuous mode [ 25.640357][ T3259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.649303][ T3259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.658040][ T3259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.666915][ T3259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.683831][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.694299][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.704144][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.714611][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.726082][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.734261][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.744861][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.754798][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.765314][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.776945][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.785991][ T3258] veth1_macvtap: entered promiscuous mode [ 25.799266][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.809751][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.819715][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.830209][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.840043][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.850453][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.861654][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.869466][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.878225][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.886928][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.895677][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918861][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.929425][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.939254][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.949721][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.959694][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.970178][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.982023][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.991486][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.000244][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.009015][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.017717][ T3265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.028207][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.038678][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.048565][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.058986][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.068803][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.079277][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.089079][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.099550][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.110526][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.135386][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.145906][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.155922][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.166384][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.176357][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.186828][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.196699][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.207141][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.227626][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.229975][ T3409] syz.4.7[3409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.235631][ T3409] syz.4.7[3409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.284789][ T3258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.304756][ T3258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.313611][ T3258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.322462][ T3258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.346352][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 26.346373][ T29] audit: type=1400 audit(1725239019.134:135): avc: denied { write } for pid=3412 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.348697][ T3411] pim6reg1: entered promiscuous mode [ 26.377051][ T3411] pim6reg1: entered allmulticast mode [ 26.419571][ T29] audit: type=1326 audit(1725239019.194:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.442678][ T29] audit: type=1326 audit(1725239019.194:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.465787][ T29] audit: type=1326 audit(1725239019.194:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.489642][ T29] audit: type=1326 audit(1725239019.194:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.512793][ T29] audit: type=1326 audit(1725239019.194:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.536215][ T29] audit: type=1326 audit(1725239019.194:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.559648][ T29] audit: type=1326 audit(1725239019.194:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.582683][ T29] audit: type=1326 audit(1725239019.194:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.605903][ T29] audit: type=1326 audit(1725239019.194:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1776ab9eb9 code=0x7ffc0000 [ 26.630088][ T3420] 9pnet_fd: Insufficient options for proto=fd [ 26.703364][ T3433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.861715][ T3456] serio: Serial port ptm0 [ 26.941383][ T3459] syz.0.23 (3459) used greatest stack depth: 11088 bytes left [ 26.993848][ T3465] loop0: detected capacity change from 0 to 128 [ 27.002082][ T3465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 27.014843][ T3465] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 27.022741][ T3465] FAT-fs (loop0): Filesystem has been set read-only [ 27.029692][ T3465] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 27.040129][ T3465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 27.996987][ T3498] loop3: detected capacity change from 0 to 128 [ 28.009039][ T3498] EXT4-fs: Ignoring removed nobh option [ 28.065219][ T3498] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.095054][ T3502] vhci_hcd: invalid port number 61 [ 28.100262][ T3502] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 28.115924][ T3498] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.319872][ T3258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.570241][ T3514] loop1: detected capacity change from 0 to 1024 [ 28.579186][ T3514] EXT4-fs: Ignoring removed oldalloc option [ 28.645837][ T3514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.730830][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.186846][ T3532] loop2: detected capacity change from 0 to 128 [ 30.196893][ T3532] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 30.208402][ T3532] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 30.216387][ T3532] FAT-fs (loop2): Filesystem has been set read-only [ 30.227019][ T3532] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 30.240166][ T3532] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 30.286609][ T3550] 9pnet_fd: Insufficient options for proto=fd [ 30.347230][ T3565] pim6reg1: entered promiscuous mode [ 30.352555][ T3565] pim6reg1: entered allmulticast mode [ 30.384582][ T3575] loop4: detected capacity change from 0 to 128 [ 30.392584][ T3575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 30.404223][ T3575] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 30.412143][ T3575] FAT-fs (loop4): Filesystem has been set read-only [ 30.419225][ T3575] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 30.428651][ T3575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 31.201890][ T3583] loop0: detected capacity change from 0 to 1024 [ 31.210817][ T3583] EXT4-fs: Ignoring removed oldalloc option [ 31.215858][ T3588] syz.4.73[3588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.220236][ T3588] syz.4.73[3588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.241055][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.261006][ T3599] syz.1.77[3599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.264486][ T3599] syz.1.77[3599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.317188][ T3608] loop1: detected capacity change from 0 to 128 [ 31.341735][ T3608] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 31.353690][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.367710][ T3608] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 31.375616][ T3608] FAT-fs (loop1): Filesystem has been set read-only [ 31.382585][ T3608] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 31.396225][ T3608] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 32.212533][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 32.212547][ T29] audit: type=1400 audit(1725239024.994:267): avc: denied { create } for pid=3627 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.240131][ T29] audit: type=1400 audit(1725239025.004:268): avc: denied { bind } for pid=3627 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.259834][ T29] audit: type=1400 audit(1725239025.004:269): avc: denied { read } for pid=3627 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.280337][ T29] audit: type=1326 audit(1725239025.034:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce649eb9 code=0x7ffc0000 [ 32.303507][ T29] audit: type=1326 audit(1725239025.034:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce649eb9 code=0x7ffc0000 [ 32.326638][ T29] audit: type=1326 audit(1725239025.034:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47ce649eb9 code=0x7ffc0000 [ 32.349881][ T29] audit: type=1326 audit(1725239025.034:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce649eb9 code=0x7ffc0000 [ 32.373050][ T29] audit: type=1326 audit(1725239025.034:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3632 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a15a9eb9 code=0x7ffc0000 [ 32.396302][ T29] audit: type=1326 audit(1725239025.034:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3632 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a15a9eb9 code=0x7ffc0000 [ 32.412410][ T3642] syz.2.97[3642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.419462][ T29] audit: type=1326 audit(1725239025.034:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f47ce649eb9 code=0x7ffc0000 [ 32.453877][ T3642] syz.2.97[3642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.572976][ C1] hrtimer: interrupt took 29636 ns [ 32.650777][ T3674] syz.3.112[3674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.650812][ T3674] syz.3.112[3674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.712489][ T3681] Zero length message leads to an empty skb [ 32.786467][ T3701] syz.0.125[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.786523][ T3701] syz.0.125[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.812953][ T3697] loop4: detected capacity change from 0 to 4096 [ 32.839227][ T3697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.877971][ T3712] syz.0.128[3712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.878024][ T3712] syz.0.128[3712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.970110][ T3697] syz.4.124 (3697) used greatest stack depth: 11000 bytes left [ 33.009818][ T3730] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 33.017607][ T3730] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 33.025231][ T3730] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.134'. [ 33.036555][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.134899][ T3723] syz.0.132 (3723) used greatest stack depth: 10056 bytes left [ 33.224950][ T3761] loop1: detected capacity change from 0 to 1024 [ 33.234136][ T3761] EXT4-fs: Ignoring removed oldalloc option [ 33.251679][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.295176][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.346892][ T3779] loop3: detected capacity change from 0 to 1024 [ 33.353563][ T3779] EXT4-fs: Ignoring removed i_version option [ 33.360017][ T3779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.371082][ T3779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.402576][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.432917][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.440425][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.447836][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.455308][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.462843][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.470328][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.477766][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.485158][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.492561][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.499969][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.507403][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.508204][ T3794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.514773][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.533905][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.541395][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.548768][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.556145][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.563501][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.570867][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.578288][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.585784][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.593149][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.600634][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.608060][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.615541][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.622923][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.630291][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.637663][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.645149][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.652554][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.659952][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.667430][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.674809][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.682225][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.689620][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.697004][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.704426][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.711821][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.719209][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.726578][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.734031][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.741487][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.748928][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.756304][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.765059][ T3336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 33.814309][ T3803] loop3: detected capacity change from 0 to 2048 [ 33.828730][ T3805] loop2: detected capacity change from 0 to 128 [ 33.836292][ T3807] tls_set_device_offload_rx: netdev not found [ 33.876014][ T3803] loop3: p2 < > [ 34.091750][ T3840] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 34.099574][ T3840] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 34.107234][ T3840] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.179'. [ 34.135093][ T3844] loop4: detected capacity change from 0 to 2048 [ 34.178113][ T3844] Alternate GPT is invalid, using primary GPT. [ 34.184346][ T3844] loop4: p1 p2 p3 [ 34.233659][ T3865] loop3: detected capacity change from 0 to 256 [ 34.253317][ T3865] FAT-fs (loop3): Directory bread(block 64) failed [ 34.260151][ T3865] FAT-fs (loop3): Directory bread(block 65) failed [ 34.267864][ T3865] FAT-fs (loop3): Directory bread(block 66) failed [ 34.274464][ T3865] FAT-fs (loop3): Directory bread(block 67) failed [ 34.289408][ T3865] FAT-fs (loop3): Directory bread(block 68) failed [ 34.296799][ T3865] FAT-fs (loop3): Directory bread(block 69) failed [ 34.304302][ T3865] FAT-fs (loop3): Directory bread(block 70) failed [ 34.317064][ T3865] FAT-fs (loop3): Directory bread(block 71) failed [ 34.323892][ T3865] FAT-fs (loop3): Directory bread(block 72) failed [ 34.330831][ T3865] FAT-fs (loop3): Directory bread(block 73) failed [ 34.472629][ T3895] loop4: detected capacity change from 0 to 1024 [ 34.492718][ T3895] EXT4-fs: Ignoring removed i_version option [ 34.500786][ T3895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.528858][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.530061][ T3899] loop3: detected capacity change from 0 to 2048 [ 34.576771][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.598458][ T3899] Alternate GPT is invalid, using primary GPT. [ 34.604862][ T3899] loop3: p1 p2 p3 [ 34.696074][ T3923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3923 comm=syz.2.219 [ 35.057169][ T3973] loop4: detected capacity change from 0 to 1024 [ 35.063838][ T3973] EXT4-fs: Ignoring removed i_version option [ 35.070803][ T3973] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.087108][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.146993][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.267555][ T4006] loop4: detected capacity change from 0 to 256 [ 35.277515][ T4006] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.538411][ T4023] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 35.546147][ T4023] netlink: 'syz.0.275': attribute type 4 has an invalid length. [ 35.553787][ T4023] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.275'. [ 35.719733][ T4052] ================================================================== [ 35.727841][ T4052] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll [ 35.734962][ T4052] [ 35.737266][ T4052] read-write to 0xffff888115900070 of 4 bytes by task 4051 on cpu 1: [ 35.745307][ T4052] io_submit_sqes+0x23f/0x1080 [ 35.750063][ T4052] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 35.755586][ T4052] __x64_sys_io_uring_enter+0x78/0x90 [ 35.760938][ T4052] x64_sys_call+0x2567/0x2d60 [ 35.765595][ T4052] do_syscall_64+0xc9/0x1c0 [ 35.770074][ T4052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.775955][ T4052] [ 35.778264][ T4052] read to 0xffff888115900070 of 4 bytes by task 4052 on cpu 0: [ 35.785800][ T4052] io_uring_poll+0xcf/0x190 [ 35.790299][ T4052] __io_arm_poll_handler+0x229/0xf30 [ 35.795570][ T4052] io_arm_poll_handler+0x433/0x5f0 [ 35.800667][ T4052] io_wq_submit_work+0x512/0x600 [ 35.805586][ T4052] io_worker_handle_work+0x486/0x9d0 [ 35.810865][ T4052] io_wq_worker+0x286/0x820 [ 35.815347][ T4052] ret_from_fork+0x4b/0x60 [ 35.819755][ T4052] ret_from_fork_asm+0x1a/0x30 [ 35.824501][ T4052] [ 35.826801][ T4052] value changed: 0x00000f97 -> 0x00000f9d [ 35.832587][ T4052] [ 35.834920][ T4052] Reported by Kernel Concurrency Sanitizer on: [ 35.841052][ T4052] CPU: 0 UID: 0 PID: 4052 Comm: iou-wrk-4051 Not tainted 6.11.0-rc6-syzkaller-00017-gc9f016e72b5c #0 [ 35.851872][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 35.861920][ T4052] ==================================================================