last executing test programs: 3.484052838s ago: executing program 0 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x5, {0x5, 0x11, "46ff44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.785188858s ago: executing program 0 (id=47): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x40, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.597380511s ago: executing program 1 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) modify_ldt$write(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rxrpc_call_reset\x00'}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 2.554817032s ago: executing program 0 (id=49): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.501689043s ago: executing program 0 (id=51): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x0) 2.323932105s ago: executing program 1 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.207102827s ago: executing program 3 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 2.053477649s ago: executing program 3 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) 1.961513501s ago: executing program 3 (id=64): mount(0x0, 0x0, 0x0, 0x4400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0xfffffffe, 0x10001, 0x100000}}]}]}}}]}, 0x68}}, 0x20024040) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 1.926515131s ago: executing program 0 (id=66): r0 = syz_io_uring_setup(0x1105, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000000)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.848916322s ago: executing program 1 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x71c, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0xa6}}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@bsdgroups}, {@resgid}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x45c, &(0x7f0000000880)="$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") chdir(&(0x7f0000000400)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.833472773s ago: executing program 4 (id=69): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0xf2db72b, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000"], 0xfdef) 1.758023594s ago: executing program 4 (id=71): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x13) fcntl$setlease(r3, 0x400, 0x2) 1.650003495s ago: executing program 4 (id=72): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) close(r0) 1.624993525s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) 937.408726ms ago: executing program 2 (id=77): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007904f06a0000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) syslog(0x3, 0xfffffffffffffffc, 0x61) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 785.765308ms ago: executing program 1 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) close(r0) 770.229358ms ago: executing program 2 (id=79): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(0x0, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) 669.73026ms ago: executing program 3 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 621.94939ms ago: executing program 0 (id=81): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x36d, &(0x7f0000000a00)="$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") shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42200, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) close(r0) 607.416761ms ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800000, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 440.453033ms ago: executing program 4 (id=83): r0 = syz_io_uring_setup(0x749, &(0x7f00000003c0)={0x0, 0x6666, 0x400, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x2000c081}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 428.036784ms ago: executing program 3 (id=84): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53415", 0x11}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 400.401864ms ago: executing program 2 (id=85): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 344.252565ms ago: executing program 1 (id=86): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 329.470995ms ago: executing program 4 (id=87): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 226.316566ms ago: executing program 2 (id=88): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 80.902068ms ago: executing program 4 (id=89): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r2, 0x4b37) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 71.062849ms ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=91): r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 37.073463][ T30] audit: type=1400 audit(1747374178.467:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 37.074803][ T3304] cgroup: Unknown subsys name 'net' [ 37.098834][ T30] audit: type=1400 audit(1747374178.467:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.130954][ T30] audit: type=1400 audit(1747374178.507:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.225569][ T3304] cgroup: Unknown subsys name 'cpuset' [ 37.232741][ T3304] cgroup: Unknown subsys name 'rlimit' [ 37.403365][ T30] audit: type=1400 audit(1747374178.797:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.432931][ T30] audit: type=1400 audit(1747374178.807:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.457259][ T30] audit: type=1400 audit(1747374178.807:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.482474][ T30] audit: type=1400 audit(1747374178.807:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.505857][ T30] audit: type=1400 audit(1747374178.817:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.515512][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 37.533384][ T30] audit: type=1400 audit(1747374178.817:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.569204][ T30] audit: type=1400 audit(1747374178.937:74): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.611072][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.614656][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 39.642894][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 39.663264][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 39.697607][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 39.798625][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.806873][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.814825][ T3315] bridge_slave_0: entered allmulticast mode [ 39.822597][ T3315] bridge_slave_0: entered promiscuous mode [ 39.829958][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.837878][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.846076][ T3315] bridge_slave_1: entered allmulticast mode [ 39.857040][ T3315] bridge_slave_1: entered promiscuous mode [ 39.864797][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.873125][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.882347][ T3318] bridge_slave_0: entered allmulticast mode [ 39.891648][ T3318] bridge_slave_0: entered promiscuous mode [ 39.920223][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.928001][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.936445][ T3318] bridge_slave_1: entered allmulticast mode [ 39.944223][ T3318] bridge_slave_1: entered promiscuous mode [ 39.951953][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 39.964488][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.974189][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.982220][ T3319] bridge_slave_0: entered allmulticast mode [ 39.989274][ T3319] bridge_slave_0: entered promiscuous mode [ 40.016806][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.025486][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.033239][ T3319] bridge_slave_1: entered allmulticast mode [ 40.041130][ T3319] bridge_slave_1: entered promiscuous mode [ 40.055276][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.075850][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.102959][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.111821][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.120858][ T3314] bridge_slave_0: entered allmulticast mode [ 40.128185][ T3314] bridge_slave_0: entered promiscuous mode [ 40.136003][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.143594][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.151706][ T3314] bridge_slave_1: entered allmulticast mode [ 40.158929][ T3314] bridge_slave_1: entered promiscuous mode [ 40.167116][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.191731][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.207993][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.244022][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.255756][ T3318] team0: Port device team_slave_0 added [ 40.269893][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.289373][ T3318] team0: Port device team_slave_1 added [ 40.296517][ T3315] team0: Port device team_slave_0 added [ 40.303728][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.325581][ T3315] team0: Port device team_slave_1 added [ 40.332342][ T3319] team0: Port device team_slave_0 added [ 40.354914][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.362689][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.371069][ T3320] bridge_slave_0: entered allmulticast mode [ 40.378675][ T3320] bridge_slave_0: entered promiscuous mode [ 40.386343][ T3319] team0: Port device team_slave_1 added [ 40.409201][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.416349][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.444854][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.463784][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.473847][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.481449][ T3320] bridge_slave_1: entered allmulticast mode [ 40.488713][ T3320] bridge_slave_1: entered promiscuous mode [ 40.501547][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.509808][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.538766][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.552487][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.560153][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.591298][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.605413][ T3314] team0: Port device team_slave_0 added [ 40.632194][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.642739][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.672736][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.691095][ T3314] team0: Port device team_slave_1 added [ 40.705329][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.713115][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.745589][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.775600][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.787395][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.798151][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.806375][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.834556][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.876837][ T3318] hsr_slave_0: entered promiscuous mode [ 40.884055][ T3318] hsr_slave_1: entered promiscuous mode [ 40.906857][ T3315] hsr_slave_0: entered promiscuous mode [ 40.913953][ T3315] hsr_slave_1: entered promiscuous mode [ 40.921020][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.929008][ T3315] Cannot create hsr debugfs directory [ 40.935303][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.942350][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.969915][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.983271][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.991188][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.019063][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.059889][ T3320] team0: Port device team_slave_0 added [ 41.067070][ T3320] team0: Port device team_slave_1 added [ 41.095961][ T3319] hsr_slave_0: entered promiscuous mode [ 41.103361][ T3319] hsr_slave_1: entered promiscuous mode [ 41.110287][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.118825][ T3319] Cannot create hsr debugfs directory [ 41.148368][ T3314] hsr_slave_0: entered promiscuous mode [ 41.155312][ T3314] hsr_slave_1: entered promiscuous mode [ 41.161662][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.171215][ T3314] Cannot create hsr debugfs directory [ 41.180371][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.187987][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.215449][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.227252][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.234637][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.262577][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.350182][ T3320] hsr_slave_0: entered promiscuous mode [ 41.357287][ T3320] hsr_slave_1: entered promiscuous mode [ 41.363711][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.372846][ T3320] Cannot create hsr debugfs directory [ 41.509080][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.536910][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.547026][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.568141][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.602738][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.612632][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.623757][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.640019][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.681142][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.700138][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.723352][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.743620][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.765679][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.777268][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.788627][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.812356][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.847649][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.879232][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.890480][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.905201][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.920808][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.939248][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.951877][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.971589][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.981185][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.990075][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.005524][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.013960][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.027041][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.052822][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.060896][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.073594][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.081820][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.128537][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.144901][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.165138][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.183406][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.191004][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.204276][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.213502][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.238609][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.246401][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.266503][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.275456][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.296545][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.330450][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.347095][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.363569][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.392763][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.416849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.424880][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.456374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.464551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.511017][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.522987][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.556763][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.638455][ T3315] veth0_vlan: entered promiscuous mode [ 42.667725][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.684133][ T3315] veth1_vlan: entered promiscuous mode [ 42.708960][ T3318] veth0_vlan: entered promiscuous mode [ 42.748627][ T3318] veth1_vlan: entered promiscuous mode [ 42.762033][ T3320] veth0_vlan: entered promiscuous mode [ 42.791832][ T3314] veth0_vlan: entered promiscuous mode [ 42.808345][ T3314] veth1_vlan: entered promiscuous mode [ 42.817882][ T3315] veth0_macvtap: entered promiscuous mode [ 42.829911][ T3320] veth1_vlan: entered promiscuous mode [ 42.849717][ T3315] veth1_macvtap: entered promiscuous mode [ 42.859679][ T3318] veth0_macvtap: entered promiscuous mode [ 42.872102][ T3318] veth1_macvtap: entered promiscuous mode [ 42.895076][ T3320] veth0_macvtap: entered promiscuous mode [ 42.904930][ T3314] veth0_macvtap: entered promiscuous mode [ 42.918619][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.928696][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.944989][ T3314] veth1_macvtap: entered promiscuous mode [ 42.952570][ T3320] veth1_macvtap: entered promiscuous mode [ 42.964006][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.978341][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.997013][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.008265][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.019468][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.030864][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.042127][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.051853][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.067319][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.077279][ T3318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.087835][ T3318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.097850][ T3318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.116054][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.126087][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.148453][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.160697][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.173489][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.183027][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.201937][ T3320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.214763][ T3320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.224638][ T3320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.234463][ T3320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.255231][ T3319] veth0_vlan: entered promiscuous mode [ 43.276503][ T3319] veth1_vlan: entered promiscuous mode [ 43.282376][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 43.282390][ T30] audit: type=1400 audit(1747374184.677:84): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.Odb9Be/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.295392][ T3319] veth0_macvtap: entered promiscuous mode [ 43.321572][ T30] audit: type=1400 audit(1747374184.677:85): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.359224][ T30] audit: type=1400 audit(1747374184.677:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.Odb9Be/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.387449][ T30] audit: type=1400 audit(1747374184.677:87): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.412648][ T30] audit: type=1400 audit(1747374184.677:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.Odb9Be/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.446642][ T30] audit: type=1400 audit(1747374184.677:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.Odb9Be/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 43.488825][ T30] audit: type=1400 audit(1747374184.677:90): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.527681][ T30] audit: type=1400 audit(1747374184.917:91): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.552716][ T30] audit: type=1400 audit(1747374184.917:92): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 43.595105][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.612005][ T3319] veth1_macvtap: entered promiscuous mode [ 43.637403][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.664728][ T30] audit: type=1400 audit(1747374185.037:93): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.700065][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.733147][ T3458] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 43.852856][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.864181][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.874467][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.884614][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.943705][ T3470] loop0: detected capacity change from 0 to 8192 [ 43.994812][ T3462] loop0: p1 p2 p4 [ 43.999361][ T3462] loop0: p1 size 108920841 extends beyond EOD, truncated [ 44.012578][ T3462] loop0: p2 start 861536256 is beyond EOD, truncated [ 44.021618][ T3462] loop0: p4 size 65536 extends beyond EOD, truncated [ 44.043283][ T3470] loop0: p1 p2 p4 [ 44.047945][ T3470] loop0: p1 size 108920841 extends beyond EOD, truncated [ 44.056510][ T3470] loop0: p2 start 861536256 is beyond EOD, truncated [ 44.064447][ T3470] loop0: p4 size 65536 extends beyond EOD, truncated [ 44.217421][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.224064][ T3484] mmap: syz.3.4 (3484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.235907][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.343769][ T3488] syz.2.13 (3488) used greatest stack depth: 11040 bytes left [ 44.357001][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.366041][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.472335][ T3504] loop0: detected capacity change from 0 to 764 [ 44.555083][ T3504] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 44.579384][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 44.665843][ T3522] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20'. [ 44.738310][ T3525] loop1: detected capacity change from 0 to 512 [ 44.772670][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.789008][ T3525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.826902][ T3525] EXT4-fs (loop1): 1 truncate cleaned up [ 44.847891][ T3525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.067193][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.106838][ T3537] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 45.116451][ T3537] ref_ctr increment failed for inode: 0x2d offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88810b269b80 [ 45.184618][ T3537] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 45.193830][ T3537] ref_ctr decrement failed for inode: 0x2d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810b269b80 [ 45.205822][ T3537] uprobe: syz.1.26:3537 failed to unregister, leaking uprobe [ 45.340864][ T3557] process 'syz.3.35' launched '/dev/fd/3' with NULL argv: empty string added [ 45.382657][ T3562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.409008][ T3562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.433226][ C0] hrtimer: interrupt took 27741 ns [ 45.464229][ T3568] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.473763][ T3568] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.483654][ T3568] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.493748][ T3568] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.515064][ T3568] syz.4.38 (3568) used greatest stack depth: 10776 bytes left [ 45.573739][ T3573] bridge_slave_0: left allmulticast mode [ 45.580174][ T3573] bridge_slave_0: left promiscuous mode [ 45.586322][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.603522][ T3573] bridge_slave_1: left allmulticast mode [ 45.610313][ T3573] bridge_slave_1: left promiscuous mode [ 45.616416][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.631127][ T3573] bond0: (slave bond_slave_0): Releasing backup interface [ 45.644263][ T3573] bond0: (slave bond_slave_1): Releasing backup interface [ 45.660876][ T3573] team0: Port device team_slave_0 removed [ 45.670613][ T3573] team0: Port device team_slave_1 removed [ 45.680376][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.688146][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.701815][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.709905][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.711821][ T3625] syzkaller0: entered promiscuous mode [ 46.726060][ T3625] syzkaller0 (unregistering): left promiscuous mode [ 46.780793][ T3628] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.836716][ T3631] loop3: detected capacity change from 0 to 128 [ 47.057165][ T3644] loop1: detected capacity change from 0 to 2048 [ 47.096899][ T3644] EXT4-fs (loop1): failed to initialize system zone (-117) [ 47.132496][ T3644] EXT4-fs (loop1): mount failed [ 47.139645][ T3650] Cannot find set identified by id 0 to match [ 47.201200][ T3644] loop1: detected capacity change from 0 to 512 [ 47.225444][ T3655] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 47.233324][ T3655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.73'. [ 47.388930][ T3655] : renamed from bond0 (while UP) [ 47.407487][ T3644] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.68: corrupted in-inode xattr: invalid ea_ino [ 47.467392][ T3644] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.68: couldn't read orphan inode 15 (err -117) [ 47.600570][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.783714][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 48.059869][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.269996][ T3682] loop0: detected capacity change from 0 to 256 [ 48.307180][ T3682] FAT-fs (loop0): Directory bread(block 64) failed [ 48.311621][ T3653] kexec: Could not allocate control_code_buffer [ 48.324412][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 48.324433][ T30] audit: type=1400 audit(1747374189.667:280): avc: denied { create } for pid=3681 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.357300][ T30] audit: type=1400 audit(1747374189.667:281): avc: denied { setopt } for pid=3681 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.376759][ T3682] FAT-fs (loop0): Directory bread(block 65) failed [ 48.431081][ T3682] FAT-fs (loop0): Directory bread(block 66) failed [ 48.484338][ T3682] FAT-fs (loop0): Directory bread(block 67) failed [ 48.504476][ T3682] FAT-fs (loop0): Directory bread(block 68) failed [ 48.511579][ T30] audit: type=1400 audit(1747374189.867:282): avc: denied { ioctl } for pid=3691 comm="syz.3.84" path="socket:[5395]" dev="sockfs" ino=5395 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.551671][ T3682] FAT-fs (loop0): Directory bread(block 69) failed [ 48.562487][ T3682] FAT-fs (loop0): Directory bread(block 70) failed [ 48.570275][ T3682] FAT-fs (loop0): Directory bread(block 71) failed [ 48.577441][ T3682] FAT-fs (loop0): Directory bread(block 72) failed [ 48.581737][ T3692] syzkaller0: entered promiscuous mode [ 48.585264][ T3682] FAT-fs (loop0): Directory bread(block 73) failed [ 48.591282][ T3692] syzkaller0: entered allmulticast mode [ 48.630089][ T30] audit: type=1400 audit(1747374190.017:283): avc: denied { create } for pid=3702 comm="syz.2.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.653752][ T30] audit: type=1400 audit(1747374190.027:284): avc: denied { mounton } for pid=3702 comm="syz.2.88" path="/22/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.685364][ T3698] netlink: 96 bytes leftover after parsing attributes in process `syz.4.87'. [ 48.701372][ T30] audit: type=1400 audit(1747374190.097:285): avc: denied { setattr } for pid=3702 comm="syz.2.88" name="file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.768839][ T30] audit: type=1400 audit(1747374190.167:286): avc: denied { shutdown } for pid=3681 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.810805][ T3707] ================================================================== [ 48.814010][ T3706] netlink: 'syz.4.89': attribute type 13 has an invalid length. [ 48.823800][ T3707] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 48.823845][ T3707] [ 48.823853][ T3707] write to 0xffffffff88e76c48 of 4 bytes by task 3706 on cpu 0: [ 48.854043][ T3707] avc_ss_reset+0x20c/0x240 [ 48.860199][ T3707] security_set_bools+0x301/0x340 [ 48.860265][ T30] audit: type=1400 audit(1747374190.237:287): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.866077][ T3707] sel_commit_bools_write+0x1ea/0x270 [ 48.866105][ T3707] vfs_writev+0x3ee/0x870 [ 48.866126][ T3707] do_writev+0xe7/0x210 [ 48.905848][ T30] audit: type=1400 audit(1747374190.297:288): avc: denied { prog_load } for pid=3681 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.910950][ T3707] __x64_sys_writev+0x45/0x50 [ 48.910993][ T3707] x64_sys_call+0x2006/0x2fb0 [ 48.911017][ T3707] do_syscall_64+0xd0/0x1a0 [ 48.916259][ T30] audit: type=1400 audit(1747374190.297:289): avc: denied { bpf } for pid=3681 comm="syz.0.81" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.941734][ T3707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.941777][ T3707] [ 48.941784][ T3707] read to 0xffffffff88e76c48 of 4 bytes by task 3707 on cpu 1: [ 48.941802][ T3707] avc_policy_seqno+0x15/0x30 [ 48.941824][ T3707] selinux_file_permission+0x1fc/0x360 [ 48.941856][ T3707] security_file_permission+0x3e/0x80 [ 48.941886][ T3707] vfs_read+0x136/0x6f0 [ 48.941912][ T3707] ksys_read+0xda/0x1a0 [ 49.030973][ T3707] __x64_sys_read+0x40/0x50 [ 49.036309][ T3707] x64_sys_call+0x2d77/0x2fb0 [ 49.041462][ T3707] do_syscall_64+0xd0/0x1a0 [ 49.046530][ T3707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.052835][ T3707] [ 49.055378][ T3707] value changed: 0x00000001 -> 0x00000002 [ 49.061714][ T3707] [ 49.064165][ T3707] Reported by Kernel Concurrency Sanitizer on: [ 49.071574][ T3707] CPU: 1 UID: 0 PID: 3707 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 49.085942][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.096899][ T3707] ================================================================== [ 49.175925][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.183788][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.226608][ T3709] syz.2.91: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 49.240845][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.243973][ T3709] CPU: 1 UID: 0 PID: 3709 Comm: syz.2.91 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 49.244013][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.244032][ T3709] Call Trace: [ 49.244040][ T3709] [ 49.244064][ T3709] __dump_stack+0x1d/0x30 [ 49.244095][ T3709] dump_stack_lvl+0xe8/0x140 [ 49.244207][ T3709] dump_stack+0x15/0x1b [ 49.244232][ T3709] warn_alloc+0x12b/0x1a0 [ 49.244343][ T3709] ? kmem_cache_free+0xdd/0x2f0 [ 49.244379][ T3709] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 49.244420][ T3709] ? update_load_avg+0x1da/0x820 [ 49.244462][ T3709] ? __list_add_valid_or_report+0x38/0xe0 [ 49.244548][ T3709] ? __set_next_task_fair+0x5b/0x150 [ 49.244581][ T3709] ? should_fail_ex+0x30/0x280 [ 49.244628][ T3709] ? xskq_create+0x36/0xe0 [ 49.244692][ T3709] ? should_failslab+0x8c/0xb0 [ 49.244821][ T3709] vmalloc_user_noprof+0x59/0x70 [ 49.244862][ T3709] ? xskq_create+0x80/0xe0 [ 49.244902][ T3709] xskq_create+0x80/0xe0 [ 49.244944][ T3709] xsk_init_queue+0x95/0xf0 [ 49.244984][ T3709] xsk_setsockopt+0x3de/0x510 [ 49.245098][ T3709] ? __pfx_xsk_setsockopt+0x10/0x10 [ 49.245136][ T3709] __sys_setsockopt+0x184/0x200 [ 49.245195][ T3709] ? fpregs_restore_userregs+0xbb/0x190 [ 49.245237][ T3709] __x64_sys_setsockopt+0x64/0x80 [ 49.245265][ T3709] x64_sys_call+0x2bd5/0x2fb0 [ 49.245296][ T3709] do_syscall_64+0xd0/0x1a0 [ 49.245364][ T3709] ? clear_bhb_loop+0x40/0x90 [ 49.245445][ T3709] ? clear_bhb_loop+0x40/0x90 [ 49.245479][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.245511][ T3709] RIP: 0033:0x7fb9312ae969 [ 49.245547][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.245645][ T3709] RSP: 002b:00007fb92f917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.245673][ T3709] RAX: ffffffffffffffda RBX: 00007fb9314d5fa0 RCX: 00007fb9312ae969 [ 49.245689][ T3709] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 49.245705][ T3709] RBP: 00007fb931330ab1 R08: 0000000000000004 R09: 0000000000000000 [ 49.245718][ T3709] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 49.245772][ T3709] R13: 0000000000000000 R14: 00007fb9314d5fa0 R15: 00007ffcfc9202c8 [ 49.245835][ T3709] [ 49.245958][ T3709] Mem-Info: [ 49.255189][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.265902][ T3709] active_anon:6501 inactive_anon:0 isolated_anon:0 [ 49.265902][ T3709] active_file:5790 inactive_file:2178 isolated_file:0 [ 49.265902][ T3709] unevictable:0 dirty:1430 writeback:0 [ 49.265902][ T3709] slab_reclaimable:2895 slab_unreclaimable:26941 [ 49.265902][ T3709] mapped:29114 shmem:178 pagetables:855 [ 49.265902][ T3709] sec_pagetables:0 bounce:0 [ 49.265902][ T3709] kernel_misc_reclaimable:0 [ 49.265902][ T3709] free:1891863 free_pcp:6658 free_cma:0 [ 49.621621][ T3709] Node 0 active_anon:26004kB inactive_anon:0kB active_file:23160kB inactive_file:8712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116456kB dirty:5720kB writeback:0kB shmem:712kB writeback_tmp:0kB kernel_stack:2800kB pagetables:3420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 49.660649][ T3709] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 49.698046][ T3709] lowmem_reserve[]: 0 2884 7863 7863 [ 49.704564][ T3709] Node 0 DMA32 free:2950032kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 49.738027][ T3709] lowmem_reserve[]: 0 0 4978 4978 [ 49.746522][ T3709] Node 0 Normal free:4602060kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:26004kB inactive_anon:0kB active_file:23160kB inactive_file:8712kB unevictable:0kB writepending:5720kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:22912kB local_pcp:1072kB free_cma:0kB [ 49.781219][ T3709] lowmem_reserve[]: 0 0 0 0 [ 49.786317][ T3709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 49.801264][ T3709] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950032kB [ 49.819018][ T3709] Node 0 Normal: 283*4kB (UME) 206*8kB (UME) 207*16kB (UME) 132*32kB (UME) 98*64kB (UME) 84*128kB (UME) 58*256kB (UM) 52*512kB (UME) 31*1024kB (UME) 22*2048kB (UE) 1088*4096kB (UM) = 4602060kB [ 49.840078][ T3709] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 49.852009][ T3709] 8142 total pagecache pages [ 49.858105][ T3709] 0 pages in swap cache [ 49.863266][ T3709] Free swap = 124996kB [ 49.868095][ T3709] Total swap = 124996kB [ 49.873073][ T3709] 2097051 pages RAM [ 49.878247][ T3709] 0 pages HighMem/MovableOnly [ 49.883787][ T3709] 80259 pages reserved [ 49.912574][ T3706] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.923768][ T3706] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.935108][ T3706] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.946448][ T3706] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.963729][ T3706] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.975866][ T3706] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.986793][ T3706] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.997228][ T3706] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.018295][ T3706] syz.4.89 (3706) used greatest stack depth: 10680 bytes left