last executing test programs: 3.47851263s ago: executing program 1 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_secret(0x0) fcntl$setlease(r4, 0x400, 0x0) close(r4) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x7fff, 0x4800, 0x2, r8, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x2, @void, @value, @void, @value}, 0x50) r9 = signalfd(r2, &(0x7f0000000100)={[0x5]}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c144d95, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff0000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x0, 0x3, 0xa, 0x8, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xe6, &(0x7f00000005c0)=""/230, 0x1f00, 0x6, '\x00', r7, @fallback=0x23, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x9, &(0x7f0000000240)=[r8, r4, r9, r4, r10, r4], &(0x7f00000006c0)=[{0x5, 0x5, 0x0, 0x5}, {0x5, 0x1, 0x4, 0x3}, {0x1, 0x3, 0xa, 0x5}, {0x4, 0x1, 0x10, 0x2}, {0x1, 0x2, 0xa, 0x6}, {0x4, 0x4, 0xd, 0x3}, {0x3, 0x2, 0x6, 0x5}, {0x3, 0x2, 0xe}, {0x2, 0x3, 0x8, 0x5}], 0x10, 0xe61, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 3.271035772s ago: executing program 1 (id=155): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000001c80)=ANY=[@ANYBLOB="0f0000000000000068b0fe2e0ac600007b8af8ffbfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000e15e483284354d92c97e550934c5655b2922407facc5800155ed55626219c9c7cb7c35d6610dd42319072a5d0400e67c8b05a0f014e1eb7e4ba2cce0f1437a506f194f3f4ba07e174d2859795c38df435c530f493f9a6191acc187ec75e6c14bd4354eed88b27c0739e261f67305d1c272205168067ede603896392b7629ecc8d70cd4141cf94acc3048ea1d1b7de469807dc6e85ec641ccad49d245b0d70de70db28beea6b41824edc7b24fbcdb4b90b7ec8aad9098b3145e0a9b5cee4ebae6f65b8627c24d129211ea00a46a7c804691d28b586f0e2771948a876b6e1accb3c42b2235ea248f2fc1e2fabe4c4e54c044793a634df84f3878306f44fc8cac3d6253c3fb8a29cc80b0fb3d0f7aa943d9f1d5d5", @ANYRESOCT=r0, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYRES64], 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 1.769427554s ago: executing program 0 (id=185): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 1.603165627s ago: executing program 4 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_secret(0x0) fcntl$setlease(r4, 0x400, 0x0) close(r4) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x7fff, 0x4800, 0x2, r8, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x2, @void, @value, @void, @value}, 0x50) r9 = signalfd(r2, &(0x7f0000000100)={[0x5]}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c144d95, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff0000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x0, 0x3, 0xa, 0x8, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xe6, &(0x7f00000005c0)=""/230, 0x1f00, 0x6, '\x00', r7, @fallback=0x23, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x9, &(0x7f0000000240)=[r8, r4, r9, r4, r10, r4], &(0x7f00000006c0)=[{0x5, 0x5, 0x0, 0x5}, {0x5, 0x1, 0x4, 0x3}, {0x1, 0x3, 0xa, 0x5}, {0x4, 0x1, 0x10, 0x2}, {0x1, 0x2, 0xa, 0x6}, {0x4, 0x4, 0xd, 0x3}, {0x3, 0x2, 0x6, 0x5}, {0x3, 0x2, 0xe}, {0x2, 0x3, 0x8, 0x5}], 0x10, 0xe61, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.559245727s ago: executing program 4 (id=191): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 1.470070319s ago: executing program 3 (id=194): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x6a040000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x53d, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c00"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x9, &(0x7f0000000300)=[{0xa, 0x4a, 0xb, 0x5000}, {0x28, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x4, 0xf}, {0x9, 0xe, 0x3f, 0x7}, {0x8745, 0x9, 0x1, 0xfffffff9}, {0x4, 0x8, 0x2, 0x4}, {0x8, 0xa, 0xa8, 0x6e}, {0x2, 0xff, 0x0, 0x6}, {0x2, 0x4, 0xce, 0x1ff}]}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRES32=r4], 0x5b0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000005d00)=ANY=[]) 1.257372332s ago: executing program 3 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x490c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(0x0, 0x64842, 0x0) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000280)=""/219, 0xdb}], 0x2, &(0x7f00000004c0)=""/215, 0xd7}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0xc00) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 908.917137ms ago: executing program 0 (id=196): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 889.785497ms ago: executing program 0 (id=197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 869.350097ms ago: executing program 0 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x140) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 850.163248ms ago: executing program 0 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 828.118068ms ago: executing program 0 (id=201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500), &(0x7f0000000600)) io_uring_enter(r2, 0x140d, 0x10a5, 0x3, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x4962, &(0x7f0000000380)={0x0, 0x62f3, 0x800, 0x0, 0x13d, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r5, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xb, 0xf, 0x101, 0x3}, {0x4, 0x2, 0x0, 0x4, 0x1, 0x1ff}, 0x4, 0x8, 0x41}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e20, @local}}}, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x10003, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) 707.64055ms ago: executing program 4 (id=202): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 624.788851ms ago: executing program 4 (id=203): syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 504.234122ms ago: executing program 4 (id=205): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 503.844422ms ago: executing program 4 (id=206): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 476.957193ms ago: executing program 2 (id=207): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 454.735203ms ago: executing program 2 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 409.860744ms ago: executing program 2 (id=209): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 366.657574ms ago: executing program 2 (id=210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x140) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 366.140344ms ago: executing program 2 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 339.187245ms ago: executing program 2 (id=212): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 242.847676ms ago: executing program 3 (id=213): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 230.878456ms ago: executing program 1 (id=214): mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=rdma']) 207.583037ms ago: executing program 1 (id=215): syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 154.908277ms ago: executing program 1 (id=216): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102387, 0x18ff3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ea66156c96f6a30d9310dc66a0d84797b12f60df88cfc6f5fcd683fc029b0edca0e51f692bb4c16d3e0036dd37af8258efd9fba98c1b7f8804da515ca6711eccdf0ab607166cadafd409c34b5861caf23c6c8090fd2e162d415818d8d261105b7499f341d37f0ea112796beb513e43f755cd2f58544a32bdbe0b7662532538d4b653"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], &(0x7f0000000100)=""/33, 0x46, 0x21, 0x1, 0x736d3cd6, 0x0, @void, @value}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=rdma']) 154.214107ms ago: executing program 3 (id=217): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2f5, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000110", 0x2bf, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x13, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ec"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000300)) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 35.818739ms ago: executing program 3 (id=218): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 21.323599ms ago: executing program 1 (id=219): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 0s ago: executing program 3 (id=220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.39' (ED25519) to the list of known hosts. [ 32.894462][ T29] audit: type=1400 audit(1749277928.284:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.895583][ T3298] cgroup: Unknown subsys name 'net' [ 32.917560][ T29] audit: type=1400 audit(1749277928.284:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.946008][ T29] audit: type=1400 audit(1749277928.304:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.094898][ T3298] cgroup: Unknown subsys name 'cpuset' [ 33.101271][ T3298] cgroup: Unknown subsys name 'rlimit' [ 33.293813][ T29] audit: type=1400 audit(1749277928.674:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.317156][ T29] audit: type=1400 audit(1749277928.684:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.337678][ T29] audit: type=1400 audit(1749277928.684:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.358196][ T29] audit: type=1400 audit(1749277928.684:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.367165][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.378567][ T29] audit: type=1400 audit(1749277928.694:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.411984][ T29] audit: type=1400 audit(1749277928.694:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.435319][ T29] audit: type=1400 audit(1749277928.774:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.484345][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.581466][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.686301][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.704441][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.711562][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.718858][ T3308] bridge_slave_0: entered allmulticast mode [ 34.725415][ T3308] bridge_slave_0: entered promiscuous mode [ 34.734615][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 34.755764][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.762933][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.770095][ T3308] bridge_slave_1: entered allmulticast mode [ 34.776535][ T3308] bridge_slave_1: entered promiscuous mode [ 34.810471][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 34.819406][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.826537][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.833715][ T3317] bridge_slave_0: entered allmulticast mode [ 34.840137][ T3317] bridge_slave_0: entered promiscuous mode [ 34.847389][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.854546][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.861719][ T3317] bridge_slave_1: entered allmulticast mode [ 34.868176][ T3317] bridge_slave_1: entered promiscuous mode [ 34.893843][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.919986][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.933019][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.960485][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.984171][ T3308] team0: Port device team_slave_0 added [ 34.990828][ T3308] team0: Port device team_slave_1 added [ 35.010395][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.017488][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.024756][ T3309] bridge_slave_0: entered allmulticast mode [ 35.031159][ T3309] bridge_slave_0: entered promiscuous mode [ 35.037836][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.044910][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.052097][ T3309] bridge_slave_1: entered allmulticast mode [ 35.058544][ T3309] bridge_slave_1: entered promiscuous mode [ 35.084504][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.091583][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.099183][ T3311] bridge_slave_0: entered allmulticast mode [ 35.105815][ T3311] bridge_slave_0: entered promiscuous mode [ 35.113158][ T3317] team0: Port device team_slave_0 added [ 35.126935][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.141552][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.148628][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.174719][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.185590][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.192644][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.200015][ T3311] bridge_slave_1: entered allmulticast mode [ 35.206543][ T3311] bridge_slave_1: entered promiscuous mode [ 35.213220][ T3317] team0: Port device team_slave_1 added [ 35.223972][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.233611][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.242951][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.249942][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.275875][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.299463][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.306468][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.332462][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.364060][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.373803][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.380794][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.406736][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.427166][ T3309] team0: Port device team_slave_0 added [ 35.438841][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.459441][ T3309] team0: Port device team_slave_1 added [ 35.479516][ T3308] hsr_slave_0: entered promiscuous mode [ 35.485574][ T3308] hsr_slave_1: entered promiscuous mode [ 35.504668][ T3311] team0: Port device team_slave_0 added [ 35.511348][ T3311] team0: Port device team_slave_1 added [ 35.517440][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.524439][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.550450][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.600384][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.607453][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.633465][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.649641][ T3317] hsr_slave_0: entered promiscuous mode [ 35.655746][ T3317] hsr_slave_1: entered promiscuous mode [ 35.661520][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.669108][ T3317] Cannot create hsr debugfs directory [ 35.679674][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.686669][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.712681][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.723501][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.730638][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.737875][ T3316] bridge_slave_0: entered allmulticast mode [ 35.744455][ T3316] bridge_slave_0: entered promiscuous mode [ 35.751546][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.758692][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.765859][ T3316] bridge_slave_1: entered allmulticast mode [ 35.772248][ T3316] bridge_slave_1: entered promiscuous mode [ 35.786916][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.793878][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.819844][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.875151][ T3309] hsr_slave_0: entered promiscuous mode [ 35.881144][ T3309] hsr_slave_1: entered promiscuous mode [ 35.887031][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.894719][ T3309] Cannot create hsr debugfs directory [ 35.901492][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.928579][ T3311] hsr_slave_0: entered promiscuous mode [ 35.934536][ T3311] hsr_slave_1: entered promiscuous mode [ 35.940295][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.947966][ T3311] Cannot create hsr debugfs directory [ 35.954382][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.006041][ T3316] team0: Port device team_slave_0 added [ 36.019657][ T3316] team0: Port device team_slave_1 added [ 36.056233][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.063213][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.089537][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.117744][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.124737][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.150746][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.215866][ T3316] hsr_slave_0: entered promiscuous mode [ 36.221852][ T3316] hsr_slave_1: entered promiscuous mode [ 36.227825][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.235430][ T3316] Cannot create hsr debugfs directory [ 36.251063][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.274433][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.283519][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.301988][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.327370][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.338535][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.348423][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.357414][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.398699][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.416132][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.426468][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.435430][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.467966][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.487827][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.497046][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.508421][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.519640][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.548618][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.558310][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.569083][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.580072][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.587377][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.600003][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.614664][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.625830][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.633059][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.645340][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.665079][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.710083][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.720571][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.732820][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.739900][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.748843][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.755945][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.808229][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.828151][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.842087][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.855413][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.874473][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.885091][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.892226][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.901171][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.908274][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.917874][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.924959][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.939428][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.958625][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.967101][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.974193][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.988293][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.020101][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.027251][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.047268][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.054362][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.083441][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.093873][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.159694][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.192658][ T3317] veth0_vlan: entered promiscuous mode [ 37.231071][ T3317] veth1_vlan: entered promiscuous mode [ 37.247761][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.281965][ T3317] veth0_macvtap: entered promiscuous mode [ 37.297384][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.306715][ T3317] veth1_macvtap: entered promiscuous mode [ 37.347967][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.356377][ T3308] veth0_vlan: entered promiscuous mode [ 37.366139][ T3316] veth0_vlan: entered promiscuous mode [ 37.374120][ T3316] veth1_vlan: entered promiscuous mode [ 37.387040][ T3308] veth1_vlan: entered promiscuous mode [ 37.397633][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.412397][ T3311] veth0_vlan: entered promiscuous mode [ 37.419742][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.428643][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.437419][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.446678][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.463802][ T3311] veth1_vlan: entered promiscuous mode [ 37.481506][ T3308] veth0_macvtap: entered promiscuous mode [ 37.493598][ T3316] veth0_macvtap: entered promiscuous mode [ 37.513773][ T3311] veth0_macvtap: entered promiscuous mode [ 37.522092][ T3308] veth1_macvtap: entered promiscuous mode [ 37.531291][ T3316] veth1_macvtap: entered promiscuous mode [ 37.549213][ T3311] veth1_macvtap: entered promiscuous mode [ 37.562548][ T3309] veth0_vlan: entered promiscuous mode [ 37.573480][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.586468][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.596073][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.608420][ T3309] veth1_vlan: entered promiscuous mode [ 37.616057][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.620549][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.640695][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.650470][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.659429][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.668198][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.677101][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.685975][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.702172][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.710981][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.719766][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.728568][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.740970][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.749817][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.758656][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.767474][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.780309][ T3480] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 37.788324][ T3480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.826051][ T3309] veth0_macvtap: entered promiscuous mode [ 37.833377][ T3309] veth1_macvtap: entered promiscuous mode [ 37.874043][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.920392][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.941806][ C1] hrtimer: interrupt took 47611 ns [ 37.942082][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 37.942098][ T29] audit: type=1400 audit(1749277933.324:102): avc: denied { create } for pid=3484 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.948611][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.964788][ T29] audit: type=1400 audit(1749277933.344:103): avc: denied { write } for pid=3484 comm="syz.0.6" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.972496][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009957][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.017625][ T29] audit: type=1400 audit(1749277933.404:104): avc: denied { create } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.018753][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.054942][ T3493] IPv6: Can't replace route, no match found [ 38.061768][ T3494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.062757][ T29] audit: type=1400 audit(1749277933.444:105): avc: denied { setopt } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.089818][ T29] audit: type=1400 audit(1749277933.444:106): avc: denied { bind } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.108849][ T29] audit: type=1400 audit(1749277933.444:107): avc: denied { name_bind } for pid=3492 comm="syz.4.5" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 38.129947][ T29] audit: type=1400 audit(1749277933.444:108): avc: denied { node_bind } for pid=3492 comm="syz.4.5" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 38.151890][ T29] audit: type=1400 audit(1749277933.494:109): avc: denied { write } for pid=3492 comm="syz.4.5" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.171798][ T29] audit: type=1400 audit(1749277933.494:110): avc: denied { connect } for pid=3492 comm="syz.4.5" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.191845][ T29] audit: type=1400 audit(1749277933.494:111): avc: denied { name_connect } for pid=3492 comm="syz.4.5" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 38.216539][ T3491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.226315][ T3495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.431097][ T3510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.543059][ T3518] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 38.600145][ T3504] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 38.657688][ T3517] syzkaller0: entered promiscuous mode [ 38.663445][ T3517] syzkaller0: entered allmulticast mode [ 38.681037][ T3518] team0: Port device netdevsim1 added [ 38.726325][ T3504] team0: Port device netdevsim1 removed [ 38.742887][ T3504] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 38.775925][ T3518] syz.1.2 (3518) used greatest stack depth: 10952 bytes left [ 38.793239][ T3504] syz.1.2 (3504) used greatest stack depth: 10696 bytes left [ 39.742393][ T3581] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 39.800736][ T3581] bridge_slave_0: left allmulticast mode [ 39.806507][ T3581] bridge_slave_0: left promiscuous mode [ 39.812240][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.828579][ T3581] bridge_slave_1: left allmulticast mode [ 39.834467][ T3581] bridge_slave_1: left promiscuous mode [ 39.840280][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.850622][ T3581] bond0: (slave bond_slave_0): Releasing backup interface [ 39.862379][ T3581] bond0: (slave bond_slave_1): Releasing backup interface [ 39.878299][ T3581] team0: Port device team_slave_0 removed [ 39.889182][ T3581] team0: Port device team_slave_1 removed [ 39.896635][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.904211][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.922223][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.929933][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.002798][ T3585] SELinux: syz.4.39 (3585) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.060209][ T3591] 9pnet_fd: Insufficient options for proto=fd [ 40.098980][ T3593] loop0: detected capacity change from 0 to 2048 [ 40.112592][ T3593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 40.177981][ T3597] SELinux: syz.3.44 (3597) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.217098][ T3598] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 40.225374][ T3598] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 40.513038][ T3603] SELinux: syz.1.46 (3603) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.941442][ T3615] 9pnet_fd: Insufficient options for proto=fd [ 40.947444][ T3616] SELinux: syz.4.49 (3616) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.021222][ T3620] bridge_slave_0: left allmulticast mode [ 41.025479][ T3624] 9pnet_fd: Insufficient options for proto=fd [ 41.026980][ T3620] bridge_slave_0: left promiscuous mode [ 41.038837][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.050700][ T3620] bridge_slave_1: left allmulticast mode [ 41.056486][ T3620] bridge_slave_1: left promiscuous mode [ 41.062154][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.073486][ T3620] bond0: (slave bond_slave_0): Releasing backup interface [ 41.086350][ T3620] bond0: (slave bond_slave_1): Releasing backup interface [ 41.101883][ T3620] team0: Port device team_slave_0 removed [ 41.113283][ T3620] team0: Port device team_slave_1 removed [ 41.120360][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.127854][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.140739][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.148340][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.190035][ T3632] SELinux: syz.0.57 (3632) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.334936][ T3642] loop1: detected capacity change from 0 to 2048 [ 41.348407][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 41.445005][ T3648] SELinux: syz.3.62 (3648) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.455513][ T3642] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 41.466637][ T3642] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 41.778984][ T3655] 9pnet_fd: Insufficient options for proto=fd [ 41.812399][ T3657] netlink: 'syz.4.66': attribute type 15 has an invalid length. [ 41.823869][ T3657] netlink: 'syz.4.66': attribute type 13 has an invalid length. [ 41.868068][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.875314][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.916244][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.926428][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.961255][ T3657] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.970529][ T3657] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.979691][ T3657] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.988689][ T3657] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.208883][ T3674] SELinux: syz.0.71 (3674) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.311617][ T3685] SELinux: syz.2.74 (3685) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.386216][ T3690] SELinux: syz.3.77 (3690) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.432972][ T3694] loop1: detected capacity change from 0 to 512 [ 42.443579][ T3694] ======================================================= [ 42.443579][ T3694] WARNING: The mand mount option has been deprecated and [ 42.443579][ T3694] and is ignored by this kernel. Remove the mand [ 42.443579][ T3694] option from the mount to silence this warning. [ 42.443579][ T3694] ======================================================= [ 42.483489][ T3694] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.81: invalid block [ 42.495837][ T3694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.81: invalid indirect mapped block 4294967295 (level 1) [ 42.512035][ T3694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.81: invalid indirect mapped block 4294967295 (level 1) [ 42.532664][ T3694] EXT4-fs (loop1): 2 truncates cleaned up [ 42.539518][ T3700] bridge_slave_0: left allmulticast mode [ 42.540502][ T3694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.545438][ T3700] bridge_slave_0: left promiscuous mode [ 42.563580][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.571508][ T3700] bridge_slave_1: left allmulticast mode [ 42.577240][ T3700] bridge_slave_1: left promiscuous mode [ 42.582936][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.592753][ T3700] bond0: (slave bond_slave_0): Releasing backup interface [ 42.602106][ T3700] bond0: (slave bond_slave_1): Releasing backup interface [ 42.612691][ T3700] team0: Port device team_slave_0 removed [ 42.613289][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.627941][ T3700] team0: Port device team_slave_1 removed [ 42.634309][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.648616][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.727598][ T3706] loop4: detected capacity change from 0 to 2048 [ 42.740488][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 42.843866][ T3708] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 42.852445][ T3708] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 43.041921][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 43.041939][ T29] audit: type=1326 audit(1749277938.424:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.0.88" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f812a5be929 code=0x0 [ 43.092897][ T3716] SELinux: syz.0.88 (3716) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 43.221948][ T29] audit: type=1400 audit(1749277938.604:171): avc: denied { mount } for pid=3727 comm="syz.2.94" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.246368][ T29] audit: type=1400 audit(1749277938.604:172): avc: denied { write } for pid=3727 comm="syz.2.94" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.266987][ T29] audit: type=1400 audit(1749277938.604:173): avc: denied { open } for pid=3727 comm="syz.2.94" path="/12/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.288969][ T29] audit: type=1400 audit(1749277938.654:174): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.309854][ T29] audit: type=1326 audit(1749277938.674:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.3.96" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa07de7e929 code=0x0 [ 43.412567][ T3733] bridge_slave_0: left allmulticast mode [ 43.418354][ T3733] bridge_slave_0: left promiscuous mode [ 43.424108][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.432841][ T3733] bridge_slave_1: left allmulticast mode [ 43.438559][ T3733] bridge_slave_1: left promiscuous mode [ 43.444393][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.455889][ T3733] bond0: (slave bond_slave_0): Releasing backup interface [ 43.466125][ T3733] bond0: (slave bond_slave_1): Releasing backup interface [ 43.477761][ T3733] team0: Port device team_slave_0 removed [ 43.488090][ T3733] team0: Port device team_slave_1 removed [ 43.495300][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.502726][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.511290][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.518794][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.646992][ T3740] netlink: 'syz.2.99': attribute type 15 has an invalid length. [ 43.657692][ T3740] netlink: 'syz.2.99': attribute type 13 has an invalid length. [ 43.761143][ T3740] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.770380][ T3740] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.780022][ T3740] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.789062][ T3740] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.863140][ T29] audit: type=1326 audit(1749277939.244:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.2.101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a7e3e929 code=0x0 [ 43.920422][ T3749] 9pnet_fd: Insufficient options for proto=fd [ 44.020721][ T3754] bond1: entered promiscuous mode [ 44.025956][ T3754] bond1: entered allmulticast mode [ 44.031311][ T3754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.041303][ T3754] bond1 (unregistering): Released all slaves [ 44.072441][ T3756] loop0: detected capacity change from 0 to 512 [ 44.079350][ T3756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.096105][ T3756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.108907][ T3756] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.135106][ T29] audit: type=1400 audit(1749277939.524:177): avc: denied { read write } for pid=3753 comm="syz.0.105" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.157697][ T29] audit: type=1400 audit(1749277939.524:178): avc: denied { open } for pid=3753 comm="syz.0.105" path="/26/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.232324][ T29] audit: type=1400 audit(1749277939.614:179): avc: denied { ioctl } for pid=3753 comm="syz.0.105" path="/26/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.294875][ T3754] syz.0.105 (3754) used greatest stack depth: 10416 bytes left [ 44.314547][ T3768] 9pnet_fd: Insufficient options for proto=fd [ 44.327276][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.362638][ T3771] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 44.370974][ T3771] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 44.426619][ T3781] 9pnet_fd: Insufficient options for proto=fd [ 44.570667][ T3794] loop3: detected capacity change from 0 to 2048 [ 44.581600][ T3794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 44.686330][ T3794] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 44.694601][ T3794] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 44.719262][ T3797] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 44.727560][ T3797] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 44.753209][ T3799] 9pnet_fd: Insufficient options for proto=fd [ 44.799883][ T3803] bond1: entered promiscuous mode [ 44.805018][ T3803] bond1: entered allmulticast mode [ 44.810424][ T3803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.819550][ T3803] bond1 (unregistering): Released all slaves [ 44.849579][ T3805] loop2: detected capacity change from 0 to 512 [ 44.857459][ T3805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.876199][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.888770][ T3805] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.992092][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.271024][ T3826] 9pnet_fd: Insufficient options for proto=fd [ 45.295317][ T3828] 9pnet_fd: Insufficient options for proto=fd [ 45.305098][ T3829] sel_write_user: 4 callbacks suppressed [ 45.305117][ T3829] SELinux: syz.4.130 (3829) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.600820][ T3851] SELinux: syz.3.140 (3851) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.673903][ T3856] SELinux: syz.0.143 (3856) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.760624][ T3864] loop2: detected capacity change from 0 to 2048 [ 45.782320][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 45.829988][ T3870] bridge_slave_0: left allmulticast mode [ 45.835787][ T3870] bridge_slave_0: left promiscuous mode [ 45.841455][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.851010][ T3870] bridge_slave_1: left allmulticast mode [ 45.856753][ T3870] bridge_slave_1: left promiscuous mode [ 45.862409][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.872187][ T3870] bond0: (slave bond_slave_0): Releasing backup interface [ 45.882183][ T3870] bond0: (slave bond_slave_1): Releasing backup interface [ 45.893486][ T3870] team0: Port device team_slave_0 removed [ 45.902488][ T3870] team0: Port device team_slave_1 removed [ 45.909525][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.917016][ T3870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.925587][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.932987][ T3870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.948003][ T3870] bond0: (slave netdevsim1): Releasing backup interface [ 45.962752][ T3864] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 45.971055][ T3864] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 46.033249][ T3874] netlink: 'syz.1.151': attribute type 15 has an invalid length. [ 46.045214][ T3874] netlink: 'syz.1.151': attribute type 13 has an invalid length. [ 46.147233][ T3874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.156353][ T3874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.165533][ T3874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.174612][ T3874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.601204][ T3905] SELinux: syz.0.163 (3905) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.710225][ T3912] SELinux: syz.3.166 (3912) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.810149][ T3922] SELinux: syz.4.169 (3922) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.869761][ T3928] loop2: detected capacity change from 0 to 2048 [ 46.899914][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 46.960918][ T3931] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 46.969153][ T3931] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 47.813924][ T3962] SELinux: syz.0.185 (3962) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.849065][ T3965] SELinux: syz.2.187 (3965) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.911187][ T3969] netlink: 'syz.4.190': attribute type 15 has an invalid length. [ 47.923200][ T3969] netlink: 'syz.4.190': attribute type 13 has an invalid length. [ 47.998904][ T3974] SELinux: syz.4.191 (3974) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.074093][ T3978] loop3: detected capacity change from 0 to 512 [ 48.082726][ T3978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.106717][ T3978] EXT4-fs (loop3): 1 orphan inode deleted [ 48.112884][ T3978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.125545][ T139] __quota_error: 22 callbacks suppressed [ 48.125558][ T139] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.126173][ T3978] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.131222][ T139] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 48.150017][ T29] audit: type=1326 audit(1749277943.534:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.187827][ T29] audit: type=1326 audit(1749277943.534:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.211214][ T29] audit: type=1326 audit(1749277943.534:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.234490][ T29] audit: type=1326 audit(1749277943.534:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.258055][ T29] audit: type=1326 audit(1749277943.534:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.281343][ T29] audit: type=1326 audit(1749277943.534:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.304685][ T29] audit: type=1326 audit(1749277943.534:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.327967][ T29] audit: type=1326 audit(1749277943.534:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.351211][ T29] audit: type=1326 audit(1749277943.534:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07de7e929 code=0x7ffc0000 [ 48.376385][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.413567][ T3983] loop3: detected capacity change from 0 to 2048 [ 48.447532][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 48.507936][ T3986] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 48.516222][ T3986] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 49.062202][ T4019] SELinux: syz.4.206 (4019) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.513709][ T3553] ================================================================== [ 49.521846][ T3553] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 49.528547][ T3553] [ 49.530881][ T3553] write to 0xffff888106b389d0 of 8 bytes by task 2997 on cpu 1: [ 49.538528][ T3553] __dentry_kill+0x142/0x4b0 [ 49.543156][ T3553] dput+0x5e/0xd0 [ 49.546910][ T3553] step_into+0x5b2/0x820 [ 49.551171][ T3553] walk_component+0x162/0x220 [ 49.555870][ T3553] path_lookupat+0xfe/0x2a0 [ 49.560402][ T3553] filename_lookup+0x2d7/0x340 [ 49.565202][ T3553] do_readlinkat+0x7d/0x320 [ 49.569724][ T3553] __x64_sys_readlink+0x47/0x60 [ 49.574591][ T3553] x64_sys_call+0x2cf3/0x2fb0 [ 49.579279][ T3553] do_syscall_64+0xd2/0x200 [ 49.583794][ T3553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.589698][ T3553] [ 49.592039][ T3553] read to 0xffff888106b389d0 of 8 bytes by task 3553 on cpu 0: [ 49.599595][ T3553] fast_dput+0x5f/0x2c0 [ 49.603761][ T3553] dput+0x24/0xd0 [ 49.607403][ T3553] do_unlinkat+0x299/0x4c0 [ 49.611826][ T3553] __x64_sys_unlink+0x2e/0x40 [ 49.616518][ T3553] x64_sys_call+0x22a6/0x2fb0 [ 49.621205][ T3553] do_syscall_64+0xd2/0x200 [ 49.625729][ T3553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.631627][ T3553] [ 49.633968][ T3553] value changed: 0xffff8882376d48c0 -> 0x0000000000000000 [ 49.641071][ T3553] [ 49.643409][ T3553] Reported by Kernel Concurrency Sanitizer on: [ 49.649664][ T3553] CPU: 0 UID: 0 PID: 3553 Comm: udevd Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 49.661300][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.671375][ T3553] ==================================================================