last executing test programs: 15.584632644s ago: executing program 2 (id=124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fstatfs(r0, &(0x7f0000000200)=""/217) 15.420458887s ago: executing program 2 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) 15.391509177s ago: executing program 2 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 15.265371889s ago: executing program 2 (id=134): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1c1091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15.241506379s ago: executing program 2 (id=137): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 15.028683543s ago: executing program 2 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 15.028507313s ago: executing program 32 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 1.127091942s ago: executing program 1 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.064660393s ago: executing program 1 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x2a, 0x2101, 0x0, 0x0) 1.014333214s ago: executing program 1 (id=572): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb6, &(0x7f0000000000), &(0x7f0000000240)=0x4) 924.791015ms ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x100000004}, 0x16) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x505, 0x0, 0x25dfdbfd}, 0x14}}, 0x10) 869.301606ms ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 753.195018ms ago: executing program 3 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 624.28379ms ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010000c47a1a86c0d95000000000", @ANYRES32=r3, @ANYBLOB="0006000000000000140012800b00010067656e6576650000040002"], 0x34}, 0x1, 0x2}, 0x0) 570.910531ms ago: executing program 5 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 545.744351ms ago: executing program 4 (id=597): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rename(0x0, 0x0) 515.471742ms ago: executing program 4 (id=598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x22020600) 486.813372ms ago: executing program 5 (id=599): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x1, 0x1088f109, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="cd77f007c1a96b66020675299a85ab7cdad1545ecfbab5ca2d11482e52bef3dd5b9984e88a4be316d647eba321fb3abd6c4a9a51519e81c29f327a04389e3dd687cee38e06f96dc74f0c6e120975f03422e2f6ce11c245abbae218de1ca35df7c8c812367a4672279f4d719509ca2015b7378829b811acd099184409dd0b8a10873435905f12876f3ff9baf43992", @ANYRES16=0x0, @ANYRES64], 0x1, 0x371, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPsmk/C8gZkcvPfVx826Z9atjmQNlYyIyCORsmQlkYlu8pJiT16+9OfD56/fvPV2pVq9sqV6tXLjlU1VXV374ZPPinG3BwXZL39wIMZv+0/vP3vw342PGp42PG21O2rp7favHeu2Y+t2w2uaqtcc2/JsbbQ8243a21F73Wnv7PTUam1fXtlxbc9Tq9XTpt3TTls7bk+tD61GS03T1MsracM9x4wZcmp3t7asyow7vDNjHubtH9/3j2l23Yq1JGIWj7TU7j7RcQEAgIU0Uv9/k9QIZcn2C8pMvBbIh/HwMiCo/5M4rP+DxcJh/X/vhZ86l969vxrX/w/yafX/q79E+UP1f7D3udf/343cP1oRnXm7J+n8WPU/FsPa8Dvy98MVeyyo/4N3Q39F/8X799bDgPofAAAAAAAAAAAAAAAAAAAAAICz4JHvl3zfLyW3yd/hKQTx/eTecSca48wZ9/oX4isK9I8HnEvXb94SIzxxL7cq4nzZrXVr0W3cnnRcl5L8Gx4PseiCE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh/ne7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHX+OJfmfb6i++U51JL8Y9kvz+pN9SQAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo98P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4q2NNOVkwpaDIDdFn6HgYRgsH9dnaWCG0245H/+CxrTDcL2eTD3mJPirIKlPZnIJ16EmI/1ZnTJI5j9FZ+OkL4HrZU8+d9v11oLx6EzTGQiSr43G9ZFrs255XJBcOXdS52e+/vbv2XaRia/aO9j02n1jwkyDg8TNjDyyN+Gg/cP3J45nOf3T4vtZfmQGAAAAwIJIiv6ilzzyxukOCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2iul0kbE5z2HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBF8X8AAAD//0Ze9VM=") r0 = open(&(0x7f0000000400)='./file0\x00', 0x14507e, 0x11) io_setup(0xa915, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 477.111762ms ago: executing program 4 (id=600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) stat(&(0x7f0000000040)='./file0\x00', 0x0) 475.712872ms ago: executing program 0 (id=601): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_to_batadv\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000340)="95fc", 0x2}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}) 440.713913ms ago: executing program 0 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 396.694234ms ago: executing program 3 (id=603): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 396.060914ms ago: executing program 4 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 382.106794ms ago: executing program 0 (id=605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {0xb}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 330.420525ms ago: executing program 4 (id=606): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 329.744195ms ago: executing program 0 (id=607): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 329.565765ms ago: executing program 3 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 328.876544ms ago: executing program 5 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$eJzs28tvVNUfAPDvvX3wgwLtT/EBolaJsfHR0vKQhRuNJC4wmugCl3VaCGGghtZESCPVGNyYGBJdq0sT/wJ3boy6MnGre0NCtBvQVc29cy/MDB3oyLQDzOeTTHvOnDNzznfuPfeee89MAD1rNPuTRGyNiN8iYriWbawwWvt3dXmx8vfyYiWJZOXNP5O83pXlxUpZtXzdUJEZSyPSj5OikUbzZ8+dnK5WZ88U+YmFU+9OzJ899/yJU9PHZ4/Pnp46dGj/vskXDk4d6EicWVxXdn0wt3vnq29ffK1y9OI7P32b9XdrUV4fR6eMZoH/tZJrLnuq04112ba6dNLfxY7Qlr6IyDbXQD7+h6Mvrm+84Tj8UVc7B6yr7Ny0qXXx0gpwD0ui2z0AuqM80V9ZXhzKroGbr4MPr+/0o+suv1S7AMrivlo8aiX9kRZ1BpqubztpNCKOLv3zZfaIdboPAQBQ79PKF0fiudq8o3H+l8aDdfW2F2soIxHx/4i4LyLuj4gdEfFARF73oYh4uM32m5eGbpz/pJf+U2BrlM3/XizWthrnf+XsL0b6ity2PP6B5NiJ6uze4jMZi4FNWX7yJm18/8qvn7Uqq5//ZY+s/XIuWPTjUn/TDbqZ6YXpfFLaAZc/jNjVv1r8ybWVgCQidkbErvbeenuZOPHMN7tbVbp1/DfRgXWmla8jnq5t/6Voir+UtF6fHDg4dWDif1Gd3TtR7hU3+vmXC2+0an+V+CPiq7XF3wHZ9t/SuP83VxlJ6tdr59tv48Lvn7S8piniz/bmtvb/weSt/Hg0WDz3/vTCwpnJiMHkSJ5veH7q+mvLfFk/i39sz6rjf3P5miz+RyIi24kfjYjHIuLxou9PRMSTEbHnJvH/+HLrstva/zsgi3/mxuNfWlelafu3n+g7+cN3rdpf2/Fvf54aK57Jj3+3sNYO3s5nBwAAAHeLNP8OfJKOX0un6fh47Tv8O2JLWp2bX3j22Nx7p2dq35UfiYG0vNM1XHc/dDJZKt6xlp8q7hWX5fuK+8af923O8+OVuepMl2OHXjfUYvxn/ujrdu+AdbfaOtrUYBc6Amy45vGfNmbPv76RnQE2lN9rQ++6xfhPN6ofwMZz/ofetdr4P9+UtxYA9ybnf+hdxj/0LuMfepfxDz3pdn7XL9HLiUjviG7cxYmhO6MbLRLdPjIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xr8BAAD//7Bz6SQ=") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) 184.423327ms ago: executing program 0 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 114.266528ms ago: executing program 1 (id=611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x22020600) 114.007768ms ago: executing program 4 (id=612): r0 = socket$inet(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) 84.619359ms ago: executing program 5 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 57.187189ms ago: executing program 3 (id=614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 53.176929ms ago: executing program 1 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "5b6d6c6071599c27e24bdea6c9370eaa800a2421e38fea043ead82bcfde68113", "cf1f2b8650266b2b3cbe4465282c24670c374eb96d28bd724c34538d970dcdcfc00c6a165fee51ff51bf1cca336c6a7c", "1a854b2d8fddb68252512484bb3942a418e3da814f1fd280762b370a", {"2c3271e5fbb3c43594b8621cbcac50a2", "99c2a4f63d80bbed81f4513aab5933f1"}}}}}}}, 0x0) 20.92439ms ago: executing program 0 (id=616): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 441.45µs ago: executing program 1 (id=617): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd8, 0x10001, 0x5, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@noblock_validity}, {@nodelalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x567, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 5 (id=618): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan1\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 25.238040][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 25.238059][ T29] audit: type=1400 audit(1743089227.809:76): avc: denied { transition } for pid=3284 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.241990][ T29] audit: type=1400 audit(1743089227.809:77): avc: denied { noatsecure } for pid=3284 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.244805][ T29] audit: type=1400 audit(1743089227.809:78): avc: denied { write } for pid=3284 comm="sh" path="pipe:[2317]" dev="pipefs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 25.248000][ T29] audit: type=1400 audit(1743089227.809:79): avc: denied { rlimitinh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.250789][ T29] audit: type=1400 audit(1743089227.809:80): avc: denied { siginh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 33.303686][ T29] audit: type=1400 audit(1743089235.869:81): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.304733][ T3293] cgroup: Unknown subsys name 'net' [ 33.326436][ T29] audit: type=1400 audit(1743089235.869:82): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.353807][ T29] audit: type=1400 audit(1743089235.899:83): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.373679][ T29] audit: type=1400 audit(1743089235.909:84): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.515119][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.521407][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.632299][ T29] audit: type=1400 audit(1743089236.199:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.655571][ T29] audit: type=1400 audit(1743089236.199:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.676170][ T29] audit: type=1400 audit(1743089236.199:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.696560][ T29] audit: type=1400 audit(1743089236.199:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.703954][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.716923][ T29] audit: type=1400 audit(1743089236.209:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.750394][ T29] audit: type=1400 audit(1743089236.209:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.777151][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.663289][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.692386][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.708547][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.755414][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.771789][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.778899][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.786355][ T3310] bridge_slave_0: entered allmulticast mode [ 35.792690][ T3310] bridge_slave_0: entered promiscuous mode [ 35.817014][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.824201][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.831516][ T3310] bridge_slave_1: entered allmulticast mode [ 35.837837][ T3310] bridge_slave_1: entered promiscuous mode [ 35.874328][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.881392][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.888800][ T3303] bridge_slave_0: entered allmulticast mode [ 35.895152][ T3303] bridge_slave_0: entered promiscuous mode [ 35.902915][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.921689][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.929040][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.936243][ T3303] bridge_slave_1: entered allmulticast mode [ 35.942577][ T3303] bridge_slave_1: entered promiscuous mode [ 35.954445][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.963547][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.997395][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.004627][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.011895][ T3304] bridge_slave_0: entered allmulticast mode [ 36.018577][ T3304] bridge_slave_0: entered promiscuous mode [ 36.031064][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.043622][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.053658][ T3310] team0: Port device team_slave_0 added [ 36.060140][ T3310] team0: Port device team_slave_1 added [ 36.066122][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.073277][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.080515][ T3304] bridge_slave_1: entered allmulticast mode [ 36.087005][ T3304] bridge_slave_1: entered promiscuous mode [ 36.098057][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.105136][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.112237][ T3314] bridge_slave_0: entered allmulticast mode [ 36.118847][ T3314] bridge_slave_0: entered promiscuous mode [ 36.153389][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.160594][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.167843][ T3314] bridge_slave_1: entered allmulticast mode [ 36.174147][ T3314] bridge_slave_1: entered promiscuous mode [ 36.194691][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.201655][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.227617][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.239582][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.254228][ T3303] team0: Port device team_slave_0 added [ 36.260951][ T3303] team0: Port device team_slave_1 added [ 36.269378][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.276349][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.302404][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.314345][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.326899][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.360442][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.379484][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.386590][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.393758][ T3311] bridge_slave_0: entered allmulticast mode [ 36.400447][ T3311] bridge_slave_0: entered promiscuous mode [ 36.408372][ T3304] team0: Port device team_slave_0 added [ 36.423718][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.430705][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.456687][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.467517][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.474631][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.482006][ T3311] bridge_slave_1: entered allmulticast mode [ 36.488406][ T3311] bridge_slave_1: entered promiscuous mode [ 36.500274][ T3304] team0: Port device team_slave_1 added [ 36.512064][ T3310] hsr_slave_0: entered promiscuous mode [ 36.518136][ T3310] hsr_slave_1: entered promiscuous mode [ 36.524800][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.531793][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.557781][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.578082][ T3314] team0: Port device team_slave_0 added [ 36.584634][ T3314] team0: Port device team_slave_1 added [ 36.594194][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.623794][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.630804][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.656756][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.668548][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.678016][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.685096][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.711111][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.722132][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.729247][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.755157][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.766472][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.773489][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.799417][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.843176][ T3311] team0: Port device team_slave_0 added [ 36.865606][ T3311] team0: Port device team_slave_1 added [ 36.879257][ T3303] hsr_slave_0: entered promiscuous mode [ 36.885181][ T3303] hsr_slave_1: entered promiscuous mode [ 36.890961][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.898671][ T3303] Cannot create hsr debugfs directory [ 36.925408][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.932465][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.958397][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.972961][ T3304] hsr_slave_0: entered promiscuous mode [ 36.979196][ T3304] hsr_slave_1: entered promiscuous mode [ 36.985114][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.992662][ T3304] Cannot create hsr debugfs directory [ 37.000051][ T3314] hsr_slave_0: entered promiscuous mode [ 37.006298][ T3314] hsr_slave_1: entered promiscuous mode [ 37.012204][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.019789][ T3314] Cannot create hsr debugfs directory [ 37.025844][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.032800][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.058787][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.105753][ T3311] hsr_slave_0: entered promiscuous mode [ 37.111664][ T3311] hsr_slave_1: entered promiscuous mode [ 37.117746][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.125330][ T3311] Cannot create hsr debugfs directory [ 37.232950][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.258642][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.269230][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.290906][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.332896][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.342566][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.351748][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.360874][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.395935][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.405611][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.425998][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.440720][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.469757][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.480616][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.491060][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.500194][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.510686][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.519035][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.528232][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.548762][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.589477][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.601484][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.615661][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.631695][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.651312][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.658393][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.667180][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.674340][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.682786][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.689843][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.707491][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.714565][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.743698][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.765867][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.783197][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.791647][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.801113][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.821494][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.828573][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.851169][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.858336][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.869560][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.876661][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.886227][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.893265][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.917812][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.956142][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.963260][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.971999][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.979082][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.008969][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.020602][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.031757][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.052566][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.093125][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.138123][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.201747][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.215716][ T3303] veth0_vlan: entered promiscuous mode [ 38.238322][ T3303] veth1_vlan: entered promiscuous mode [ 38.253707][ T3310] veth0_vlan: entered promiscuous mode [ 38.272315][ T3310] veth1_vlan: entered promiscuous mode [ 38.288650][ T3304] veth0_vlan: entered promiscuous mode [ 38.298368][ T3303] veth0_macvtap: entered promiscuous mode [ 38.309901][ T3310] veth0_macvtap: entered promiscuous mode [ 38.319506][ T3303] veth1_macvtap: entered promiscuous mode [ 38.327238][ T3310] veth1_macvtap: entered promiscuous mode [ 38.337633][ T3304] veth1_vlan: entered promiscuous mode [ 38.349081][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.367492][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.378101][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.389147][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.408153][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.416692][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.427458][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.438078][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.452912][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.461792][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.470585][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.479424][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490481][ T3304] veth0_macvtap: entered promiscuous mode [ 38.498206][ T3314] veth0_vlan: entered promiscuous mode [ 38.507176][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.516083][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.524868][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.533599][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.544111][ T3311] veth0_vlan: entered promiscuous mode [ 38.550691][ T3304] veth1_macvtap: entered promiscuous mode [ 38.568459][ T3311] veth1_vlan: entered promiscuous mode [ 38.576628][ T3314] veth1_vlan: entered promiscuous mode [ 38.589868][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.600452][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.604470][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 38.604486][ T29] audit: type=1400 audit(1743089241.159:107): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.anRtx0/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.610351][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.616432][ T29] audit: type=1400 audit(1743089241.169:108): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.640750][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.642096][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.651193][ T29] audit: type=1400 audit(1743089241.169:109): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.anRtx0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.675133][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.683013][ T29] audit: type=1400 audit(1743089241.169:110): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.690167][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.690181][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.715482][ T29] audit: type=1400 audit(1743089241.169:111): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.anRtx0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.725824][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.727345][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.747695][ T29] audit: type=1400 audit(1743089241.169:112): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.anRtx0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.759307][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.767947][ T29] audit: type=1400 audit(1743089241.169:113): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.794563][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.847059][ T29] audit: type=1400 audit(1743089241.419:114): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.847809][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.867351][ T29] audit: type=1400 audit(1743089241.419:115): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.932188][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.942930][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.950921][ T3311] veth0_macvtap: entered promiscuous mode [ 38.965755][ T3311] veth1_macvtap: entered promiscuous mode [ 38.988710][ T29] audit: type=1400 audit(1743089241.559:116): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.041673][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.052173][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.056028][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.062036][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.070614][ T3444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.080972][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.081018][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.089604][ T3444] netlink: 'syz.2.3': attribute type 18 has an invalid length. [ 39.099370][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.102926][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.109822][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.147078][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.157581][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.167517][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.178058][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.187929][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.198376][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.204798][ T3445] futex_wake_op: syz.3.4 tries to shift op by -1; fix this program [ 39.211468][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.254240][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.263057][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.271899][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280902][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.318554][ T3314] veth0_macvtap: entered promiscuous mode [ 39.369632][ T3314] veth1_macvtap: entered promiscuous mode [ 39.410763][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.421300][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.431361][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.441870][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.451729][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.462335][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.472213][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.482966][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.498266][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.514038][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.524669][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.534514][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.545143][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.555118][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.565616][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.575715][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.586224][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.597995][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.608097][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616895][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625689][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.634588][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.652091][ T3476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3476 comm=syz.2.16 [ 39.804729][ T3380] IPVS: starting estimator thread 0... [ 39.810375][ T3472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.818910][ T3488] loop1: detected capacity change from 0 to 512 [ 39.849910][ T3493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3493 comm=syz.0.1 [ 39.862252][ T3493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3493 comm=syz.0.1 [ 39.907504][ T3489] IPVS: using max 2304 ests per chain, 115200 per kthread [ 39.928926][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.967482][ T3488] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.968774][ T3497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3497 comm=syz.4.22 [ 40.062322][ T3488] EXT4-fs error (device loop1): ext4_do_update_inode:5158: inode #2: comm syz.1.20: corrupted inode contents [ 40.086851][ T3516] mmap: syz.4.28 (3516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.125086][ T3488] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #2: comm syz.1.20: mark_inode_dirty error [ 40.165214][ T3488] EXT4-fs error (device loop1): ext4_do_update_inode:5158: inode #2: comm syz.1.20: corrupted inode contents [ 40.209577][ T3488] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.20: mark_inode_dirty error [ 40.227017][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 40.249604][ T3528] syz.2.34 (3528) used greatest stack depth: 10112 bytes left [ 40.294101][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.345987][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 40.535273][ T3566] process 'syz.0.50' launched './file1' with NULL argv: empty string added [ 40.658543][ T3581] netlink: 72 bytes leftover after parsing attributes in process `syz.0.59'. [ 40.998232][ T3618] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 40.998730][ T3615] bond1: entered promiscuous mode [ 41.011051][ T3615] bond1: entered allmulticast mode [ 41.016540][ T3615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.036602][ T3615] bond1 (unregistering): Released all slaves [ 41.221545][ T3635] netlink: 140 bytes leftover after parsing attributes in process `syz.2.84'. [ 41.241288][ T3638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 41.250588][ T3638] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 41.394003][ T3651] 9pnet_fd: Insufficient options for proto=fd [ 41.423162][ T3649] loop4: detected capacity change from 0 to 4096 [ 41.479482][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.518324][ T3663] netlink: '+}[@': attribute type 1 has an invalid length. [ 41.525611][ T3663] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 41.623185][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.864565][ T3686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 41.969867][ T3700] vlan2: entered allmulticast mode [ 42.312684][ T3737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.363814][ T3741] SELinux: ebitmap: truncated map [ 42.373495][ T3741] SELinux: failed to load policy [ 42.416760][ T3743] rdma_op ffff888108650d80 conn xmit_rdma 0000000000000000 [ 42.993449][ T3770] chnl_net:caif_netlink_parms(): no params data found [ 43.203063][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.210457][ T3770] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.230503][ T3770] bridge_slave_0: entered allmulticast mode [ 43.244175][ T3770] bridge_slave_0: entered promiscuous mode [ 43.258160][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.265775][ T3770] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.281051][ T3770] bridge_slave_1: entered allmulticast mode [ 43.294346][ T3770] bridge_slave_1: entered promiscuous mode [ 43.312461][ T3770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.323234][ T3770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.370029][ T3770] team0: Port device team_slave_0 added [ 43.400839][ T292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.435168][ T3770] team0: Port device team_slave_1 added [ 43.496091][ T292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.523087][ T3770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.530237][ T3770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.556226][ T3770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.627422][ T292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.665135][ T3770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.672153][ T3770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.698135][ T3770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.747615][ T292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.768277][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 43.768295][ T29] audit: type=1326 audit(1743089246.339:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.770279][ T3852] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 43.774799][ T29] audit: type=1326 audit(1743089246.339:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.828198][ T29] audit: type=1326 audit(1743089246.339:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.851581][ T29] audit: type=1326 audit(1743089246.339:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.884953][ T29] audit: type=1326 audit(1743089246.369:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.908803][ T29] audit: type=1326 audit(1743089246.369:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.933049][ T29] audit: type=1326 audit(1743089246.379:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 43.956412][ T29] audit: type=1326 audit(1743089246.449:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 44.000823][ T29] audit: type=1326 audit(1743089246.529:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 44.024173][ T29] audit: type=1326 audit(1743089246.549:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4558c0d169 code=0x7ffc0000 [ 44.067118][ T3770] hsr_slave_0: entered promiscuous mode [ 44.076530][ T3770] hsr_slave_1: entered promiscuous mode [ 44.082404][ T3770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.092745][ T3770] Cannot create hsr debugfs directory [ 44.194239][ T292] bridge_slave_1: left allmulticast mode [ 44.200098][ T292] bridge_slave_1: left promiscuous mode [ 44.205959][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.228271][ T292] bridge_slave_0: left allmulticast mode [ 44.233982][ T292] bridge_slave_0: left promiscuous mode [ 44.239701][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.357971][ T3881] __nla_validate_parse: 1 callbacks suppressed [ 44.357988][ T3881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 44.428255][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.439436][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.455560][ T292] bond0 (unregistering): Released all slaves [ 44.501881][ T3890] netlink: 'syz.4.194': attribute type 29 has an invalid length. [ 44.590260][ T292] hsr_slave_0: left promiscuous mode [ 44.621266][ T292] hsr_slave_1: left promiscuous mode [ 44.635388][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.642908][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.688978][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.696580][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.755764][ T292] veth1_macvtap: left promiscuous mode [ 44.761319][ T292] veth0_macvtap: left promiscuous mode [ 44.775291][ T3930] netlink: 100 bytes leftover after parsing attributes in process `syz.1.206'. [ 44.790514][ T292] veth1_vlan: left promiscuous mode [ 44.806477][ T292] veth0_vlan: left promiscuous mode [ 44.961244][ T292] team0 (unregistering): Port device team_slave_1 removed [ 44.986036][ T292] team0 (unregistering): Port device team_slave_0 removed [ 45.062452][ T3932] dvmrp5: entered allmulticast mode [ 45.068622][ T3938] dvmrp5: left allmulticast mode [ 45.137298][ T3770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.167402][ T3770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.183757][ T3770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.208851][ T3770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.317944][ T3770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.331840][ T3770] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.340121][ T3989] loop7: detected capacity change from 0 to 16384 [ 45.359028][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.366127][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.415900][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.423011][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.431085][ T3989] I/O error, dev loop7, sector 1664 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 45.440949][ T3989] Buffer I/O error on dev loop7, logical block 208, lost async page write [ 45.449574][ T3989] Buffer I/O error on dev loop7, logical block 209, lost async page write [ 45.458200][ T3989] Buffer I/O error on dev loop7, logical block 210, lost async page write [ 45.466761][ T3989] Buffer I/O error on dev loop7, logical block 211, lost async page write [ 45.475384][ T3989] Buffer I/O error on dev loop7, logical block 212, lost async page write [ 45.483948][ T3989] Buffer I/O error on dev loop7, logical block 213, lost async page write [ 45.492590][ T3989] Buffer I/O error on dev loop7, logical block 214, lost async page write [ 45.501131][ T3989] Buffer I/O error on dev loop7, logical block 215, lost async page write [ 45.509893][ T3989] Buffer I/O error on dev loop7, logical block 216, lost async page write [ 45.518495][ T3989] Buffer I/O error on dev loop7, logical block 217, lost async page write [ 45.572547][ T4000] lo: entered promiscuous mode [ 45.577488][ T4000] lo: entered allmulticast mode [ 45.583709][ T4000] tunl0: entered promiscuous mode [ 45.588847][ T4000] tunl0: entered allmulticast mode [ 45.612307][ T4000] gre0: entered promiscuous mode [ 45.617339][ T4000] gre0: entered allmulticast mode [ 45.625666][ T4000] gretap0: entered promiscuous mode [ 45.630987][ T4000] gretap0: entered allmulticast mode [ 45.654792][ T4009] unsupported nla_type 52263 [ 45.674320][ T4000] erspan0: entered promiscuous mode [ 45.679621][ T4000] erspan0: entered allmulticast mode [ 45.706217][ T4000] ip_vti0: entered promiscuous mode [ 45.711467][ T4000] ip_vti0: entered allmulticast mode [ 45.719994][ T4021] ======================================================= [ 45.719994][ T4021] WARNING: The mand mount option has been deprecated and [ 45.719994][ T4021] and is ignored by this kernel. Remove the mand [ 45.719994][ T4021] option from the mount to silence this warning. [ 45.719994][ T4021] ======================================================= [ 45.765463][ T4000] ip6_vti0: entered promiscuous mode [ 45.770801][ T4000] ip6_vti0: entered allmulticast mode [ 45.785566][ T4000] sit0: entered promiscuous mode [ 45.790746][ T4000] sit0: entered allmulticast mode [ 45.798466][ T4000] ip6tnl0: entered promiscuous mode [ 45.803829][ T4000] ip6tnl0: entered allmulticast mode [ 45.820121][ T4000] ip6gre0: entered promiscuous mode [ 45.826088][ T4000] ip6gre0: entered allmulticast mode [ 45.847793][ T4000] syz_tun: entered promiscuous mode [ 45.853070][ T4000] syz_tun: entered allmulticast mode [ 45.867787][ T4000] ip6gretap0: entered promiscuous mode [ 45.873316][ T4000] ip6gretap0: entered allmulticast mode [ 45.892464][ T4000] bridge0: entered promiscuous mode [ 45.897984][ T4000] bridge0: entered allmulticast mode [ 45.905531][ T4000] vcan0: entered promiscuous mode [ 45.910678][ T4000] vcan0: entered allmulticast mode [ 45.916894][ T4000] bond0: entered promiscuous mode [ 45.922115][ T4000] bond_slave_0: entered promiscuous mode [ 45.927996][ T4000] bond_slave_1: entered promiscuous mode [ 45.933935][ T4000] bond0: entered allmulticast mode [ 45.939136][ T4000] bond_slave_0: entered allmulticast mode [ 45.944991][ T4000] bond_slave_1: entered allmulticast mode [ 45.955207][ T4000] team0: entered promiscuous mode [ 45.960261][ T4000] team_slave_0: entered promiscuous mode [ 45.966374][ T4000] team_slave_1: entered promiscuous mode [ 45.972326][ T4000] team0: entered allmulticast mode [ 45.977515][ T4000] team_slave_0: entered allmulticast mode [ 45.983315][ T4000] team_slave_1: entered allmulticast mode [ 45.993479][ T4000] dummy0: entered promiscuous mode [ 45.998657][ T4000] dummy0: entered allmulticast mode [ 46.005393][ T4000] nlmon0: entered promiscuous mode [ 46.010603][ T4000] nlmon0: entered allmulticast mode [ 46.018074][ T4000] caif0: entered promiscuous mode [ 46.023116][ T4000] caif0: entered allmulticast mode [ 46.028583][ T4000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.046083][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 46.142672][ T4060] lo: entered allmulticast mode [ 46.172589][ T3770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.187394][ T4059] lo: left allmulticast mode [ 46.265783][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.302173][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.413625][ T4101] SELinux: Context is not valid (left unmapped). [ 46.443887][ T3770] veth0_vlan: entered promiscuous mode [ 46.484618][ T4113] bridge0: port 3(vlan2) entered blocking state [ 46.490987][ T4113] bridge0: port 3(vlan2) entered disabled state [ 46.519092][ T4113] vlan2: entered allmulticast mode [ 46.524317][ T4113] bridge0: entered allmulticast mode [ 46.536370][ T4113] vlan2: left allmulticast mode [ 46.541308][ T4113] bridge0: left allmulticast mode [ 46.552660][ T3770] veth1_vlan: entered promiscuous mode [ 46.589471][ T3770] veth0_macvtap: entered promiscuous mode [ 46.601281][ T3770] veth1_macvtap: entered promiscuous mode [ 46.637010][ T4132] loop1: detected capacity change from 0 to 128 [ 46.645208][ T3770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.655751][ T3770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.665631][ T3770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.670197][ T4132] vfat: Unknown parameter '00000000000000000000004ꀰyBC`z 0x0a [ 57.902774][ T3294] [ 57.905095][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 57.911241][ T3294] CPU: 1 UID: 0 PID: 3294 Comm: udevd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 57.922875][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.932944][ T3294] ================================================================== [ 57.967999][ T5066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.046019][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.