last executing test programs: 1.635727797s ago: executing program 1 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0xffffffae, 0x5c8, 0x80000003, 0x6}) 1.497489909s ago: executing program 1 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) 1.156143557s ago: executing program 3 (id=1091): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 1.151077587s ago: executing program 1 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 1.11254027s ago: executing program 4 (id=1094): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.090940492s ago: executing program 3 (id=1096): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000640)=""/200, 0xc8) 1.070872494s ago: executing program 1 (id=1098): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7dffeffc) close(r1) 1.034823296s ago: executing program 0 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a51267c78f958ba583c3fc20641a5061615aa4e28f388753bd7e952f6aa55083fef5392eb"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.034367126s ago: executing program 3 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) 1.030975576s ago: executing program 1 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) fsopen(&(0x7f0000000200)='hostfs\x00', 0x1) 1.026434007s ago: executing program 4 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000000c0), 0x0) 963.326522ms ago: executing program 3 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 962.728692ms ago: executing program 4 (id=1120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3e, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xf8, 0x1, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xda7, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0x9, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0xccd, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x8, 0xffffff29, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0xfffffffe, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x99d, 0xfffffff7, 0x4, 0x9, 0xfffffffd, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc9, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0xc, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x4, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x5, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0xa, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x4, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 873.567669ms ago: executing program 2 (id=1121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 873.260239ms ago: executing program 4 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 873.16989ms ago: executing program 0 (id=1124): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 872.89585ms ago: executing program 2 (id=1125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x400) io_setup(0x400, &(0x7f0000000040)) 865.0531ms ago: executing program 4 (id=1127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000008, &(0x7f0000000640)=ANY=[@ANYBLOB='utf8=1,iocharset=koi8-r,uni_xlate=1,iocharset=cp1250,utf8=0,shortname=mixed,nonumtail=0,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c636f6465706167653d3933322c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f636173652c6572726f72733d72656d6f756e742d726f2c00e35ec324ea27102e04ba63712286370a2719ffc05a4054aacae8cff46cde00000000d83f459bbc15fee2ad7c0654c1a3fce06e90b85d15883313b71e7eb157a6cb292feebfb4d4762a7d3077c3381860f2c112d54a816b5e4ac4c3921f1de2610cc9c8d95b39a422629c78236832c2e633d9fa7afa0000000000000000"], 0x1, 0x36a, &(0x7f0000001840)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3BxZHkvSSvSdrtLnal+PtBk+nMfDPf+0PyGl6mLyxG+8J0XLx69UrMzFSiuvjYYlyrxFxk0bcb42oT6gCAk+FaSvFnyo22zUwOqdyGtACAY9R7/38pIhoxl9e8+fVh/ZN3fwA48Yq//08d1ueAzwEiXjuWlACAYzb2+f/9+5prvZ9q/9dq6a4AAOCkeurZ5x5fWol4stGYiVh7e7O52YxHhu1LF+OV6MRqnInZuB6RXyh0Hyq9x3PnV5bPNBqNnfhlLpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPltZXmj0RMTuTm/+WKtsNqfjdDH/j6djdXjh0R+k9xRxfmX5bKMYoLnWj9+J2BveqNDNfz5m4/sXB8Ok1L+DcWX50kI/6WH8ZrMeFwZ74cBPQAAAAAAAAAAAAAAAAAAAAAAA4JbMNwbmBuvnpO5zvlLO/PyE9t76OHl8sT7QXr4+UKqnSOmPNx5qvpPFvvWBRtfn2bSQIAAAAAAAAAAAAAAAAAAAAAxsbNWi1emsrm9sbbfLhZ31ja2piOjWvPrtJ1+divE+NyhU8ynqEYMpGsW02+1WyvqdUxYxHp51J+/XfPT5IONyn/pgKyamUT+4qdO5476f3x/W3Jv1R/572CeLyRuYldJ4dGTktTvzlG5mRw0KZ8s19fHZL6eUSjVvlcMvPT8+YFQiqjd/4LbbU3Fwn9QtfHPl5bv7e7/1Zco98ODs05ff+/C3dqvTnTl6R7C2vnE9tVuVfucjzF4Ml3qHYHhuVCIvVMpnQvWwAff217SyH35/5p53vzvaTkjlmte75/NInyzfnE9Hw2t5oZvmSNOpYfh0sRGd1ekJJ/+NCrdwTO/64IuPU/rp1yNPMTQ19rJR+XdefQAAAAAAAAAAAAAAAAAAgLLSd8ULxZd9pw+LeviJ488MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6f4f//LxX2dmOk5iiFv3YmRNVX1zciav/1ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/3TwAAAP//D7VfEw==") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 816.609414ms ago: executing program 0 (id=1128): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 785.272536ms ago: executing program 4 (id=1129): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d3", 0x6) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 740.29284ms ago: executing program 2 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 739.3211ms ago: executing program 0 (id=1140): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10003, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "e675910f0547f567a5afbe81b11967155e46616ed4dd5c55", "15df9c8340e53b20e91b913c5bc01a3a1deb091c6f52dada80e8eb5b17692de5"}}}}}}, 0x0) 738.63408ms ago: executing program 2 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r0, r1) 124.21261ms ago: executing program 3 (id=1130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) 120.55577ms ago: executing program 0 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r2) 116.843191ms ago: executing program 1 (id=1131): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 116.38332ms ago: executing program 2 (id=1132): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.01032ms ago: executing program 2 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a51267c78f958ba583c3fc20641a5061615aa4e28f388753bd7e952f6aa55083fef5392eb"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 564.15µs ago: executing program 0 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) 0s ago: executing program 3 (id=1148): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 24.782197][ T29] audit: type=1400 audit(1756508188.301:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.782989][ T3290] cgroup: Unknown subsys name 'net' [ 24.804944][ T29] audit: type=1400 audit(1756508188.301:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.832405][ T29] audit: type=1400 audit(1756508188.331:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.030934][ T3290] cgroup: Unknown subsys name 'cpuset' [ 25.037082][ T3290] cgroup: Unknown subsys name 'rlimit' [ 25.226120][ T29] audit: type=1400 audit(1756508188.741:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.255194][ T29] audit: type=1400 audit(1756508188.741:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.275821][ T29] audit: type=1400 audit(1756508188.741:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.285059][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.296170][ T29] audit: type=1400 audit(1756508188.741:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.324977][ T29] audit: type=1400 audit(1756508188.771:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.329565][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.349820][ T29] audit: type=1400 audit(1756508188.771:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.381890][ T29] audit: type=1400 audit(1756508188.821:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.461735][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.517136][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.535423][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.542619][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.549717][ T3307] bridge_slave_0: entered allmulticast mode [ 26.556140][ T3307] bridge_slave_0: entered promiscuous mode [ 26.574520][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.585939][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.593072][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.600200][ T3307] bridge_slave_1: entered allmulticast mode [ 26.606530][ T3307] bridge_slave_1: entered promiscuous mode [ 26.641240][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.660525][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.672487][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.722115][ T3307] team0: Port device team_slave_0 added [ 26.727873][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.735013][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.742212][ T3302] bridge_slave_0: entered allmulticast mode [ 26.748706][ T3302] bridge_slave_0: entered promiscuous mode [ 26.764035][ T3307] team0: Port device team_slave_1 added [ 26.774409][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.781521][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.788735][ T3302] bridge_slave_1: entered allmulticast mode [ 26.795188][ T3302] bridge_slave_1: entered promiscuous mode [ 26.801261][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 26.831603][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.838835][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.846178][ T3305] bridge_slave_0: entered allmulticast mode [ 26.852854][ T3305] bridge_slave_0: entered promiscuous mode [ 26.863782][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.870751][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.896777][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.910277][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.917316][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.943298][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.955060][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.964244][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.971373][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.978533][ T3305] bridge_slave_1: entered allmulticast mode [ 26.985151][ T3305] bridge_slave_1: entered promiscuous mode [ 26.996266][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.003530][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.010663][ T3306] bridge_slave_0: entered allmulticast mode [ 27.017075][ T3306] bridge_slave_0: entered promiscuous mode [ 27.032580][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.051302][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.058445][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.065548][ T3306] bridge_slave_1: entered allmulticast mode [ 27.072047][ T3306] bridge_slave_1: entered promiscuous mode [ 27.091734][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.111913][ T3302] team0: Port device team_slave_0 added [ 27.122790][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.138522][ T3302] team0: Port device team_slave_1 added [ 27.145818][ T3307] hsr_slave_0: entered promiscuous mode [ 27.152064][ T3307] hsr_slave_1: entered promiscuous mode [ 27.167535][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.177321][ T3305] team0: Port device team_slave_0 added [ 27.194315][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.208595][ T3305] team0: Port device team_slave_1 added [ 27.238145][ T3306] team0: Port device team_slave_0 added [ 27.248886][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.256035][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.263340][ T3301] bridge_slave_0: entered allmulticast mode [ 27.269573][ T3301] bridge_slave_0: entered promiscuous mode [ 27.276433][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.283512][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.309761][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.321206][ T3306] team0: Port device team_slave_1 added [ 27.327083][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.334054][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.360329][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.371241][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.378329][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.385725][ T3301] bridge_slave_1: entered allmulticast mode [ 27.392062][ T3301] bridge_slave_1: entered promiscuous mode [ 27.398404][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.405413][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.431424][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.450945][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.457969][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.483879][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.521023][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.527959][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.554124][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.568578][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.575561][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.601733][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.614039][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.624896][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.657607][ T3302] hsr_slave_0: entered promiscuous mode [ 27.663665][ T3302] hsr_slave_1: entered promiscuous mode [ 27.669495][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.675358][ T3302] Cannot create hsr debugfs directory [ 27.692276][ T3301] team0: Port device team_slave_0 added [ 27.711755][ T3305] hsr_slave_0: entered promiscuous mode [ 27.717784][ T3305] hsr_slave_1: entered promiscuous mode [ 27.723597][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.729328][ T3305] Cannot create hsr debugfs directory [ 27.735551][ T3301] team0: Port device team_slave_1 added [ 27.747465][ T3306] hsr_slave_0: entered promiscuous mode [ 27.753788][ T3306] hsr_slave_1: entered promiscuous mode [ 27.759691][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.765547][ T3306] Cannot create hsr debugfs directory [ 27.819973][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.826987][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.853239][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.876554][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.883751][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.909759][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.967146][ T3301] hsr_slave_0: entered promiscuous mode [ 27.973158][ T3301] hsr_slave_1: entered promiscuous mode [ 27.978929][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 27.984988][ T3301] Cannot create hsr debugfs directory [ 28.040115][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.064515][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.075251][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.093089][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.113512][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.133025][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.142921][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.152142][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.185411][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.195028][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.210139][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.219289][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.249972][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.259919][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.280751][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.289506][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.312812][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.321990][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.331215][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.339516][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.363846][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.396022][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.410881][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.418603][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.425889][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.442302][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.462375][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.469569][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.483984][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.499198][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.506282][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.516906][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.529579][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.536643][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.545900][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.553008][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.572650][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.579811][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.594395][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.609492][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.628180][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.652292][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.671123][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.678189][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.702710][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.709982][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.721081][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.738471][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.748915][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.802566][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.809805][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.818642][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.825783][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.843641][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.864463][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.873277][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.928466][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.006265][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.077752][ T3306] veth0_vlan: entered promiscuous mode [ 29.098923][ T3305] veth0_vlan: entered promiscuous mode [ 29.112334][ T3306] veth1_vlan: entered promiscuous mode [ 29.122262][ T3307] veth0_vlan: entered promiscuous mode [ 29.129949][ T3307] veth1_vlan: entered promiscuous mode [ 29.142733][ T3305] veth1_vlan: entered promiscuous mode [ 29.168741][ T3301] veth0_vlan: entered promiscuous mode [ 29.179008][ T3306] veth0_macvtap: entered promiscuous mode [ 29.191708][ T3301] veth1_vlan: entered promiscuous mode [ 29.203090][ T3306] veth1_macvtap: entered promiscuous mode [ 29.216625][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.224629][ T3305] veth0_macvtap: entered promiscuous mode [ 29.232156][ T3302] veth0_vlan: entered promiscuous mode [ 29.242734][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.251901][ T3307] veth0_macvtap: entered promiscuous mode [ 29.258726][ T3305] veth1_macvtap: entered promiscuous mode [ 29.268768][ T3302] veth1_vlan: entered promiscuous mode [ 29.280497][ T3307] veth1_macvtap: entered promiscuous mode [ 29.286939][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.299859][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.308709][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321061][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.331255][ T3301] veth0_macvtap: entered promiscuous mode [ 29.342583][ T3301] veth1_macvtap: entered promiscuous mode [ 29.349830][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.359387][ T3302] veth0_macvtap: entered promiscuous mode [ 29.368406][ T3302] veth1_macvtap: entered promiscuous mode [ 29.385050][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.397404][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.399308][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.421878][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.433264][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.442989][ T289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.452869][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.461017][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.469700][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.477951][ T289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.512563][ T289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.539155][ T289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.582786][ T312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.601035][ T312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634100][ T312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.678702][ T312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.719892][ T312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.748429][ T312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.777507][ T312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.802405][ T312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.827801][ T312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.852278][ T3495] serio: Serial port ptm0 [ 29.865451][ T312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.880565][ T312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.896734][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 29.898339][ T312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905675][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 29.927971][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 29.941424][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 29.941441][ T29] audit: type=1400 audit(1756508193.461:113): avc: denied { kexec_image_load } for pid=3501 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 30.002909][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.011956][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.028401][ T29] audit: type=1400 audit(1756508193.541:114): avc: denied { create } for pid=3511 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.055851][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.072563][ T29] audit: type=1400 audit(1756508193.581:115): avc: denied { write } for pid=3511 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.092696][ T29] audit: type=1400 audit(1756508193.581:116): avc: denied { read } for pid=3511 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.146512][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.146486][ T29] audit: type=1400 audit(1756508193.641:117): avc: denied { kernel } for pid=3515 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.175123][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.184691][ T3503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.236019][ T29] audit: type=1400 audit(1756508193.751:118): avc: denied { read } for pid=3523 comm="syz.1.21" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.259115][ T29] audit: type=1400 audit(1756508193.751:119): avc: denied { open } for pid=3523 comm="syz.1.21" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.285762][ T29] audit: type=1400 audit(1756508193.751:120): avc: denied { ioctl } for pid=3523 comm="syz.1.21" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.396552][ T29] audit: type=1400 audit(1756508193.881:121): avc: denied { create } for pid=3529 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.415995][ T29] audit: type=1400 audit(1756508193.891:122): avc: denied { read write } for pid=3530 comm="syz.3.25" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.638847][ T3411] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.658127][ T3411] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.756288][ T3569] smc: net device bond0 applied user defined pnetid SYZ0 [ 30.785126][ T3569] smc: net device bond0 erased user defined pnetid SYZ0 [ 30.817549][ T3577] serio: Serial port ptm0 [ 30.942915][ T3588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3588 comm=syz.4.50 [ 31.111522][ T3601] sd 0:0:1:0: device reset [ 31.250835][ T3605] loop0: detected capacity change from 0 to 736 [ 31.296612][ T3605] rock: directory entry would overflow storage [ 31.303072][ T3605] rock: sig=0x4f50, size=4, remaining=3 [ 31.308624][ T3605] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 31.318748][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 31.352202][ T3616] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 31.520661][ T3634] capability: warning: `syz.0.71' uses deprecated v2 capabilities in a way that may be insecure [ 31.538302][ T3635] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 31.797557][ T3676] mmap: +}[@ (3676) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.877480][ T3686] pimreg: entered allmulticast mode [ 31.914961][ T3686] pimreg: left allmulticast mode [ 31.916103][ T3694] serio: Serial port ttyS3 [ 32.453797][ T3759] syz.1.129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.787753][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104e69c00: rx timeout, send abort [ 32.796086][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104e69c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. Aug 29 22:56:36 syzkaller kern.alert kernel: [ 32.787753][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104e69c00: rx timeout, send abort [ 33.208279][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3864 comm=syz.3.181 [ 33.367901][ T3890] syz.4.193 uses obsolete (PF_INET,SOCK_PACKET) [ 33.542764][ T3887] netlink: 'syz.2.191': attribute type 13 has an invalid length. [ 33.602994][ T3887] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 33.743522][ T3939] netlink: 'syz.0.217': attribute type 21 has an invalid length. [ 33.757318][ T3939] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 33.953569][ T3976] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3976 comm=syz.0.235 [ 34.278717][ T4049] PID 4049 killed due to inadequate hugepage pool [ 34.421927][ T4092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 34.428802][ T4092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.436783][ T4092] vhci_hcd vhci_hcd.0: Device attached [ 34.451916][ T4093] vhci_hcd: connection closed [ 34.452193][ T51] vhci_hcd: stop threads [ 34.461223][ T51] vhci_hcd: release socket [ 34.465646][ T51] vhci_hcd: disconnect device [ 34.499491][ T4108] netlink: 'syz.1.298': attribute type 21 has an invalid length. [ 34.760626][ T4160] macvtap0: refused to change device tx_queue_len [ 34.868835][ T4183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.921479][ T4183] bond1: (slave batadv1): Opening slave failed [ 34.953738][ T29] kauditd_printk_skb: 1204 callbacks suppressed [ 34.953755][ T29] audit: type=1400 audit(1756508198.471:1327): avc: denied { create } for pid=4203 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 34.980649][ T29] audit: type=1400 audit(1756508198.471:1328): avc: denied { mounton } for pid=4203 comm="syz.0.346" path="/98/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 35.014181][ T29] audit: type=1400 audit(1756508198.501:1329): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 35.038533][ T29] audit: type=1400 audit(1756508198.501:1330): avc: denied { prog_load } for pid=4206 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 35.057797][ T29] audit: type=1400 audit(1756508198.501:1331): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 35.082409][ T29] audit: type=1400 audit(1756508198.501:1332): avc: denied { map_create } for pid=4208 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 35.102002][ T29] audit: type=1400 audit(1756508198.501:1333): avc: denied { prog_load } for pid=4208 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 35.121115][ T29] audit: type=1400 audit(1756508198.501:1334): avc: denied { create } for pid=4208 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 35.141067][ T29] audit: type=1400 audit(1756508198.531:1335): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 35.166027][ T29] audit: type=1400 audit(1756508198.531:1336): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 35.299676][ T4246] Zero length message leads to an empty skb [ 35.607994][ T4304] __nla_validate_parse: 16 callbacks suppressed [ 35.608012][ T4304] netlink: 96 bytes leftover after parsing attributes in process `syz.0.394'. [ 35.714020][ T4319] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 35.832369][ T4361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4361 comm=syz.4.422 [ 36.171174][ T4431] ipvlan2: entered promiscuous mode [ 36.190982][ T4431] bridge0: port 3(ipvlan2) entered blocking state [ 36.197505][ T4431] bridge0: port 3(ipvlan2) entered disabled state [ 36.224134][ T4431] ipvlan2: entered allmulticast mode [ 36.230004][ T4431] bridge0: entered allmulticast mode [ 36.237211][ T4431] ipvlan2: left allmulticast mode [ 36.242331][ T4431] bridge0: left allmulticast mode [ 36.407040][ T4465] netlink: 'syz.3.472': attribute type 5 has an invalid length. [ 36.500146][ T4482] netlink: 96 bytes leftover after parsing attributes in process `syz.4.480'. [ 36.646754][ T4514] bond1: entered promiscuous mode [ 36.651866][ T4514] bond1: entered allmulticast mode [ 36.658501][ T4514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.669013][ T4514] bond1 (unregistering): Released all slaves [ 36.687633][ T4520] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 36.723184][ T4520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.745179][ T4520] bond1: (slave geneve2): making interface the new active one [ 36.754310][ T4520] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 36.775238][ T4520] syz.4.498 (4520) used greatest stack depth: 10056 bytes left [ 36.806172][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 36.830656][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.830691][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 36.839605][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.901986][ T4550] ip6gre1: entered allmulticast mode [ 36.921526][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.953395][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.467109][ T4684] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 37.484618][ T4684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.507287][ T4684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.528054][ T4684] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 37.545570][ T4684] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 37.652613][ T4717] netlink: 5 bytes leftover after parsing attributes in process `syz.1.593'. [ 37.666479][ T4717] 0{X: renamed from gretap0 (while UP) [ 37.689897][ T4717] 0{X: entered allmulticast mode [ 37.696771][ T4717] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 37.785294][ T4743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 37.947163][ T4778] serio: Serial port ptm0 [ 38.727969][ T4857] can0: slcan on ttyS3. [ 38.770587][ T4857] can0 (unregistered): slcan off ttyS3. [ 38.802369][ T4860] can0: slcan on ttyS3. [ 38.900248][ T4856] can0 (unregistered): slcan off ttyS3. [ 38.920496][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 39.706668][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 39.706697][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 39.865731][ T4985] netlink: 'syz.3.721': attribute type 21 has an invalid length. [ 39.883935][ T4985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.721'. [ 39.892997][ T4985] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 39.961152][ T29] kauditd_printk_skb: 5941 callbacks suppressed [ 39.961319][ T29] audit: type=1400 audit(1756508203.481:6927): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 39.999565][ T5005] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 40.010892][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.017428][ T3032] audit: audit_lost=118 audit_rate_limit=0 audit_backlog_limit=64 [ 40.019174][ T3307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.025253][ T3032] audit: backlog limit exceeded [ 40.026026][ T3305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.031987][ T3307] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 40.036684][ T3305] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 40.043210][ T3307] audit: backlog limit exceeded [ 40.048881][ T29] audit: type=1400 audit(1756508203.481:6928): avc: denied { map_create } for pid=4998 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 40.843672][ T5110] macvtap0: refused to change device tx_queue_len [ 41.202509][ T5175] netlink: 'syz.1.820': attribute type 13 has an invalid length. [ 41.210386][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 41.290201][ T5175] netlink: 'syz.1.820': attribute type 13 has an invalid length. [ 41.297987][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 41.815489][ T5250] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 41.819484][ T5249] serio: Serial port ptm0 [ 42.102136][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 42.111144][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 42.646277][ T5330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 42.647247][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'. [ 42.673229][ T5330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 42.932903][ T5358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'. [ 42.941836][ T5358] netem: unknown loss type 13 [ 42.946616][ T5358] netem: change failed [ 43.011116][ T5365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 43.018578][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.905'. [ 43.195668][ T5390] capability: warning: `syz.0.916' uses 32-bit capabilities (legacy support in use) [ 43.603162][ T5440] serio: Serial port ptm0 [ 44.648653][ T5544] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 44.672735][ T5544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.728646][ T5544] bond1: (slave geneve2): making interface the new active one [ 44.737765][ T5544] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 44.970083][ T29] kauditd_printk_skb: 24620 callbacks suppressed [ 44.970101][ T29] audit: type=1400 audit(1756508208.481:30642): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 44.978156][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 45.004426][ T3032] audit: audit_lost=423 audit_rate_limit=0 audit_backlog_limit=64 [ 45.008754][ T5571] audit: audit_backlog=65 > audit_backlog_limit=64 [ 45.012458][ T3032] audit: backlog limit exceeded [ 45.016144][ T5570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 45.019123][ T5571] audit: audit_lost=424 audit_rate_limit=0 audit_backlog_limit=64 [ 45.024014][ T5570] audit: audit_lost=425 audit_rate_limit=0 audit_backlog_limit=64 [ 45.024028][ T5570] audit: backlog limit exceeded [ 45.030553][ T5571] audit: backlog limit exceeded [ 45.152097][ T5582] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 45.210774][ T5582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 45.226827][ T5593] bond3: (slave geneve2): making interface the new active one [ 45.227983][ T5593] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 45.272472][ T5593] syz.1.1009 (5593) used greatest stack depth: 9568 bytes left [ 45.367272][ T5612] loop4: detected capacity change from 0 to 512 [ 45.376498][ T5612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.376517][ T5612] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.446927][ T5612] EXT4-fs (loop4): 1 orphan inode deleted [ 45.447297][ T5612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.466138][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 45.483149][ T5621] loop1: detected capacity change from 0 to 128 [ 45.483650][ T5612] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.500684][ T5621] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 45.632434][ T5639] netlink: 'syz.1.1030': attribute type 3 has an invalid length. [ 45.646902][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.666688][ T5642] loop4: detected capacity change from 0 to 164 [ 45.680917][ T5642] rock: directory entry would overflow storage [ 45.687168][ T5642] rock: sig=0x66, size=4, remaining=3 [ 45.776587][ T5653] loop1: detected capacity change from 0 to 1024 [ 45.792167][ T5653] EXT4-fs: Ignoring removed orlov option [ 45.798091][ T5653] ext4: Unknown parameter 'nouser_xattr' [ 45.893666][ T5665] loop0: detected capacity change from 0 to 512 [ 45.925790][ T5665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.953420][ T5665] EXT4-fs (loop0): 1 orphan inode deleted [ 45.959931][ T5665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.973003][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 45.985207][ T5665] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.006106][ T5679] loop2: detected capacity change from 0 to 164 [ 46.031878][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.036431][ T5681] loop1: detected capacity change from 0 to 1024 [ 46.048534][ T5681] EXT4-fs: Ignoring removed orlov option [ 46.051196][ T5679] rock: directory entry would overflow storage [ 46.054322][ T5681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.060470][ T5679] rock: sig=0x66, size=4, remaining=3 [ 46.116683][ T5681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.214522][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.227329][ T5705] SELinux: Context is not valid (left unmapped). [ 46.550201][ T5746] loop4: detected capacity change from 0 to 1024 [ 46.557150][ T5746] EXT4-fs: Ignoring removed orlov option [ 46.562947][ T5746] ext4: Unknown parameter 'nouser_xattr' [ 46.608738][ T5748] __nla_validate_parse: 11 callbacks suppressed [ 46.608762][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 46.714210][ T5766] loop0: detected capacity change from 0 to 1024 [ 46.722876][ T5766] EXT4-fs: Ignoring removed orlov option [ 46.728598][ T5766] ext4: Unknown parameter 'nouser_xattr' [ 46.792328][ T5773] 9pnet: Could not find request transport: f [ 46.828474][ T5779] 9pnet: Could not find request transport: f [ 46.922680][ T5790] loop3: detected capacity change from 0 to 512 [ 46.938029][ T5790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.953073][ T5790] EXT4-fs (loop3): 1 truncate cleaned up [ 46.960704][ T5790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.976263][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.480056][ T5829] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 47.480056][ T5829] Q&|xXX 0x0000000000000002 [ 48.673432][ T5866] [ 48.675758][ T5866] Reported by Kernel Concurrency Sanitizer on: [ 48.681916][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.4.1129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.691637][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.701787][ T5866] ================================================================== [ 48.737679][ T5879] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 48.745624][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1148'. [ 48.761800][ T5880] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 48.761800][ T5880] Q&|xXX