last executing test programs: 4.993067263s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xabf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 4.919463379s ago: executing program 0 (id=6): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.918081782s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = msgget(0x0, 0x28c) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unlink(&(0x7f0000000100)='./file0/file1\x00') 3.695345651s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500070000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 3.668008914s ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x10000, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300009c000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000000d6c0)={{r0}, &(0x7f0000008740), &(0x7f000000d680)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4f2, &(0x7f00000003c0)="$eJzs3cFvG1kZAPBvnLgkbUpS4FAq0UYI1FZQO2loG/XQFgnBqRJQ7iEkThTFiaPYaZuoQqk4IySEAMEFTlyQ+AOQUP8EhFQJ7hVCoIptu4c97K5XtsdtNmsnrWrHqfP7SdN573k83/ec5tlvZuIJ4Mgaj4hbETEQERcjYjRtz6RLbDeW2nbPnz2Yqy1JVKt3/p9EkrY195Wk6xPp04Yi4offi/hJkjQadihvbi3PFouF9bSer6ys5cubW5eWVmYXC4uF1ampyavT16avTE90rK83vvOfX//iT9+98bdv3nsy878LP63lO5I+trMfndR4TbL116JpMCLWuxGsBwbS/mRfZ+Ok+/kAALC32mf8L0TEVyPixe96nQ0AAADQDdWbI/FhElEFAAAA+lamfg1sksml1wKMRCaTyzWu4f1S3IxiqVz5xkJpY3W+ca3sWGQzC0vFwkR6rfBYZJNafbJeflW/vKs+FRGnIuJXo8P1em6uVJzv9cEPAAAAOCJq8/yRTKNcW70/2pj/AwAAAH1mrNcJAAAAAF1n/g8AAAD977Pz//HGKhk8+GQAAACATvv+7du1pdq8//X83c2N5dLdS/OF8nJuZWMuN1daX8stlkqL9e/sW9lvf8VSae1bsbpxP18plCv58ubWzEppY7UyU7+v90zhte4TDQAAAHTUqXPNU/zDsX19uF46lraYq0N/y7zZ5km38gAO3kCvEwB6xgW+cHSZ4wP7TeyHDigPAACge85/+dG/ap/9t68PD8eO8/8nnzg2AP3uDc//A33E+X84unad//9Dr/IADp45PrDfcYC25///3vlcAACA7hipL0kml84BRiKTyeUiTtZvC5BNFpaKhYmI+HxE/HM0+7lafbLXSQMAAAAAAAAAAAAAAAAAAAAAAADAO6ZaTaIKAAAA9LWIzH+TiEhiKGL0ayO7jw8cSz4Yra8j4t7v7/zm/mylsj5Za3/vZXvlt2n75V4cwQAAAAB2a87Tm/N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOik588ezDWXg4z79NsRMdYq/mAM1ddDkY2I4y+SGNzxvCQiBjoQf/thRJxuFT+ppRVjaRa742ciYrjH8U90ID4cZY9q48+tVr9/mRivr1v//g2my9t6Ot5u/Mu8HP8G2ox/J/fZ97F0febxX/Jt4z+MODPYevxpxk/ecvz98Y+2tto9Vv1jxPmW7z/Jp2LlKytr+fLm1qWlldnFwmJhdWpq8ur0tekr0xP5haViIf23ZYxffuWvH+/V/+Nt4o+163/SyKlabb3Pc7vqHz2+/+yLrTZMIp7+PC23+Pmfbhc/fe2/nr4P1B4/3yxvN8o7nf3zP87u1f/5Nv3f7+d/od1Od7n4g5/9u1HKvuYzAIBuKm9uLc8Wi4X1d71Q68whSKODhfHDkcahLwz103/jw1Po9cgEAAB02qsP/b3OBAAAAAAAAAAAAAAAAAAAAI6u5t//N7/LuRtfJ7Yz3lCzkCQH3lcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL18EgAA//8cOM1n") r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc020000000000000000000000000000fe8000000000000000000000000000aa670002", @ANYBLOB="cf"], 0x0) 3.570157262s ago: executing program 4 (id=9): io_uring_setup(0x23d8, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, 0x0, 0x53) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r1, 0x0, 0x7c8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000000000000000000000000001"], 0x6c}}, 0x0) 3.488148719s ago: executing program 3 (id=10): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = memfd_create(&(0x7f00000000c0)='\ah:\x98(-)[\x00', 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x414}, {0xffffffffffffffff, 0x30}, {r0, 0x2000}, {r1, 0x3605}, {r2, 0x920a}], 0x5, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x80000001, 0x4}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x4, 0x6, 0x1f, 0xf4, 0x7f, 0x3f, 0x6, 0x2, 0x9, 0xff, 0x9, 0x0, 0x7f}, 0xe) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0xfffb, 0x7fff, 0x8, 0x3, 0x1c, 0x6, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xba7f, 0x4, 0x0, 0x20003, 0x5b8}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x4}, 0x9c) 3.487161859s ago: executing program 1 (id=11): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x80000) 3.324603972s ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r1}, 0x18) open(0x0, 0x101c42, 0x0) io_submit(0x0, 0x0, &(0x7f00000008c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r4, &(0x7f0000000380)={'c', ' *:* ', 'r\x00'}, 0x8) 3.323034233s ago: executing program 4 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) close(r0) 3.263723537s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 3.216013341s ago: executing program 1 (id=17): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) 3.153584627s ago: executing program 3 (id=19): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7, 0xff, 0xb, 0x5, 0x0, 0x778a, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x2}, 0x1, 0x2, 0x1, 0x9, 0x45b, 0x3, 0x401, 0x0, 0x7, 0x0, 0x4fac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 3.153007596s ago: executing program 2 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.096878401s ago: executing program 2 (id=21): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) close(r0) 3.077548773s ago: executing program 2 (id=22): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_emit_ethernet(0x22, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 3.060733574s ago: executing program 2 (id=23): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x323, &(0x7f0000001380)="$eJzs3M9LI2cYwPEnMcYkYiaH0tJC8aW9tD0MmvZcCEWhNFBRU6qFwqiTNmSaSCZYUkq1p15L/4NeehCP3oS2/4CX3rqXvezNy8IeVhbZWTI/dKKTuDsaEtfvByRv5nme8X1JIs8E5z35+vcf6lVbrxptSWaUJERETkUKkpRAwn9MuuO0hO3Jh9NP/n93ZW39i1K5vLCs1GJp9eOiUio/+/ePP2f9tKMpOS58e/K4+Oj4zeO3T56vfl+zVc1WjWZbGWqj+bBtbFim2qrZdV2pJcs0bFPVGrbZ8uJNL161mtvbHWU0tmZy2y3TtpXR6Ki62VHtpmq3Osr4zqg1lK7raiYnUdKRR++ryv7yslGKWbx5y5NBXM8cxxkQdhIlY0JEslcilf2hzgsAAIylS/3/hNvSx+r/Je/2/93ki/7/4L1/29NfHeb9/v8oHdX/f/LAO1dP/58RkZv1/5nelWYiVn+1I7rzdl8l+Ub9P8bDbOgTORGV0GqVjJz/+XX9+s3BnDug/wcAAAAAAAAAAAAAAAAAAAAA4C44dRzNcRwtePR/PrrI8I6Nco4Ynj6vvzbl3zEVPB/1PDEcK2vrknFv3EvlRazfdio7Fe/RjweJc6LJmft+8HXHwZ1Hqqsg/1i7fv3uTsW7FalUlZpYYsq8aFK4XO84i5+XF+aVp7d+UnLh+qJo8kZ0fTGyPi0fvB+q10WT/zalKZZsdd/XZ855/S/zSn32ZflSfdbNAwAAAADgdaCrc5HX77reL+7Vn19f934/IBK6Pp+LvD5Pae+kRrt2AAAAAADuC7vzU92wLLM1YJCV63PiD1LxyicH5YS3Qe0JyV7fJaf9HYKHt9IBg+AfKerpUCgjf/qH45w5WP9w5pyUOFWz4kx5s7rJbw++NuqXI0vDfr1SfUJv/fHX03hnTvj7bIdDnx5mrlnp0AaTL/XHw4ncbhgAAADAmAqa/qztPk2Mej4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxHA7YBS93WdmKjXiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLl4EAAD//xVAAAM=") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) rt_sigqueueinfo(0xffffffffffffffff, 0x12, &(0x7f0000000040)={0x3, 0x4, 0x10001}) 104.773871ms ago: executing program 3 (id=24): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120008ff6000000002000020d3"]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x3a00, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x400000}]}}}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 103.379201ms ago: executing program 1 (id=25): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x258, &(0x7f0000001140)="$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") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) 97.578003ms ago: executing program 4 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x2, 0x3, 0x10, @mcast2, @mcast1, 0x1, 0x40, 0x8, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@ipv4_newnexthop={0x18, 0x68, 0x221, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x4, 0x0, 0x9}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4005045) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0xff27, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @dev}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 92.676923ms ago: executing program 2 (id=27): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='9p_protocol_dump\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 39.183108ms ago: executing program 2 (id=28): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000030900010073797a3000000000c4000000020a01"], 0x13c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121182, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 1 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): [ 20.850148][ T29] audit: type=1400 audit(1729385438.211:81): avc: denied { read } for pid=2952 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 26.433665][ T29] audit: type=1400 audit(1729385443.791:82): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.434916][ T3258] cgroup: Unknown subsys name 'net' [ 26.456447][ T29] audit: type=1400 audit(1729385443.791:83): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.483799][ T29] audit: type=1400 audit(1729385443.821:84): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.600410][ T3258] cgroup: Unknown subsys name 'cpuset' [ 26.606548][ T3258] cgroup: Unknown subsys name 'rlimit' [ 26.764300][ T29] audit: type=1400 audit(1729385444.121:85): avc: denied { setattr } for pid=3258 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.787644][ T29] audit: type=1400 audit(1729385444.121:86): avc: denied { create } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.808125][ T29] audit: type=1400 audit(1729385444.121:87): avc: denied { write } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.812793][ T3262] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.828541][ T29] audit: type=1400 audit(1729385444.121:88): avc: denied { read } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.857539][ T29] audit: type=1400 audit(1729385444.121:89): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.882418][ T29] audit: type=1400 audit(1729385444.121:90): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.905689][ T29] audit: type=1400 audit(1729385444.201:91): avc: denied { relabelto } for pid=3262 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.910600][ T3258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.041875][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 28.063331][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 28.109743][ T3276] chnl_net:caif_netlink_parms(): no params data found [ 28.159718][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.166957][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.174102][ T3272] bridge_slave_0: entered allmulticast mode [ 28.180411][ T3272] bridge_slave_0: entered promiscuous mode [ 28.186848][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.194074][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.201226][ T3269] bridge_slave_0: entered allmulticast mode [ 28.207666][ T3269] bridge_slave_0: entered promiscuous mode [ 28.216021][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.223115][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.230248][ T3269] bridge_slave_1: entered allmulticast mode [ 28.236623][ T3269] bridge_slave_1: entered promiscuous mode [ 28.242960][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 28.260985][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.268109][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.275241][ T3272] bridge_slave_1: entered allmulticast mode [ 28.281597][ T3272] bridge_slave_1: entered promiscuous mode [ 28.293121][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 28.325916][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.359557][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.382248][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.422394][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.455814][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.462990][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.470332][ T3276] bridge_slave_0: entered allmulticast mode [ 28.476709][ T3276] bridge_slave_0: entered promiscuous mode [ 28.505902][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.513120][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.520313][ T3276] bridge_slave_1: entered allmulticast mode [ 28.526680][ T3276] bridge_slave_1: entered promiscuous mode [ 28.533755][ T3272] team0: Port device team_slave_0 added [ 28.548670][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.555960][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.563474][ T3273] bridge_slave_0: entered allmulticast mode [ 28.569928][ T3273] bridge_slave_0: entered promiscuous mode [ 28.582313][ T3272] team0: Port device team_slave_1 added [ 28.587991][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.595138][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.602376][ T3268] bridge_slave_0: entered allmulticast mode [ 28.608868][ T3268] bridge_slave_0: entered promiscuous mode [ 28.620980][ T3276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.630595][ T3269] team0: Port device team_slave_0 added [ 28.637211][ T3276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.646322][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.653516][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.660802][ T3273] bridge_slave_1: entered allmulticast mode [ 28.667177][ T3273] bridge_slave_1: entered promiscuous mode [ 28.678350][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.685566][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.692840][ T3268] bridge_slave_1: entered allmulticast mode [ 28.699164][ T3268] bridge_slave_1: entered promiscuous mode [ 28.705835][ T3269] team0: Port device team_slave_1 added [ 28.750796][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.760328][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.767274][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.793259][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.809178][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.816308][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.842317][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.853478][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.860468][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.886556][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.897982][ T3276] team0: Port device team_slave_0 added [ 28.904776][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.914139][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.921112][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.947175][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.959053][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.971530][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.986117][ T3276] team0: Port device team_slave_1 added [ 29.005434][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.012432][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.038499][ T3276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.060078][ T3273] team0: Port device team_slave_0 added [ 29.078380][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.085404][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.111414][ T3276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.133792][ T3273] team0: Port device team_slave_1 added [ 29.150675][ T3272] hsr_slave_0: entered promiscuous mode [ 29.156735][ T3272] hsr_slave_1: entered promiscuous mode [ 29.166461][ T3268] team0: Port device team_slave_0 added [ 29.182774][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.189846][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.215809][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.227624][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.234680][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.260591][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.272201][ T3268] team0: Port device team_slave_1 added [ 29.280214][ T3269] hsr_slave_0: entered promiscuous mode [ 29.286164][ T3269] hsr_slave_1: entered promiscuous mode [ 29.292106][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.299691][ T3269] Cannot create hsr debugfs directory [ 29.328488][ T3276] hsr_slave_0: entered promiscuous mode [ 29.334700][ T3276] hsr_slave_1: entered promiscuous mode [ 29.340802][ T3276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.348518][ T3276] Cannot create hsr debugfs directory [ 29.364961][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.371974][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.397981][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.432101][ T3273] hsr_slave_0: entered promiscuous mode [ 29.438323][ T3273] hsr_slave_1: entered promiscuous mode [ 29.444334][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.451955][ T3273] Cannot create hsr debugfs directory [ 29.457608][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.464622][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.490741][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.550837][ T3268] hsr_slave_0: entered promiscuous mode [ 29.556877][ T3268] hsr_slave_1: entered promiscuous mode [ 29.562882][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.570521][ T3268] Cannot create hsr debugfs directory [ 29.714999][ T3272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.723499][ T3272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.734593][ T3272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.743162][ T3272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.772480][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.781657][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.791620][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.800652][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.830506][ T3276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.844549][ T3276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.853482][ T3276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.870444][ T3276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.880457][ T3273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.889609][ T3273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.898374][ T3273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.907520][ T3273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.949543][ T3268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.958362][ T3268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.969570][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.979581][ T3268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.988389][ T3268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.015586][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.035783][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.042946][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.063128][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.070298][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.129026][ T3276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.138405][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.155052][ T3276] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.165712][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.178585][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.194752][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.201908][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.212444][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.219568][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.228327][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.235467][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.246986][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.258572][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.265652][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.286851][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.298360][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.316417][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.323531][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.338943][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.352278][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.359323][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.370828][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.378319][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.387234][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.394478][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.408190][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.479912][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.511665][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.562982][ T3276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.572824][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.586667][ T3272] veth0_vlan: entered promiscuous mode [ 30.602056][ T3272] veth1_vlan: entered promiscuous mode [ 30.658142][ T3272] veth0_macvtap: entered promiscuous mode [ 30.679181][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.689704][ T3272] veth1_macvtap: entered promiscuous mode [ 30.698817][ T3269] veth0_vlan: entered promiscuous mode [ 30.711742][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.731364][ T3269] veth1_vlan: entered promiscuous mode [ 30.750915][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.781554][ T3269] veth0_macvtap: entered promiscuous mode [ 30.794413][ T3276] veth0_vlan: entered promiscuous mode [ 30.801732][ T3269] veth1_macvtap: entered promiscuous mode [ 30.821266][ T3272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.830084][ T3272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.838845][ T3272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.847599][ T3272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.861130][ T3276] veth1_vlan: entered promiscuous mode [ 30.871345][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.881918][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.892680][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.911828][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.922369][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.933131][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.950461][ T3268] veth0_vlan: entered promiscuous mode [ 30.957324][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.966147][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.974877][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.983697][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.996071][ T3276] veth0_macvtap: entered promiscuous mode [ 31.008802][ T3276] veth1_macvtap: entered promiscuous mode [ 31.030421][ T3273] veth0_vlan: entered promiscuous mode [ 31.038524][ T3273] veth1_vlan: entered promiscuous mode [ 31.051361][ T3272] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.054804][ T3268] veth1_vlan: entered promiscuous mode [ 31.084499][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.095048][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.104929][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.115391][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.129193][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.138565][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.149104][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.159002][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.169566][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.184020][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.198456][ T3273] veth0_macvtap: entered promiscuous mode [ 31.206433][ T3273] veth1_macvtap: entered promiscuous mode [ 31.214034][ T3276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.222850][ T3276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.231701][ T3276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.240549][ T3276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257186][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.266732][ T3410] ------------[ cut here ]------------ [ 31.272216][ T3410] refcount_t: underflow; use-after-free. [ 31.278306][ T3410] WARNING: CPU: 0 PID: 3410 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 31.287740][ T3410] Modules linked in: [ 31.291668][ T3410] CPU: 0 UID: 0 PID: 3410 Comm: syz.0.6 Not tainted 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 31.302114][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 31.312301][ T3410] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 31.318536][ T3410] Code: 72 ff ff ff e8 0b 84 71 ff 48 c7 c7 7e d7 b2 86 e8 7f 6a 8a ff c6 05 36 2d f4 04 01 90 48 c7 c7 24 a4 1b 86 e8 8b 49 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 dc 83 71 ff 48 c7 c7 7b d7 b2 86 e8 [ 31.338212][ T3410] RSP: 0018:ffffc9000197f468 EFLAGS: 00010246 [ 31.344314][ T3410] RAX: d70d0ddfa30f9d00 RBX: ffff888102ee8ee4 RCX: 0000000000040000 [ 31.352404][ T3410] RDX: ffffc90001989000 RSI: 0000000000004437 RDI: 0000000000004438 [ 31.360471][ T3410] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 31.368486][ T3410] R10: 0001ffffffffffff R11: 0001c9000197f2a7 R12: ffff888104620a68 [ 31.376570][ T3410] R13: ffff888104620a00 R14: ffff888102ee8ee4 R15: 0000000000000000 [ 31.384619][ T3410] FS: 00007f1b56fb76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 31.393595][ T3410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.400274][ T3410] CR2: 0000001b3011bff8 CR3: 00000001155ac000 CR4: 00000000003506f0 [ 31.408265][ T3410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.416382][ T3410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.424384][ T3414] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.424398][ T3410] Call Trace: [ 31.424407][ T3410] [ 31.442476][ T3410] ? __warn+0x141/0x350 [ 31.446688][ T3410] ? report_bug+0x315/0x420 [ 31.451235][ T3410] ? refcount_warn_saturate+0x1c6/0x230 [ 31.456811][ T3410] ? handle_bug+0x60/0x90 [ 31.461195][ T3410] ? exc_invalid_op+0x1a/0x50 [ 31.465900][ T3410] ? asm_exc_invalid_op+0x1a/0x20 [ 31.469661][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 31.469676][ T29] audit: type=1400 audit(1729385448.821:132): avc: denied { setopt } for pid=3409 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.470967][ T3410] ? __warn_printk+0x167/0x1b0 [ 31.471006][ T3410] ? refcount_warn_saturate+0x1c6/0x230 [ 31.471030][ T3410] ? refcount_warn_saturate+0x1c5/0x230 [ 31.471052][ T3410] sk_skb_reason_drop+0xe9/0x290 [ 31.517167][ T3410] j1939_session_put+0x157/0x2a0 [ 31.522247][ T3410] j1939_cancel_active_session+0x1d4/0x220 [ 31.528184][ T3410] j1939_netdev_notify+0x13a/0x1b0 [ 31.533349][ T3410] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 31.539039][ T3410] raw_notifier_call_chain+0x6f/0x1d0 [ 31.544516][ T3410] call_netdevice_notifiers_info+0xae/0x100 [ 31.550534][ T3410] dev_close_many+0x174/0x240 [ 31.555230][ T3410] unregister_netdevice_many_notify+0x263/0x11b0 [ 31.561678][ T3410] ? __list_add_valid_or_report+0x36/0xc0 [ 31.567423][ T3410] ? unregister_netdevice_queue+0x12b/0x220 [ 31.573378][ T3410] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 31.579747][ T3410] rtnl_dellink+0x380/0x580 [ 31.584291][ T3410] ? put_dec_trunc8+0x10e/0x130 [ 31.589228][ T3410] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 31.595514][ T3410] ? _raw_spin_unlock+0x26/0x50 [ 31.600396][ T3410] ? __mutex_lock+0x221/0x8e0 [ 31.605147][ T3410] ? __pfx_rtnl_dellink+0x10/0x10 [ 31.610227][ T3410] rtnetlink_rcv_msg+0x6aa/0x710 [ 31.615225][ T3410] ? __dev_queue_xmit+0x161/0x2040 [ 31.620413][ T3410] ? skb_clone+0x154/0x1f0 [ 31.624927][ T3410] netlink_rcv_skb+0x12c/0x230 [ 31.629752][ T3410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 31.635319][ T3410] rtnetlink_rcv+0x1c/0x30 [ 31.639782][ T3410] netlink_unicast+0x599/0x670 [ 31.644636][ T3410] netlink_sendmsg+0x5cc/0x6e0 [ 31.649531][ T3410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.654920][ T3410] __sock_sendmsg+0x140/0x180 [ 31.659670][ T3410] ____sys_sendmsg+0x312/0x410 [ 31.664549][ T3410] __sys_sendmsg+0x1d9/0x270 [ 31.669238][ T3410] ? futex_wait+0x18e/0x1c0 [ 31.673857][ T3410] __x64_sys_sendmsg+0x46/0x50 [ 31.678696][ T3410] x64_sys_call+0x2689/0x2d60 [ 31.683460][ T3410] do_syscall_64+0xc9/0x1c0 [ 31.688030][ T3410] ? clear_bhb_loop+0x55/0xb0 [ 31.692791][ T3410] ? clear_bhb_loop+0x55/0xb0 [ 31.697498][ T3410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.703583][ T3410] RIP: 0033:0x7f1b5833dff9 [ 31.708045][ T3410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.727729][ T3410] RSP: 002b:00007f1b56fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.736190][ T3410] RAX: ffffffffffffffda RBX: 00007f1b584f5f80 RCX: 00007f1b5833dff9 [ 31.744356][ T3410] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 31.752382][ T3410] RBP: 00007f1b583b0296 R08: 0000000000000000 R09: 0000000000000000 [ 31.760488][ T3410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.768496][ T3410] R13: 0000000000000000 R14: 00007f1b584f5f80 R15: 00007ffe5adc38e8 [ 31.776525][ T3410] [ 31.779605][ T3410] ---[ end trace 0000000000000000 ]--- [ 31.785784][ T29] audit: type=1400 audit(1729385449.141:133): avc: denied { map_create } for pid=3409 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.806066][ T29] audit: type=1400 audit(1729385449.141:134): avc: denied { map_read map_write } for pid=3409 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.854628][ T3268] veth0_macvtap: entered promiscuous mode [ 31.863221][ T3268] veth1_macvtap: entered promiscuous mode [ 31.882564][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.893143][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.903042][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.913518][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.923476][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.933935][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.945532][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.960546][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.971167][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.981104][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.991580][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.001428][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.011875][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.022730][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.030675][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.041143][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.051012][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.061580][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.071436][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.081955][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.091924][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.102401][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.113428][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.124765][ T3273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.133645][ T3273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.142379][ T3273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.151184][ T3273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.175769][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.186284][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.196124][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.206635][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.216481][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.226978][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.236839][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.247404][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.258218][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.268212][ T3268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.277009][ T3268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.285758][ T3268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.294566][ T3268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.306938][ T29] audit: type=1400 audit(1729385449.641:135): avc: denied { prog_run } for pid=3416 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.431337][ T29] audit: type=1400 audit(1729385449.791:136): avc: denied { create } for pid=3423 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.458250][ T3426] loop3: detected capacity change from 0 to 512 [ 32.465349][ T29] audit: type=1400 audit(1729385449.821:137): avc: denied { write } for pid=3423 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.494684][ T3426] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.542936][ T29] audit: type=1400 audit(1729385449.901:138): avc: denied { mount } for pid=3425 comm="syz.3.7" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.603795][ T3431] loop4: detected capacity change from 0 to 8192 [ 32.618169][ T3276] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 32.629531][ T29] audit: type=1400 audit(1729385449.971:139): avc: denied { mount } for pid=3430 comm="syz.4.9" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.653546][ T3431] tipc: Started in network mode [ 32.658483][ T3431] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 32.661256][ T29] audit: type=1400 audit(1729385450.011:140): avc: denied { mounton } for pid=3432 comm="syz.1.11" path="/proc/6/task" dev="proc" ino=3795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 32.699568][ T3431] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 32.707872][ T3431] tipc: Enabled bearer , priority 10 [ 32.711946][ T3435] process 'syz.2.12' launched '/dev/fd/9' with NULL argv: empty string added [ 32.729592][ T29] audit: type=1400 audit(1729385450.071:141): avc: denied { execute } for pid=3434 comm="syz.2.12" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.815181][ T3443] pim6reg1: entered promiscuous mode [ 32.820648][ T3443] pim6reg1: entered allmulticast mode [ 32.850511][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.850570][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.871921][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.898719][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.914116][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.953529][ T3443] syz.4.15[3443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.957249][ T3451] can0: slcan on ttyS3. [ 33.047895][ T3464] loop2: detected capacity change from 0 to 128 [ 33.055209][ T3464] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 33.067467][ T3464] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 33.075483][ T3464] FAT-fs (loop2): Filesystem has been set read-only [ 33.082596][ T3451] can0 (unregistered): slcan off ttyS3. [ 33.083589][ T3464] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 33.088404][ T3451] Falling back ldisc for ttyS3. [ 34.949569][ T35] tipc: Node number set to 1 [ 36.006310][ T3269] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 36.016749][ T3466] hsr0: entered promiscuous mode [ 36.062939][ T3470] loop1: detected capacity change from 0 to 128 [ 36.064043][ T3469] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.099003][ T50] ================================================================== [ 36.107101][ T50] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 36.114387][ T50] [ 36.116723][ T50] read-write to 0xffff8881065f98f8 of 8 bytes by task 3268 on cpu 1: [ 36.124778][ T50] xas_clear_mark+0x90/0x180 [ 36.129386][ T50] __folio_start_writeback+0x2e2/0x440 [ 36.134864][ T50] __block_write_full_folio+0x506/0x8c0 [ 36.140444][ T50] block_write_full_folio+0x293/0x2b0 [ 36.145843][ T50] write_cache_pages+0x62/0x100 [ 36.150697][ T50] blkdev_writepages+0x59/0x90 [ 36.155472][ T50] do_writepages+0x1d8/0x480 [ 36.160069][ T50] filemap_fdatawrite_wbc+0xdb/0x100 [ 36.165364][ T50] filemap_flush+0x61/0x90 [ 36.169824][ T50] sync_blockdev_nowait+0x29/0x40 [ 36.174852][ T50] sync_filesystem+0xe3/0x190 [ 36.179551][ T50] generic_shutdown_super+0x46/0x220 [ 36.184857][ T50] kill_block_super+0x2a/0x70 [ 36.189548][ T50] deactivate_locked_super+0x7d/0x1c0 [ 36.194949][ T50] deactivate_super+0x9f/0xb0 [ 36.199639][ T50] cleanup_mnt+0x268/0x2e0 [ 36.204081][ T50] __cleanup_mnt+0x19/0x20 [ 36.208506][ T50] task_work_run+0x13a/0x1a0 [ 36.213111][ T50] syscall_exit_to_user_mode+0xbe/0x130 [ 36.218715][ T50] do_syscall_64+0xd6/0x1c0 [ 36.223216][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.229114][ T50] [ 36.231433][ T50] read to 0xffff8881065f98f8 of 8 bytes by task 50 on cpu 0: [ 36.238813][ T50] xas_find_marked+0x216/0x660 [ 36.243592][ T50] find_get_entry+0x54/0x390 [ 36.248220][ T50] filemap_get_folios_tag+0x136/0x210 [ 36.253601][ T50] writeback_iter+0x4b0/0x830 [ 36.258363][ T50] write_cache_pages+0x4b/0x100 [ 36.263225][ T50] blkdev_writepages+0x59/0x90 [ 36.268031][ T50] do_writepages+0x1d8/0x480 [ 36.272639][ T50] __writeback_single_inode+0x89/0x850 [ 36.278098][ T50] writeback_sb_inodes+0x461/0xa30 [ 36.283237][ T50] __writeback_inodes_wb+0x9a/0x1a0 [ 36.288436][ T50] wb_writeback+0x274/0x640 [ 36.292937][ T50] wb_workfn+0x67f/0x940 [ 36.297186][ T50] process_scheduled_works+0x483/0x9a0 [ 36.302652][ T50] worker_thread+0x51d/0x6f0 [ 36.307236][ T50] kthread+0x1d1/0x210 [ 36.311302][ T50] ret_from_fork+0x4b/0x60 [ 36.315720][ T50] ret_from_fork_asm+0x1a/0x30 [ 36.320493][ T50] [ 36.322809][ T50] value changed: 0x0000000000003031 -> 0x0000000000003000 [ 36.329904][ T50] [ 36.332221][ T50] Reported by Kernel Concurrency Sanitizer on: [ 36.338364][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G W 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 36.350526][ T50] Tainted: [W]=WARN [ 36.354317][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.364365][ T50] Workqueue: writeback wb_workfn (flush-7:1) [ 36.370362][ T50] ================================================================== [ 36.393684][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.403210][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.536316][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 36.536334][ T29] audit: type=1400 audit(1729385453.891:168): avc: denied { create } for pid=3479 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.566648][ T29] audit: type=1400 audit(1729385453.891:169): avc: denied { write } for pid=3479 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=584 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.592890][ T29] audit: type=1400 audit(1729385453.891:170): avc: denied { append } for pid=3479 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=584 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.617517][ T29] audit: type=1400 audit(1729385453.911:171): avc: denied { unlink } for pid=3490 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=584 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1