last executing test programs: 909.385686ms ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000200000000000e8ffffff00000000000000006af59bca1ccc8ce0c051941094198ea34c7f03a68e1b88bffbc8704f4087d3d810d4720608cda237e7a25f713db1a854e80ae1b5289ee529acdc1d616b111bf1654b0a48ce74b75f59d241ec730d1fea9d4dc39a3c95895ed73034d604793c63fc65bb321158a75f0badf1028982c545ae2eb3d32c033435a910b1d0c10fce77ccc0b41bbf43478e883e124a488c4c4e8b5ba8983862b4046370247caf2eeab63f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000300)=""/158, 0x9e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x33f, &(0x7f0000000980)={@broadcast, @local, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xe8bf, 0x0, 0x1}, {0x1}, {}, {0x2, 0x0, 0x1}, {0x429e}, {0x3, 0x0, 0x1}], @ipv6=@gre_packet={0x3, 0x6, "eff122", 0x2e9, 0x2f, 0x1, @private0, @empty, {[@dstopts={0x32, 0xa, '\x00', [@pad1, @hao={0xc9, 0x0, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x28, {0x2, 0x8, 0xe, 0x2, [0xffffffff80000001, 0x80000000, 0x3, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x3}]}, @hopopts={0x2c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8001}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x78, 0x2, [0xf, 0x7], "7bec0791f8b342cfd99737de105303f22d579331a54ca8bbb65c754a195a70bf696bcfd2cfdd4948a56ca4c44124c4ea05b70e03e0cf924a0a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1, 0x9, 0x9], "9f3898f3c18e20756fd06b19b5f913f2522544c3d290f7df59df1f44621dbaf3547012a6261e6a1ea99b146e4015e37ccbbe360e66c29b41adbba5d7216e3ea59c2748f48d6253e1d0014f3ad4238757d1b7498a80d742b277c17bba5dcdc578fa87fe1807bf0a2b05b380c5848a463688376e597b2265ebcd9af66f5539d511d67aa4388b5cb7ea13"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0xbc], "63a7af9bfce8968adff8a4444fe4116d9fa59664f8d0a26bd8ab71971f821c2692f279369a82692e65c3cf16c45397c7a603d1e53b7c214bd7cfc6d1a5d6f890ed363f452f6a84ac92f8a3f344b8c496ff00e3e0321cf0bfe9e92fb8a01cdaa3fa7e4c2bed2e7c7dd05996769a7b154c39bdf9a2560e56eea15aea7549460d0d3472382aa074855d866f7b642e7f505556d7369ac994ec234ac1d75f204f"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x7, 0x2, 0x0, 0x0, 0x6, 0x19}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x3, 0x2, 0x1, 0x3, 0x7, 0x5}, 0x2, {0x1000, 0xfff, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b742baf0bf77fce23138acb4a2aa5c8433bb233262603a304759520709862eea1532fe931435464ce59629ca1f676c5b132774f7b0862e5b435b82395fcc39aee8722cb9094fd7fbeaf6fe717982816022c979144dd20fc62fa7a97c630d26e025cbeaa290e1ed0a4e32f95c3de1af78662d19ba85f3f7bc5785552522d25c23e41125fe26495ec9e8a31b4389f039038f0c35828ddfe7538fb76a2b61c17cd5efb3110f9b8db73d85c5a96fcf3db4d32b52ee7c5fcbf4"}}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 838.949042ms ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, 0x0, 0x15) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}]}}) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000008) 836.297713ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x54}}, 0x0) capset(&(0x7f00000003c0)={0x19980330, r3}, &(0x7f0000000400)={0x6, 0x9, 0xff, 0x200, 0x0, 0x855}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a00000000df0000000000000015"], 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x0, 0x15, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x20, 0xff, r6}, [@IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000020000103000000ee00000000021400000000000000000000080001"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_shrink_slab_start\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000280)={0x8000, {{0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xc4}}}, 0x88) syz_emit_ethernet(0xfffffffffffffd35, 0x0, 0x0) 643.05208ms ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}]}}) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000008) 639.760291ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 0s ago: executing program 4 (id=6): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000003c0)=@req3={0x3, 0x4001, 0x0, 0x40, 0x0, 0xfff, 0xff}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 19.313428][ T24] audit: type=1400 audit(1727226711.590:66): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.314355][ T273] cgroup: Unknown subsys name 'net' [ 19.316999][ T24] audit: type=1400 audit(1727226711.590:67): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.321301][ T24] audit: type=1400 audit(1727226711.600:68): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.321454][ T273] cgroup: Unknown subsys name 'devices' [ 19.499456][ T273] cgroup: Unknown subsys name 'hugetlb' [ 19.504855][ T273] cgroup: Unknown subsys name 'rlimit' [ 19.665507][ T24] audit: type=1400 audit(1727226711.940:69): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.688526][ T24] audit: type=1400 audit(1727226711.940:70): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.693225][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.712954][ T24] audit: type=1400 audit(1727226711.940:71): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.744293][ T24] audit: type=1400 audit(1727226712.000:72): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.769555][ T24] audit: type=1400 audit(1727226712.000:73): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.797427][ T24] audit: type=1400 audit(1727226712.070:74): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.822755][ T24] audit: type=1400 audit(1727226712.070:75): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.848561][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.690807][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.698043][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.705101][ T284] device bridge_slave_0 entered promiscuous mode [ 20.712312][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.719152][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.726339][ T284] device bridge_slave_1 entered promiscuous mode [ 20.760270][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.767103][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.774397][ T287] device bridge_slave_0 entered promiscuous mode [ 20.782853][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.789698][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.796860][ T287] device bridge_slave_1 entered promiscuous mode [ 20.813483][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.820346][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.827506][ T283] device bridge_slave_0 entered promiscuous mode [ 20.841940][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.848876][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.855893][ T283] device bridge_slave_1 entered promiscuous mode [ 20.881559][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.888592][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.895647][ T286] device bridge_slave_0 entered promiscuous mode [ 20.904687][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.911597][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.918690][ T286] device bridge_slave_1 entered promiscuous mode [ 20.939619][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.946447][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.953993][ T285] device bridge_slave_0 entered promiscuous mode [ 20.962533][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.969519][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.976662][ T285] device bridge_slave_1 entered promiscuous mode [ 21.095869][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.102817][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.109908][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.116673][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.131185][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.138030][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.145107][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.151938][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.166277][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.173129][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.180178][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.186987][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.195423][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.202272][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.213623][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.220480][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.227535][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.234365][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.270751][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.277793][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.284705][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.291915][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.299772][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.306687][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.313680][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.321772][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.328928][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.335851][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.360749][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.368612][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.376320][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.384894][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.391741][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.399578][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.406731][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.414298][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.422603][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.430613][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.437436][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.444853][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.452760][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.459504][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.466634][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.474562][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.481402][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.488630][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.496529][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.503286][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.510466][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.518233][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.526117][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.532977][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.540155][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.563898][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.571952][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.578791][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.585924][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.594925][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.602727][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.610646][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.626490][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.634388][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.647577][ T286] device veth0_vlan entered promiscuous mode [ 21.655860][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.664294][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.672476][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.679686][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.686798][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.695562][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.703707][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.711777][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.718619][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.728877][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.736917][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.750963][ T284] device veth0_vlan entered promiscuous mode [ 21.763733][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.771919][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.780227][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.788689][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.796704][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.804481][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.812363][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.820527][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.828683][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.836662][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.844639][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.851481][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.858731][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.866482][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.874426][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.881694][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.894755][ T287] device veth0_vlan entered promiscuous mode [ 21.902187][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.909953][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.917623][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.925664][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.933791][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.941579][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.949669][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.957475][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.965364][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.972855][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.980180][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.987318][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.995103][ T285] device veth0_vlan entered promiscuous mode [ 22.003552][ T284] device veth1_macvtap entered promiscuous mode [ 22.010805][ T286] device veth1_macvtap entered promiscuous mode [ 22.023134][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.030918][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.038864][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.046707][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.056230][ T285] device veth1_macvtap entered promiscuous mode [ 22.064284][ T287] device veth1_macvtap entered promiscuous mode [ 22.072205][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.080096][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.088273][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.096088][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.109411][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.117417][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.125670][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.133921][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.142357][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.150546][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.168839][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.176863][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.184990][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.193302][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.201762][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.209751][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.217885][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.225799][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.234047][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.242119][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.250328][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.258516][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.277290][ T283] device veth0_vlan entered promiscuous mode [ 22.284515][ T286] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.288355][ T283] device veth1_macvtap entered promiscuous mode [ 22.312515][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.320949][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.329284][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.337177][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.345342][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.352839][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.360071][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.518149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.526323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.546206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.554493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.087477][ T329] 9pnet: Insufficient options for proto=fd [ 23.093570][ T329] 9pnet: Insufficient options for proto=fd [ 23.310437][ T333] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 23.329758][ T333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.492075][ T325] list_del corruption, ffff88812435ae88->next is LIST_POISON1 (dead000000000100) [ 23.501176][ T325] ------------[ cut here ]------------ [ 23.506442][ T325] kernel BUG at lib/list_debug.c:55! [ 23.511737][ T325] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 23.517609][ T325] CPU: 1 PID: 325 Comm: syz.2.3 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 23.527056][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 23.537153][ T325] RIP: 0010:__list_del_entry_valid+0xea/0x120 [ 23.543029][ T325] Code: 4c 89 f6 e8 5e c9 55 02 0f 0b 48 c7 c7 c0 28 60 85 4c 89 f6 e8 4d c9 55 02 0f 0b 48 c7 c7 20 29 60 85 4c 89 f6 e8 3c c9 55 02 <0f> 0b 48 c7 c7 80 29 60 85 4c 89 f6 e8 2b c9 55 02 0f 0b 48 c7 c7 [ 23.562471][ T325] RSP: 0018:ffffc90005ab7468 EFLAGS: 00010246 [ 23.568390][ T325] RAX: 000000000000004e RBX: dead000000000100 RCX: dc0f99b524335700 [ 23.576188][ T325] RDX: ffffc900058a9000 RSI: 0000000000000771 RDI: 0000000000000772 [ 23.584081][ T325] RBP: ffffc90005ab7488 R08: ffffffff81522098 R09: ffffed103ee2a5f8 [ 23.592002][ T325] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.599820][ T325] R13: dffffc0000000000 R14: ffff88812435ae88 R15: dead000000000122 [ 23.607621][ T325] FS: 00007ffb7bed16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.616384][ T325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.622805][ T325] CR2: 00007fe3b7e136c0 CR3: 000000010b009000 CR4: 00000000003506a0 [ 23.630624][ T325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.638427][ T325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.646230][ T325] Call Trace: [ 23.649374][ T325] ? __die_body+0x62/0xb0 [ 23.653532][ T325] ? die+0x88/0xb0 [ 23.657087][ T325] ? do_trap+0x1a4/0x310 [ 23.661172][ T325] ? __list_del_entry_valid+0xea/0x120 [ 23.666466][ T325] ? handle_invalid_op+0x95/0xc0 [ 23.671237][ T325] ? __list_del_entry_valid+0xea/0x120 [ 23.676531][ T325] ? exc_invalid_op+0x32/0x50 [ 23.681045][ T325] ? asm_exc_invalid_op+0x12/0x20 [ 23.685905][ T325] ? wake_up_klogd+0xb8/0xf0 [ 23.690335][ T325] ? __list_del_entry_valid+0xea/0x120 [ 23.695626][ T325] ? __list_del_entry_valid+0xea/0x120 [ 23.700922][ T325] p9_fd_cancelled+0x74/0x1d0 [ 23.705436][ T325] ? __schedule+0xbee/0x1330 [ 23.709862][ T325] ? p9_fd_cancel+0x200/0x200 [ 23.714381][ T325] p9_client_flush+0x392/0x570 [ 23.718988][ T325] ? __kasan_check_write+0x14/0x20 [ 23.723939][ T325] ? p9_client_prepare_req+0xb50/0xb50 [ 23.729214][ T325] ? cpudl_heapify+0x2df/0x940 [ 23.733813][ T325] ? _raw_spin_unlock+0x4d/0x70 [ 23.738511][ T325] ? p9_fd_cancel+0x1b8/0x200 [ 23.743020][ T325] p9_client_rpc+0xae6/0x1390 [ 23.747531][ T325] ? p9_fid_create+0x230/0x230 [ 23.752130][ T325] ? pipe_poll+0x368/0x4d0 [ 23.756392][ T325] ? pipe_write+0x18c0/0x18c0 [ 23.760892][ T325] ? __kasan_check_write+0x14/0x20 [ 23.765840][ T325] ? p9_conn_create+0x4b0/0x530 [ 23.770526][ T325] ? p9_fd_create+0x3d5/0x510 [ 23.775038][ T325] ? io_schedule+0x120/0x120 [ 23.779502][ T325] ? p9_fd_create_unix+0x430/0x430 [ 23.784412][ T325] ? kfree+0xc3/0x270 [ 23.788231][ T325] p9_client_create+0x9be/0x1130 [ 23.793006][ T325] ? p9_parse_header+0x6c0/0x6c0 [ 23.797782][ T325] ? kstrdup+0x4f/0x70 [ 23.801683][ T325] ? __kasan_check_write+0x14/0x20 [ 23.806633][ T325] v9fs_session_init+0x1fa/0x19b0 [ 23.811498][ T325] ? v9fs_show_options+0x570/0x570 [ 23.816442][ T325] ? __kasan_kmalloc+0x9/0x10 [ 23.820954][ T325] ? v9fs_mount+0x5f/0x7b0 [ 23.825204][ T325] v9fs_mount+0x75/0x7b0 [ 23.829289][ T325] legacy_get_tree+0xf1/0x190 [ 23.833816][ T325] ? incfs_get_verity_signature+0x420/0x420 [ 23.839537][ T325] vfs_get_tree+0x88/0x290 [ 23.843786][ T325] do_new_mount+0x2ba/0xb30 [ 23.848124][ T325] ? do_move_mount_old+0x160/0x160 [ 23.853069][ T325] ? security_capable+0x87/0xb0 [ 23.857756][ T325] ? ns_capable+0x89/0xe0 [ 23.861920][ T325] path_mount+0x56f/0xcb0 [ 23.866087][ T325] __se_sys_mount+0x2c4/0x3b0 [ 23.870607][ T325] ? __x64_sys_mount+0xd0/0xd0 [ 23.875199][ T325] ? fpu__clear_all+0x20/0x20 [ 23.879716][ T325] __x64_sys_mount+0xbf/0xd0 [ 23.884139][ T325] do_syscall_64+0x34/0x70 [ 23.888395][ T325] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.894119][ T325] RIP: 0033:0x7ffb7d4bcef9 [ 23.898373][ T325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 23.917823][ T325] RSP: 002b:00007ffb7bed1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 23.926061][ T325] RAX: ffffffffffffffda RBX: 00007ffb7d675208 RCX: 00007ffb7d4bcef9 [ 23.933873][ T325] RDX: 0000000020000240 RSI: 0000000020000040 RDI: 0000000000000000 [ 23.941682][ T325] RBP: 00007ffb7d52fb76 R08: 0000000020000580 R09: 0000000000000000 [ 23.949489][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.957400][ T325] R13: 0000000000000000 R14: 00007ffb7d675208 R15: 00007ffeefe8dc48 [ 23.965203][ T325] Modules linked in: [ 23.969113][ T325] ---[ end trace 078832ba602b6e15 ]--- [ 23.974401][ T325] RIP: 0010:__list_del_entry_valid+0xea/0x120 [ 23.981112][ T325] Code: 4c 89 f6 e8 5e c9 55 02 0f 0b 48 c7 c7 c0 28 60 85 4c 89 f6 e8 4d c9 55 02 0f 0b 48 c7 c7 20 29 60 85 4c 89 f6 e8 3c c9 55 02 <0f> 0b 48 c7 c7 80 29 60 85 4c 89 f6 e8 2b c9 55 02 0f 0b 48 c7 c7 [ 24.001713][ T325] RSP: 0018:ffffc90005ab7468 EFLAGS: 00010246 [ 24.007595][ T325] RAX: 000000000000004e RBX: dead000000000100 RCX: dc0f99b524335700 [ 24.015614][ T325] RDX: ffffc900058a9000 RSI: 0000000000000771 RDI: 0000000000000772 [ 24.023879][ T325] RBP: ffffc90005ab7488 R08: ffffffff81522098 R09: ffffed103ee2a5f8 [ 24.031829][ T325] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 24.039810][ T325] R13: dffffc0000000000 R14: ffff88812435ae88 R15: dead000000000122 [ 24.047712][ T325] FS: 00007ffb7bed16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.056526][ T325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.062944][ T325] CR2: 00007fe3b7e136c0 CR3: 000000010b009000 CR4: 00000000003506a0 [ 24.070841][ T325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.078707][ T325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.086481][ T325] Kernel panic - not syncing: Fatal exception [ 24.092587][ T325] Kernel Offset: disabled [ 24.096707][ T325] Rebooting in 86400 seconds..