last executing test programs: 5.043933991s ago: executing program 2 (id=201): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_validatetrans(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp, 0xc350, 0x10000, 0x6, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xb, 0x40900) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x5, 0x2, 0x6}) 4.570825191s ago: executing program 2 (id=205): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioprio_get$uid(0x3, 0xee01) 3.851046585s ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x9c3fa077fa966179, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x6f}}}}}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40d10401}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40080) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001600)=ANY=[@ANYBLOB="74040000", @ANYBLOB="000827bd70", @ANYRES32=r5, @ANYBLOB="0c00990007000000350000000800b700390000000800b7004b0000000400b8000800b7003d0000000800b7005f0000000400b8002404b98038010f003e01030602060068040a0004007e15577fc00802110000000900000007000000000000068325405603ffffffffffff000000000802110000000700000000020000ffffffffffff0600000005e7075c802043eeadfd4569fcf6314a2759657646099decbf01ff423e6cb54f5f7e5838fe64ef03f15e34e7162243aedd0e2de8acf05384fb7c84ecc6d81e1a31848d43761d26894f94bab94964db40c0f45efd85062f238f0b086de7f91692e0c1f9e2748c01a740d99c1e79749f214ff9aa84e0fdb390bfc7c34ded31e983e5117852bd77e2b7a53292db45d2510920c7c2a2f46e56d8597676eb3aa2b0c2c4fabf0d422cd2fd2316fe705dc783bda2674c93dab3750e9e1ceb408c759e00c5b04d2304f4239cc29795ac3ac850593724991ac3f66f1f2ad8029f9691c1e4f1ee9fe7674e66f12e95000f002503012403262605090190c7a4e6894f5b79952e0dd6e72e20986d17b4f69690c65810b4c05d001441a363c322826242052303000000ffffffffffff04000000080211000000070000000800000006000802110000000200000004ffffffffffff27c7443e0108021100000167000000050802110000000400000004ffffffffffff00000000010802110000000600000000000087002a0004060403683e06000602ffff2a01030301012d1a1000036d0c0000000000000200ae00060000000600ffffffff098236470ce1000400000802110000011a0400000802110000009c0000000200000002010802110000000300000001080211000000000000006804460040007e15caf90008021100000005000000060000003ab300000008000e800400010036000f00760601ea030003002d1a010017090000000000000006009900180000000003060000000004061f07000009006804ff07010000000800bb0005000500660180000406062701000500057b2f5809e9d41d3e9e63c466fdbc476823fa8cc2764e1bdd1bd8b2ee12d94f63f67e9ff3987f6d7783676b8af6e8f3fa517bc0386d8db753b130fcc7ce8cd4c5a188b9255ecaaf7532a27d37e261dbce1e"], 0x474}, 0x1, 0x0, 0x0, 0x20000807}, 0x40) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x2a0, r3, 0x2, 0xfffffffd, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x284, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x12c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0xdf, 0x3}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xf5, 0x8, {0xb, 0x81, "a3bdbe753513ab1b82663140cac5ecad97265a27465a2803b97bfd7551bf115b7e1b9d6c2d2f8425affbf256c12fa9af25e0cd7c36676d7ed287c66e7d6352ddba170f46d5084dc6ccbb46162ced571231e03641ef4a0707014abca27d1e2cf657b31f349990aaa177e6300f72a3a69951f8f422f54d44d9f07fd06958995d056e3205e9a397f3de0c8314763a55a627c376394e307680a300a8e2bfbe5f7d108fb18fa6abddb49265e86ecf81d68d0eafb706fc8124066693610fe45948f05bf97ab699991548fe50fdfd0d94872a26c8618c00bdb807b6340a0b4929da9d9684c85d38be2bdb262e"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x13c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xcc8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2f, 0x6, "1766f92930b67958ce0dadbf4555dcf049d42265ef39f7aba57f9234c95242b318458a088ee507c00b2796"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xc1e, 0x9, 0x5}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x4a, 0xb, "695242594d24263940152915bd8e70b5cdc3464b6ab554c4a005d1c0583a431d99146141dc77c81621941bc2105b669aec67fd53eabb1ad749de75cfd85e1f36aa775c46fe55"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010102}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x8e, 0xa, "b3bbc318a5633aea8520fabcb6302d63dda3650f1d4a9f461e1a52df5fbd64251cc8f2f74309fa6dd16fa640c3bffb9b36e2dffbe6d28d2610a3c2df30a7a024712d05f659bc60af17674fc53b66db2902a13799b4f8334d4037a4b22ae6446f9ff7fde4fbca504d5d4cbc79e8391c564e829511cedfd16471bb3ab0faa7c07045347016b4cb69a4eb82"}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4020}, 0x20000040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 2.962453402s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[], 0x48) timer_delete(0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796104000000000000007e0000001bfe03000a58525dfd7e5a894dee21871415c664e2196c3ae18086e0a044cd", @ANYRES32=0x0, @ANYBLOB="000099000800000064000000"], 0x1c}}, 0x0) 2.663125608s ago: executing program 2 (id=222): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2.426488403s ago: executing program 2 (id=224): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kexec_load(0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x43, 0x1f0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) munlockall() stat(0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 2.426117163s ago: executing program 4 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 2.274971716s ago: executing program 4 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.198699037s ago: executing program 4 (id=227): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xe, r2, 0xfffffffe}, 0x10) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10c02, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.716609087s ago: executing program 3 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b125, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xf, 0xb}, {0x9, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.656079798s ago: executing program 1 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = syz_io_uring_setup(0x4e9e, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0xb516, 0xc2de, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r4, &(0x7f0000000240)=""/181, 0xb5) perf_event_open(&(0x7f0000000000)={0x8, 0xfffffffffffffced, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0x10000000}, 0x0, 0x3, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.601949659s ago: executing program 0 (id=230): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) 1.55942192s ago: executing program 0 (id=231): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.55690172s ago: executing program 3 (id=232): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r4], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffffffffff61) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.53961522s ago: executing program 4 (id=233): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioprio_get$uid(0x3, 0xee01) 1.519425561s ago: executing program 2 (id=234): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}, @nested={0x4, 0x84}]}, 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC]) socket$inet6(0xa, 0x80000, 0x8) 1.450029932s ago: executing program 0 (id=235): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.377469443s ago: executing program 0 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 935.731072ms ago: executing program 1 (id=237): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x8, 0x80b, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0xebec93e830f96115}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 928.970372ms ago: executing program 0 (id=247): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 739.026626ms ago: executing program 3 (id=238): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r0, 0x5) flock(0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 507.202671ms ago: executing program 3 (id=239): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) nanosleep(&(0x7f0000000580)={r0, r1+60000000}, &(0x7f00000005c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r3 = fcntl$getown(0xffffffffffffffff, 0x9) process_vm_writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000240)=""/117, 0x75}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/86, 0x56}], 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x39}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x29, 0x8, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x204, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 504.93112ms ago: executing program 2 (id=240): socket$inet(0x2, 0xa, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x0, 0x8000) pwritev(r0, 0x0, 0x0, 0x7, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x2400c014) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79", 0x33) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0xa20, 0x8000c64) write$qrtrtun(0xffffffffffffffff, &(0x7f00000000c0)="96d3a8b07826254e3eba011499c872dc6d5b01e7f1b3ffaa7ce34e4154ee667ccb5f8af1453665fb2f19957d57fcbc9c9f6e5bee7f29389987d302509ea1cd7f3f8fc13e3add1b2bbec6d5b84e91b8cccd", 0x51) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 372.537563ms ago: executing program 1 (id=241): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 266.867065ms ago: executing program 1 (id=242): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 244.700466ms ago: executing program 4 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0x4, 0x6, 0x9, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x4, 0x1}, 0x10, 0x20de0, r2, 0x7, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x1, 0x4, 0xa, 0x5}, {0x5, 0x3, 0xb, 0x1}, {0x4, 0x2, 0xd, 0x5}, {0x5, 0x5, 0x6, 0x2}, {0x5, 0x1, 0x10, 0x8}, {0x4, 0x1, 0xe}, {0x3, 0x2, 0x1, 0x6}], 0x10, 0x9}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="add86bb0cf91db75bb86582fca15905205236f32fa95cd4fb7b0bbe82cf15c3b41b1ba195e52426569eaf726a0d4f80fa63bd94a3b68ccea0ac846"], 0x56) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 171.140837ms ago: executing program 0 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0xffffe000}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 138.581048ms ago: executing program 4 (id=245): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x4) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x5}]}) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 47.14388ms ago: executing program 1 (id=246): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 0s ago: executing program 1 (id=248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x154, 0x10, 0x1, 0x80ffffff, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 33.246705][ T29] audit: type=1400 audit(1759020839.886:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.247891][ T3290] cgroup: Unknown subsys name 'net' [ 33.269628][ T29] audit: type=1400 audit(1759020839.886:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.297289][ T29] audit: type=1400 audit(1759020839.916:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.469612][ T3290] cgroup: Unknown subsys name 'cpuset' [ 33.475984][ T3290] cgroup: Unknown subsys name 'rlimit' [ 33.606903][ T29] audit: type=1400 audit(1759020840.246:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.630243][ T29] audit: type=1400 audit(1759020840.246:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.650717][ T29] audit: type=1400 audit(1759020840.246:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.662548][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.671133][ T29] audit: type=1400 audit(1759020840.246:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.699931][ T29] audit: type=1400 audit(1759020840.256:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.724803][ T29] audit: type=1400 audit(1759020840.256:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.748086][ T29] audit: type=1400 audit(1759020840.326:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.748322][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.536464][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.574889][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.650847][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.657975][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.665328][ T3299] bridge_slave_0: entered allmulticast mode [ 35.671912][ T3299] bridge_slave_0: entered promiscuous mode [ 35.702240][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.709410][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.716535][ T3299] bridge_slave_1: entered allmulticast mode [ 35.723421][ T3299] bridge_slave_1: entered promiscuous mode [ 35.736546][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.745281][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.752383][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.759697][ T3306] bridge_slave_0: entered allmulticast mode [ 35.766251][ T3306] bridge_slave_0: entered promiscuous mode [ 35.774940][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.791930][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.799095][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.806268][ T3306] bridge_slave_1: entered allmulticast mode [ 35.812841][ T3306] bridge_slave_1: entered promiscuous mode [ 35.830698][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.855892][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.866169][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.891664][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.900885][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.927483][ T3299] team0: Port device team_slave_0 added [ 35.933999][ T3299] team0: Port device team_slave_1 added [ 35.952821][ T3306] team0: Port device team_slave_0 added [ 35.978427][ T3306] team0: Port device team_slave_1 added [ 35.999188][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.006353][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.013553][ T3309] bridge_slave_0: entered allmulticast mode [ 36.020057][ T3309] bridge_slave_0: entered promiscuous mode [ 36.038958][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.046030][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.071954][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.082813][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.089924][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.097049][ T3309] bridge_slave_1: entered allmulticast mode [ 36.103468][ T3309] bridge_slave_1: entered promiscuous mode [ 36.109693][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.116794][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.124147][ T3301] bridge_slave_0: entered allmulticast mode [ 36.130544][ T3301] bridge_slave_0: entered promiscuous mode [ 36.142053][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.149061][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.175439][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.186550][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.193545][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.219476][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.240702][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.247896][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.255165][ T3301] bridge_slave_1: entered allmulticast mode [ 36.261680][ T3301] bridge_slave_1: entered promiscuous mode [ 36.278092][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.285161][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.311172][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.327863][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.350521][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.365736][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.374971][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.382156][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.389342][ T3302] bridge_slave_0: entered allmulticast mode [ 36.395708][ T3302] bridge_slave_0: entered promiscuous mode [ 36.418229][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.427400][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.434618][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.441777][ T3302] bridge_slave_1: entered allmulticast mode [ 36.448310][ T3302] bridge_slave_1: entered promiscuous mode [ 36.467135][ T3299] hsr_slave_0: entered promiscuous mode [ 36.473212][ T3299] hsr_slave_1: entered promiscuous mode [ 36.485464][ T3309] team0: Port device team_slave_0 added [ 36.505453][ T3306] hsr_slave_0: entered promiscuous mode [ 36.511470][ T3306] hsr_slave_1: entered promiscuous mode [ 36.517215][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.523022][ T3306] Cannot create hsr debugfs directory [ 36.529338][ T3309] team0: Port device team_slave_1 added [ 36.574876][ T3301] team0: Port device team_slave_0 added [ 36.582675][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.601918][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.608904][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.634893][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.646486][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.653474][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.679423][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.694279][ T3301] team0: Port device team_slave_1 added [ 36.701018][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.746593][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.753654][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.779601][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.791797][ T3302] team0: Port device team_slave_0 added [ 36.812642][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.819645][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.845623][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.857039][ T3302] team0: Port device team_slave_1 added [ 36.868511][ T3309] hsr_slave_0: entered promiscuous mode [ 36.874790][ T3309] hsr_slave_1: entered promiscuous mode [ 36.880804][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.886576][ T3309] Cannot create hsr debugfs directory [ 36.912811][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.919910][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.945956][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.971842][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.978943][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.004931][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.062658][ T3301] hsr_slave_0: entered promiscuous mode [ 37.068752][ T3301] hsr_slave_1: entered promiscuous mode [ 37.075788][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.081545][ T3301] Cannot create hsr debugfs directory [ 37.103510][ T3302] hsr_slave_0: entered promiscuous mode [ 37.109629][ T3302] hsr_slave_1: entered promiscuous mode [ 37.115441][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.121250][ T3302] Cannot create hsr debugfs directory [ 37.168911][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.189634][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.208262][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.217232][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.265974][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.290517][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.299250][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.312789][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.361149][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.376878][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.388734][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.397802][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.425563][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.434011][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.449013][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.462308][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.480905][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.490932][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.516367][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.526716][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.533841][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.544331][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.552749][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.567253][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.576399][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.586461][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.593562][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.607682][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.640128][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.647327][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.663852][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.671026][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.717064][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.744838][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.754231][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.783958][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.791089][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.800408][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.807492][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.825588][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.850949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.858054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.876267][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.902523][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.920603][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.927772][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.952916][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.966580][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.977051][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.000391][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.009374][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.030389][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.037491][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.055462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.062671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.128563][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.141858][ T3299] veth0_vlan: entered promiscuous mode [ 38.165995][ T3299] veth1_vlan: entered promiscuous mode [ 38.203567][ T3299] veth0_macvtap: entered promiscuous mode [ 38.221448][ T3299] veth1_macvtap: entered promiscuous mode [ 38.246453][ T3309] veth0_vlan: entered promiscuous mode [ 38.253401][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.268505][ T3306] veth0_vlan: entered promiscuous mode [ 38.293479][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.301783][ T3309] veth1_vlan: entered promiscuous mode [ 38.312992][ T3306] veth1_vlan: entered promiscuous mode [ 38.325717][ T3301] veth0_vlan: entered promiscuous mode [ 38.333820][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.355884][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.366381][ T3301] veth1_vlan: entered promiscuous mode [ 38.378702][ T3306] veth0_macvtap: entered promiscuous mode [ 38.393629][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.407891][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421085][ T3306] veth1_macvtap: entered promiscuous mode [ 38.427754][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.445351][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.445367][ T29] audit: type=1400 audit(1759020845.086:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.UQA9PC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.449200][ T3301] veth0_macvtap: entered promiscuous mode [ 38.463448][ T29] audit: type=1400 audit(1759020845.096:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.482020][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.503505][ T29] audit: type=1400 audit(1759020845.096:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.UQA9PC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.514524][ T3309] veth0_macvtap: entered promiscuous mode [ 38.535885][ T29] audit: type=1400 audit(1759020845.096:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.551741][ T3301] veth1_macvtap: entered promiscuous mode [ 38.563756][ T29] audit: type=1400 audit(1759020845.096:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.UQA9PC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.584048][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.595871][ T29] audit: type=1400 audit(1759020845.096:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.UQA9PC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.610637][ T3309] veth1_macvtap: entered promiscuous mode [ 38.630531][ T29] audit: type=1400 audit(1759020845.096:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.653642][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.668643][ T315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.678012][ T315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.698342][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710486][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.724417][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.731898][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742326][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.764959][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.775483][ T29] audit: type=1400 audit(1759020845.326:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.779157][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.798332][ T29] audit: type=1400 audit(1759020845.326:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=3753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.840630][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.860331][ T29] audit: type=1400 audit(1759020845.486:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.883412][ T3302] veth0_vlan: entered promiscuous mode [ 38.912672][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.935664][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959603][ T3302] veth1_vlan: entered promiscuous mode [ 38.973049][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.989880][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028494][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046674][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.070937][ T3302] veth0_macvtap: entered promiscuous mode [ 39.091569][ T3302] veth1_macvtap: entered promiscuous mode [ 39.115259][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.150312][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.189425][ T315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.259335][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.295484][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.319777][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.530871][ T3487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.555378][ T3487] bridge0: port 3(bond1) entered blocking state [ 39.562024][ T3487] bridge0: port 3(bond1) entered disabled state [ 39.579177][ T3487] bond1: entered allmulticast mode [ 39.585619][ T3487] bond1: entered promiscuous mode [ 39.591165][ T3487] bridge0: port 3(bond1) entered blocking state [ 39.597466][ T3487] bridge0: port 3(bond1) entered forwarding state [ 39.614672][ T60] bridge0: port 3(bond1) entered disabled state [ 39.644579][ T3497] pim6reg1: entered promiscuous mode [ 39.650063][ T3497] pim6reg1: entered allmulticast mode [ 39.750428][ T3502] loop0: detected capacity change from 0 to 128 [ 39.853349][ T3502] syz.0.11: attempt to access beyond end of device [ 39.853349][ T3502] loop0: rw=2049, sector=273, nr_sectors = 24 limit=128 [ 39.866884][ T3493] loop1: detected capacity change from 0 to 32768 [ 39.885876][ T3502] syz.0.11: attempt to access beyond end of device [ 39.885876][ T3502] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 39.899465][ T3502] syz.0.11: attempt to access beyond end of device [ 39.899465][ T3502] loop0: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 39.914626][ T3502] syz.0.11: attempt to access beyond end of device [ 39.914626][ T3502] loop0: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 39.958605][ T3502] syz.0.11: attempt to access beyond end of device [ 39.958605][ T3502] loop0: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 39.974096][ T3502] syz.0.11: attempt to access beyond end of device [ 39.974096][ T3502] loop0: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 39.988365][ T3502] syz.0.11: attempt to access beyond end of device [ 39.988365][ T3502] loop0: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 40.009328][ T3502] syz.0.11: attempt to access beyond end of device [ 40.009328][ T3502] loop0: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 40.037847][ T3507] tipc: Started in network mode [ 40.042844][ T3507] tipc: Node identity d68e95f0d6d6, cluster identity 4711 [ 40.050117][ T3507] tipc: Enabled bearer , priority 0 [ 40.071405][ T3509] vlan2: entered promiscuous mode [ 40.071913][ T3502] syz.0.11: attempt to access beyond end of device [ 40.071913][ T3502] loop0: rw=2049, sector=417, nr_sectors = 8 limit=128 [ 40.076684][ T3509] vlan2: entered allmulticast mode [ 40.095776][ T3509] hsr_slave_1: entered allmulticast mode [ 40.109794][ T3507] syzkaller0: entered promiscuous mode [ 40.115317][ T3507] syzkaller0: entered allmulticast mode [ 40.122165][ T3509] loop1: detected capacity change from 0 to 512 [ 40.129694][ T3509] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 40.137335][ T3502] syz.0.11: attempt to access beyond end of device [ 40.137335][ T3502] loop0: rw=2049, sector=433, nr_sectors = 8 limit=128 [ 40.138709][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 40.180638][ T3507] tipc: Resetting bearer [ 40.198775][ T3506] tipc: Resetting bearer [ 40.211286][ T3506] tipc: Disabling bearer [ 40.256476][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.265343][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.274502][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.283831][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.292662][ T3515] netlink: 'syz.0.16': attribute type 6 has an invalid length. [ 40.305154][ T3515] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.316018][ T3515] hsr_slave_0: left promiscuous mode [ 40.325363][ T3515] hsr_slave_1: left promiscuous mode [ 40.607352][ C1] hrtimer: interrupt took 25948 ns [ 40.710448][ T3533] tipc: Enabled bearer , priority 0 [ 40.719896][ T3533] tipc: Disabling bearer [ 40.833773][ T3535] tipc: Enabled bearer , priority 0 [ 40.841588][ T3535] syzkaller0: entered promiscuous mode [ 40.847078][ T3535] syzkaller0: entered allmulticast mode [ 40.859347][ T3535] tipc: Resetting bearer [ 40.866212][ T3534] tipc: Resetting bearer [ 40.873801][ T3534] tipc: Disabling bearer [ 40.917710][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.075189][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 41.096983][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.139553][ T3544] loop1: detected capacity change from 0 to 1024 [ 41.146360][ T3544] EXT4-fs: Ignoring removed bh option [ 41.152002][ T3544] EXT4-fs: Ignoring removed orlov option [ 41.157814][ T3544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.192250][ T3544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.211758][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.229609][ T3549] Zero length message leads to an empty skb [ 41.242300][ T3549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.292324][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.352652][ T3549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.370612][ T315] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.381131][ T315] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.394527][ T315] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.406257][ T315] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.415695][ T3544] syz.1.26 (3544) used greatest stack depth: 10960 bytes left [ 41.424161][ T3549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.427452][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.469285][ T3552] loop1: detected capacity change from 0 to 1024 [ 41.477476][ T3552] ======================================================= [ 41.477476][ T3552] WARNING: The mand mount option has been deprecated and [ 41.477476][ T3552] and is ignored by this kernel. Remove the mand [ 41.477476][ T3552] option from the mount to silence this warning. [ 41.477476][ T3552] ======================================================= [ 41.521855][ T3549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.534173][ T3552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.562675][ T3552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.28: bg 0: block 494: padding at end of block bitmap is not set [ 41.578193][ T3552] EXT4-fs (loop1): Remounting filesystem read-only [ 41.585170][ T3552] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 41.613149][ T315] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.632849][ T315] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.659551][ T315] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.706729][ T315] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.746460][ T3552] syz.1.28 (3552) used greatest stack depth: 9704 bytes left [ 41.774205][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.803949][ T3559] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 41.945129][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34'. [ 42.007237][ T3577] loop4: detected capacity change from 0 to 1024 [ 42.030417][ T3577] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.35: Failed to acquire dquot type 0 [ 42.044500][ T3577] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.060899][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.35: corrupted inode contents [ 42.083543][ T3577] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.35: mark_inode_dirty error [ 42.125788][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.35: corrupted inode contents [ 42.143144][ T3577] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.35: mark_inode_dirty error [ 42.162028][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.35: corrupted inode contents [ 42.177376][ T3577] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 42.190018][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.35: corrupted inode contents [ 42.214825][ T3577] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.35: mark_inode_dirty error [ 42.232532][ T3577] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 42.248402][ T3589] loop0: detected capacity change from 0 to 256 [ 42.260643][ T3591] team0: Port device vlan2 added [ 42.268513][ T3593] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 42.280458][ T3592] delete_channel: no stack [ 42.299623][ T3577] EXT4-fs (loop4): 1 truncate cleaned up [ 42.315450][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.332440][ T3598] SELinux: Context @ is not valid (left unmapped). [ 42.354176][ T3577] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.35: Failed to acquire dquot type 0 [ 42.394393][ T3600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3600 comm=syz.0.44 [ 42.434211][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 42.457899][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.459264][ T3610] loop2: detected capacity change from 0 to 512 [ 42.488726][ T3604] netlink: 'syz.1.45': attribute type 13 has an invalid length. [ 42.496514][ T3604] netlink: 'syz.1.45': attribute type 17 has an invalid length. [ 42.522960][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.537495][ T3610] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.679125][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.723067][ T3617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 42.733159][ T3617] netem: change failed [ 43.090439][ T3635] sctp: [Deprecated]: syz.2.52 (pid 3635) Use of int in maxseg socket option. [ 43.090439][ T3635] Use struct sctp_assoc_value instead [ 43.695606][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 43.695622][ T29] audit: type=1326 audit(1759020850.336:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca6dfeec9 code=0x7ffc0000 [ 43.726935][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.734307][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.753925][ T29] audit: type=1326 audit(1759020850.396:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6ca6dfeec9 code=0x7ffc0000 [ 43.783941][ T29] audit: type=1326 audit(1759020850.396:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca6dfeec9 code=0x7ffc0000 [ 43.807349][ T29] audit: type=1326 audit(1759020850.396:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca6dfeec9 code=0x7ffc0000 [ 43.830713][ T29] audit: type=1326 audit(1759020850.396:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ca6dfeec9 code=0x7ffc0000 [ 43.857745][ T3654] loop3: detected capacity change from 0 to 1024 [ 43.887631][ T3654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.909607][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.923101][ T3654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 43.925974][ T29] audit: type=1400 audit(1759020850.556:379): avc: denied { create } for pid=3661 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.931784][ T3654] System zones: 0-1, 3-12 [ 43.956451][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.960649][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.970567][ T29] audit: type=1326 audit(1759020850.596:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.2.58" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc2befeec9 code=0x0 [ 43.996448][ T3654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.57: bg 0: block 88: padding at end of block bitmap is not set [ 44.016476][ T29] audit: type=1400 audit(1759020850.656:381): avc: denied { write } for pid=3661 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.036475][ T29] audit: type=1400 audit(1759020850.656:382): avc: denied { nlmsg_write } for pid=3661 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.090262][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.100884][ T315] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.125109][ T315] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.159566][ T3685] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use) [ 44.171203][ T315] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.182350][ T315] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.252985][ T3692] tipc: Started in network mode [ 44.257919][ T3692] tipc: Node identity da3afbec667b, cluster identity 4711 [ 44.265263][ T3692] tipc: Enabled bearer , priority 0 [ 44.274305][ T3692] syzkaller0: entered promiscuous mode [ 44.279820][ T3692] syzkaller0: entered allmulticast mode [ 44.370077][ T3692] tipc: Resetting bearer [ 44.386225][ T3691] tipc: Resetting bearer [ 44.426670][ T3691] tipc: Disabling bearer [ 44.766185][ T29] audit: type=1326 audit(1759020851.406:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.3.64" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f177e27eec9 code=0x0 [ 44.845084][ T3700] loop3: detected capacity change from 0 to 128 [ 44.860563][ T3701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.936672][ T3702] bio_check_eod: 82 callbacks suppressed [ 44.936688][ T3702] syz.3.64: attempt to access beyond end of device [ 44.936688][ T3702] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 44.962107][ T3702] syz.3.64: attempt to access beyond end of device [ 44.962107][ T3702] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 44.975631][ T3702] syz.3.64: attempt to access beyond end of device [ 44.975631][ T3702] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 45.018472][ T3702] syz.3.64: attempt to access beyond end of device [ 45.018472][ T3702] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 45.085737][ T3702] syz.3.64: attempt to access beyond end of device [ 45.085737][ T3702] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 45.115065][ T3702] syz.3.64: attempt to access beyond end of device [ 45.115065][ T3702] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 45.116940][ T3688] Set syz1 is full, maxelem 65536 reached [ 45.144575][ T3702] syz.3.64: attempt to access beyond end of device [ 45.144575][ T3702] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 45.158008][ T3702] syz.3.64: attempt to access beyond end of device [ 45.158008][ T3702] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 45.171425][ T3702] syz.3.64: attempt to access beyond end of device [ 45.171425][ T3702] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 45.184912][ T3702] syz.3.64: attempt to access beyond end of device [ 45.184912][ T3702] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 45.300893][ T3707] vlan2: entered promiscuous mode [ 45.306052][ T3707] vlan2: entered allmulticast mode [ 45.311254][ T3707] hsr_slave_1: entered allmulticast mode [ 45.363138][ T3707] __nla_validate_parse: 1 callbacks suppressed [ 45.363157][ T3707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 45.596718][ T3711] loop4: detected capacity change from 0 to 512 [ 45.645493][ T3711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.68: bg 0: block 5: invalid block bitmap [ 45.689470][ T3711] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.698693][ T3711] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.68: invalid indirect mapped block 3 (level 2) [ 45.714657][ T3711] EXT4-fs (loop4): 2 truncates cleaned up [ 45.721857][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.792123][ T3711] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.895590][ T3711] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.991450][ T3711] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.063771][ T3711] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.078291][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 46.088435][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 46.099641][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 46.108979][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 46.186607][ T3729] team0: Device ipvlan2 failed to register rx_handler [ 46.251538][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 46.822128][ T3789] loop2: detected capacity change from 0 to 1024 [ 46.841085][ T3789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.998715][ T3807] SELinux: failed to load policy [ 47.021581][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.060385][ T3816] netlink: 'syz.2.79': attribute type 13 has an invalid length. [ 47.101421][ T3816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.124733][ T3822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 47.133621][ T3822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 48.130415][ T3849] loop0: detected capacity change from 0 to 128 [ 48.161644][ T3849] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.340642][ T3849] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.394843][ T1653] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.414136][ T1653] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.423093][ T1653] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.432378][ T1653] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.591069][ T3868] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 48.599774][ T3868] FAT-fs (loop0): Filesystem has been set read-only [ 48.740845][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.881320][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 48.881355][ T29] audit: type=1400 audit(1759020855.526:481): avc: denied { setopt } for pid=3878 comm="syz.2.88" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.908179][ T29] audit: type=1400 audit(1759020855.526:482): avc: denied { bind } for pid=3878 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.928172][ T29] audit: type=1400 audit(1759020855.526:483): avc: denied { write } for pid=3878 comm="syz.2.88" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.985020][ T29] audit: type=1400 audit(1759020855.576:484): avc: denied { create } for pid=3878 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.004964][ T29] audit: type=1326 audit(1759020855.576:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 49.028355][ T3891] loop2: detected capacity change from 0 to 512 [ 49.029365][ T29] audit: type=1326 audit(1759020855.576:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 49.058358][ T29] audit: type=1326 audit(1759020855.576:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 49.081506][ T29] audit: type=1326 audit(1759020855.576:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 49.104905][ T29] audit: type=1326 audit(1759020855.576:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 49.209454][ T3891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.242348][ T3891] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.365808][ T29] audit: type=1400 audit(1759020855.896:490): avc: denied { create } for pid=3889 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.446367][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.321823][ T3937] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.442112][ T3937] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.527042][ T3946] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.541819][ T3946] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.551212][ T3937] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.614739][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 50.623743][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 50.672791][ T3937] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.808893][ T3963] loop0: detected capacity change from 0 to 512 [ 50.819491][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.845400][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.366886][ T3963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.385194][ T3963] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.645558][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.732778][ T3992] syz_tun: entered allmulticast mode [ 51.984869][ T3998] tipc: Enabled bearer , priority 0 [ 51.995482][ T3998] syzkaller0: entered promiscuous mode [ 52.001139][ T3998] syzkaller0: entered allmulticast mode [ 52.020167][ T3998] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 52.033254][ T3998] tipc: Resetting bearer [ 52.045567][ T3997] tipc: Resetting bearer [ 52.054857][ T3997] tipc: Disabling bearer [ 52.499567][ T4005] tipc: Enabled bearer , priority 0 [ 52.506936][ T4005] syzkaller0: entered promiscuous mode [ 52.512487][ T4005] syzkaller0: entered allmulticast mode [ 52.522465][ T4005] tipc: Resetting bearer [ 52.529667][ T4004] tipc: Resetting bearer [ 52.537443][ T4004] tipc: Disabling bearer [ 52.588838][ T4007] netlink: 340 bytes leftover after parsing attributes in process `syz.0.116'. [ 52.597994][ T4007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.116'. [ 52.689971][ T4013] tipc: Started in network mode [ 52.694934][ T4013] tipc: Node identity 4ae3e429528d, cluster identity 4711 [ 52.702232][ T4013] tipc: Enabled bearer , priority 0 [ 52.710124][ T4013] syzkaller0: entered promiscuous mode [ 52.715700][ T4013] syzkaller0: entered allmulticast mode [ 52.729756][ T4013] tipc: Resetting bearer [ 52.737135][ T4012] tipc: Resetting bearer [ 52.745689][ T4012] tipc: Disabling bearer [ 52.821733][ T4016] tipc: Enabled bearer , priority 0 [ 52.829585][ T4016] syzkaller0: entered promiscuous mode [ 52.835127][ T4016] syzkaller0: entered allmulticast mode [ 52.849269][ T4016] tipc: Resetting bearer [ 52.861914][ T4015] tipc: Resetting bearer [ 52.869906][ T4015] tipc: Disabling bearer [ 53.372515][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.381079][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.690628][ T1653] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.731551][ T1653] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.789954][ T1653] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.798193][ T1653] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.835702][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 53.851310][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 53.884159][ T4029] loop1: detected capacity change from 0 to 512 [ 53.891547][ T4029] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 53.904482][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 53.913898][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 53.913914][ T29] audit: type=1326 audit(1759020860.556:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 53.943518][ T29] audit: type=1326 audit(1759020860.556:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.032520][ T29] audit: type=1326 audit(1759020860.566:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.056165][ T29] audit: type=1326 audit(1759020860.566:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.065949][ T4038] netlink: 340 bytes leftover after parsing attributes in process `syz.3.128'. [ 54.079578][ T29] audit: type=1326 audit(1759020860.566:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.079663][ T29] audit: type=1326 audit(1759020860.566:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.079689][ T29] audit: type=1326 audit(1759020860.566:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.079717][ T29] audit: type=1326 audit(1759020860.566:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.115108][ T4038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.128'. [ 54.135425][ T29] audit: type=1326 audit(1759020860.656:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.214162][ T29] audit: type=1326 audit(1759020860.656:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2befeec9 code=0x7ffc0000 [ 54.216412][ T4041] 9pnet_fd: Insufficient options for proto=fd [ 54.283393][ T4044] tipc: Enabled bearer , priority 0 [ 54.290718][ T4044] syzkaller0: entered promiscuous mode [ 54.296238][ T4044] syzkaller0: entered allmulticast mode [ 54.310043][ T4046] netlink: 'syz.1.130': attribute type 2 has an invalid length. [ 54.322185][ T4044] tipc: Resetting bearer [ 54.329964][ T4043] tipc: Resetting bearer [ 54.337821][ T4043] tipc: Disabling bearer [ 54.431995][ T10] IPVS: starting estimator thread 0... [ 54.440653][ T4053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4053 comm=syz.3.133 [ 54.518872][ T4054] IPVS: using max 2304 ests per chain, 115200 per kthread [ 55.305842][ T4064] syz_tun: entered allmulticast mode [ 55.368669][ T4066] loop3: detected capacity change from 0 to 512 [ 55.384124][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.396898][ T4066] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.855298][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.880616][ T4076] vlan2: entered promiscuous mode [ 55.885867][ T4076] vlan2: entered allmulticast mode [ 55.891152][ T4076] hsr_slave_1: entered allmulticast mode [ 55.898955][ T4076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 56.063034][ T4079] loop3: detected capacity change from 0 to 512 [ 56.107910][ T4079] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.140: EA inode hash validation failed [ 56.124611][ T4079] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.166522][ T4082] netlink: 340 bytes leftover after parsing attributes in process `syz.2.141'. [ 56.175665][ T4082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'. [ 56.224888][ T4079] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.140: corrupted inode contents [ 56.257751][ T4089] netlink: 'syz.2.144': attribute type 27 has an invalid length. [ 56.266793][ T4090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 56.276776][ T4079] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.140: mark_inode_dirty error [ 56.282831][ T4090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.304075][ T4079] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.140: corrupted inode contents [ 56.328085][ T4079] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.140: mark_inode_dirty error [ 56.346161][ T4079] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.140: mark inode dirty (error -117) [ 56.373264][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.373714][ T4079] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 56.380547][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.402250][ T4079] EXT4-fs (loop3): 1 orphan inode deleted [ 56.415060][ T4079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.439360][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.449737][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.525496][ T4093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.534117][ T4093] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.547778][ T4093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.566825][ T4101] @0Ù: renamed from bond_slave_1 [ 56.573783][ T1653] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.615562][ T1653] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.627211][ T1653] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.636205][ T1653] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.657563][ T4104] loop2: detected capacity change from 0 to 1024 [ 56.671489][ T4104] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.688125][ T4104] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.148: Invalid block bitmap block 0 in block_group 0 [ 56.707209][ T4107] 9pnet_fd: Insufficient options for proto=fd [ 56.709744][ T4104] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.148: Failed to acquire dquot type 0 [ 56.724816][ T4104] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.148: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.747039][ T4104] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.148: Invalid inode bitmap blk 0 in block_group 0 [ 56.752325][ T1653] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 56.762690][ T4104] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 56.780654][ T4104] EXT4-fs (loop2): 1 orphan inode deleted [ 56.787750][ T4104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.802692][ T4104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.942681][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.996264][ T4104] infiniband syz2: set active [ 57.001059][ T4104] infiniband syz2: added bond0 [ 57.014335][ T4113] netlink: 'syz.3.151': attribute type 15 has an invalid length. [ 57.033220][ T4104] RDS/IB: syz2: added [ 57.052691][ T4104] smc: adding ib device syz2 with port count 1 [ 57.079722][ T4104] smc: ib device syz2 port 1 has pnetid [ 57.145087][ T4117] syz_tun: entered allmulticast mode [ 57.453414][ T4104] syz.2.148 (4104) used greatest stack depth: 9312 bytes left [ 57.569280][ T4113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.151'. [ 57.579428][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 57.644304][ T4126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.155'. [ 58.057022][ T4136] loop1: detected capacity change from 0 to 512 [ 58.066485][ T4136] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 58.617831][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.634614][ T4144] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.644824][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.658223][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.666046][ T4144] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.161'. [ 58.675703][ T4144] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.161'. [ 59.098869][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 59.098892][ T29] audit: type=1400 audit(1759020865.666:1972): avc: denied { write } for pid=4146 comm="syz.1.162" name="snmp6" dev="proc" ino=4026532777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.127899][ T29] audit: type=1400 audit(1759020865.726:1973): avc: denied { map_create } for pid=4151 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.146981][ T29] audit: type=1400 audit(1759020865.726:1974): avc: denied { bpf } for pid=4151 comm="syz.3.163" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.167552][ T29] audit: type=1400 audit(1759020865.726:1975): avc: denied { map_read map_write } for pid=4151 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.204299][ T29] audit: type=1400 audit(1759020865.826:1976): avc: denied { allowed } for pid=4151 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.223673][ T29] audit: type=1400 audit(1759020865.836:1977): avc: denied { create } for pid=4151 comm="syz.3.163" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.244850][ T29] audit: type=1400 audit(1759020865.836:1978): avc: denied { map } for pid=4151 comm="syz.3.163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.268897][ T29] audit: type=1400 audit(1759020865.836:1979): avc: denied { read write } for pid=4151 comm="syz.3.163" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.293627][ T29] audit: type=1400 audit(1759020865.836:1980): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.317886][ T29] audit: type=1400 audit(1759020865.836:1981): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.514786][ T4165] netlink: 'syz.0.167': attribute type 13 has an invalid length. [ 59.562921][ T4165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.598106][ T4168] loop1: detected capacity change from 0 to 512 [ 59.615061][ T4168] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.835905][ T4172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.192198][ T4172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.211469][ T4185] loop3: detected capacity change from 0 to 512 [ 60.245218][ T4185] EXT4-fs: Ignoring removed nobh option [ 60.307029][ T4185] EXT4-fs (loop3): failed to initialize system zone (-117) [ 60.351292][ T4185] EXT4-fs (loop3): mount failed [ 60.364275][ T4172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.465293][ T4172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.536068][ T4185] @: renamed from vlan0 (while UP) [ 60.590803][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.607988][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.643950][ T4189] infiniband !yz!: set down [ 60.648551][ T4189] infiniband !yz!: added team_slave_0 [ 60.655334][ T4200] tipc: Enabled bearer , priority 0 [ 60.662334][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.669610][ T4189] RDS/IB: !yz!: added [ 60.676758][ T4189] smc: adding ib device !yz! with port count 1 [ 60.683127][ T4189] smc: ib device !yz! port 1 has pnetid [ 60.701190][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.714776][ T4200] syzkaller0: entered promiscuous mode [ 60.720397][ T4200] syzkaller0: entered allmulticast mode [ 60.774786][ T4200] tipc: Resetting bearer [ 60.814307][ T4199] tipc: Resetting bearer [ 60.832834][ T4199] tipc: Disabling bearer [ 60.920212][ T4224] tipc: Enabled bearer , priority 0 [ 60.936081][ T4228] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 60.951318][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 60.971597][ T4228] team0 (unregistering): Port device team_slave_1 removed [ 60.995872][ T4224] syzkaller0: entered promiscuous mode [ 61.001522][ T4224] syzkaller0: entered allmulticast mode [ 61.017767][ T4224] tipc: Resetting bearer [ 61.038242][ T4223] tipc: Resetting bearer [ 61.067652][ T4223] tipc: Disabling bearer [ 61.356660][ T4263] loop3: detected capacity change from 0 to 512 [ 61.365707][ T4263] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.397692][ T4267] !yz!: rxe_newlink: already configured on team_slave_0 [ 61.471059][ T4269] loop1: detected capacity change from 0 to 2048 [ 61.540235][ T4269] Alternate GPT is invalid, using primary GPT. [ 61.546687][ T4269] loop1: p2 p3 p7 [ 61.754225][ T4291] loop1: detected capacity change from 0 to 1024 [ 61.793531][ T4291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.857153][ T4291] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.187: Allocating blocks 385-513 which overlap fs metadata [ 61.918256][ T4291] EXT4-fs (loop1): pa ffff88810719e5b0: logic 16, phys. 129, len 24 [ 61.926421][ T4291] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 61.991813][ T4291] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 62.004435][ T4291] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.004435][ T4291] [ 62.014364][ T4291] EXT4-fs (loop1): Total free blocks count 0 [ 62.020414][ T4291] EXT4-fs (loop1): Free/Dirty block details [ 62.026330][ T4291] EXT4-fs (loop1): free_blocks=128 [ 62.031680][ T4291] EXT4-fs (loop1): dirty_blocks=0 [ 62.036735][ T4291] EXT4-fs (loop1): Block reservation details [ 62.042772][ T4291] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 62.165113][ T4277] loop3: detected capacity change from 0 to 512 [ 62.174218][ T4277] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.187405][ T4277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.212572][ T4291] syz.1.187 (4291) used greatest stack depth: 9128 bytes left [ 62.217842][ T4277] EXT4-fs (loop3): 1 truncate cleaned up [ 62.226655][ T4277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.564417][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.807856][ T4366] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.849739][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 64.849754][ T29] audit: type=1400 audit(1759020871.496:2098): avc: denied { setopt } for pid=4372 comm="syz.4.196" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.903163][ T4374] __nla_validate_parse: 2 callbacks suppressed [ 64.903193][ T4374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 64.919011][ T29] audit: type=1400 audit(1759020871.546:2099): avc: denied { create } for pid=4367 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.900349][ T4384] loop3: detected capacity change from 0 to 512 [ 65.907470][ T4384] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.798125][ T29] audit: type=1400 audit(1759020873.436:2100): avc: denied { cpu } for pid=4387 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.856538][ T4391] netlink: '+}[@': attribute type 13 has an invalid length. [ 66.909627][ T4384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.925735][ T4384] EXT4-fs (loop3): 1 truncate cleaned up [ 66.940900][ T4384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.993453][ T29] audit: type=1400 audit(1759020873.636:2101): avc: denied { validate_trans } for pid=4395 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.023397][ T4391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.078451][ T29] audit: type=1400 audit(1759020873.706:2102): avc: denied { read open } for pid=4383 comm="syz.3.197" path="/50/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.101212][ T29] audit: type=1400 audit(1759020873.706:2103): avc: denied { write } for pid=4383 comm="syz.3.197" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.130290][ T4399] loop0: detected capacity change from 0 to 164 [ 67.173005][ T4399] ISOFS: unable to read i-node block [ 67.178367][ T4399] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 67.221413][ T29] audit: type=1400 audit(1759020873.856:2104): avc: denied { mount } for pid=4398 comm="syz.0.202" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.244031][ T29] audit: type=1400 audit(1759020873.866:2105): avc: denied { create } for pid=4402 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.278057][ T29] audit: type=1400 audit(1759020873.886:2106): avc: denied { bind } for pid=4402 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.297349][ T29] audit: type=1400 audit(1759020873.906:2107): avc: denied { block_suspend } for pid=4398 comm="syz.0.202" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.471629][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.545828][ T4419] sit0: entered promiscuous mode [ 67.594561][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 67.622050][ T4417] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 67.661958][ T4419] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 67.669803][ T4419] netlink: 1 bytes leftover after parsing attributes in process `syz.0.209'. [ 68.040395][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 68.187713][ T4435] loop3: detected capacity change from 0 to 1024 [ 68.267869][ T4435] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.277751][ T4435] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 68.289686][ T4440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.215'. [ 68.579311][ T4435] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.637105][ T4435] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #5: comm syz.3.212: unexpected bad inode w/o EXT4_IGET_BAD [ 68.762696][ T4435] EXT4-fs (loop3): no journal found [ 68.768037][ T4435] EXT4-fs (loop3): can't get journal size [ 68.809011][ T4435] EXT4-fs (loop3): too many log groups per flexible block group [ 68.816862][ T4435] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 68.834027][ T4435] EXT4-fs (loop3): mount failed [ 69.073706][ T4453] loop1: detected capacity change from 0 to 512 [ 69.101894][ T4453] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.129593][ T4453] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.144696][ T4453] EXT4-fs (loop1): 1 truncate cleaned up [ 69.151320][ T4453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.326871][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 69.351603][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 69.543416][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 69.559552][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 69.685045][ T4477] netlink: 'syz.4.226': attribute type 13 has an invalid length. [ 69.701063][ T4477] gretap0: refused to change device tx_queue_len [ 69.708015][ T4477] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.968852][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 69.968871][ T29] audit: type=1400 audit(1759020876.556:2188): avc: denied { ioctl } for pid=4480 comm="syz.4.227" path="socket:[7905]" dev="sockfs" ino=7905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.000016][ T29] audit: type=1400 audit(1759020876.576:2189): avc: denied { bind } for pid=4480 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.244879][ T4486] tipc: Enabled bearer , priority 0 [ 70.265283][ T4486] syzkaller0: entered promiscuous mode [ 70.270903][ T4486] syzkaller0: entered allmulticast mode [ 70.290133][ T4486] tipc: Resetting bearer [ 70.290847][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.307186][ T4485] tipc: Resetting bearer [ 70.314814][ T4485] tipc: Disabling bearer [ 70.438253][ T4493] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.545520][ T29] audit: type=1400 audit(1759020877.156:2190): avc: denied { mount } for pid=4500 comm="syz.0.235" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.567802][ T29] audit: type=1400 audit(1759020877.156:2191): avc: denied { write } for pid=4500 comm="syz.0.235" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.588708][ T29] audit: type=1400 audit(1759020877.156:2192): avc: denied { open } for pid=4500 comm="syz.0.235" path="/46/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.610758][ T29] audit: type=1400 audit(1759020877.186:2193): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.730933][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 70.747531][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 70.787749][ T4499] mmap: syz.2.234 (4499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.112290][ T4512] loop1: detected capacity change from 0 to 512 [ 71.138872][ T29] audit: type=1400 audit(1759020877.756:2194): avc: denied { read } for pid=4509 comm="syz.1.237" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.165909][ T29] audit: type=1400 audit(1759020877.756:2195): avc: denied { open } for pid=4509 comm="syz.1.237" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.209926][ T4513] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.262769][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.283071][ T4512] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.297404][ T4513] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.308047][ T29] audit: type=1326 audit(1759020877.956:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fa44eec9 code=0x7ffc0000 [ 71.349864][ T29] audit: type=1326 audit(1759020877.986:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fa44eec9 code=0x7ffc0000 [ 71.420430][ T4513] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.451230][ T4523] loop2: detected capacity change from 0 to 512 [ 71.479390][ T4523] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.489793][ T4513] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.499923][ T4523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.521537][ T4523] EXT4-fs (loop2): 1 truncate cleaned up [ 71.527816][ T4523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.545346][ T4526] netlink: 256 bytes leftover after parsing attributes in process `syz.3.239'. [ 71.574563][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.594163][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610966][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619883][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.637421][ T4532] tipc: New replicast peer: 255.255.255.255 [ 71.643552][ T4532] tipc: Enabled bearer , priority 10 [ 71.649664][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.740124][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 71.828444][ T4541] tipc: Enabled bearer , priority 0 [ 71.835661][ T4541] syzkaller0: entered promiscuous mode [ 71.841311][ T4541] syzkaller0: entered allmulticast mode [ 71.855304][ T4541] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 71.865339][ T4541] tipc: Resetting bearer [ 71.872453][ T4540] tipc: Resetting bearer [ 71.879823][ T4540] tipc: Disabling bearer [ 71.912640][ T4543] !yz!: rxe_newlink: already configured on team_slave_0 [ 72.027388][ T4530] ================================================================== [ 72.035541][ T4530] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 72.043441][ T4530] [ 72.045821][ T4530] write to 0xffffea0004a3d798 of 8 bytes by task 4523 on cpu 0: [ 72.053474][ T4530] __filemap_remove_folio+0x1a5/0x2a0 [ 72.058898][ T4530] folio_unmap_invalidate+0x1dd/0x360 [ 72.064295][ T4530] invalidate_inode_pages2_range+0x27c/0x3d0 [ 72.070313][ T4530] filemap_invalidate_pages+0x16d/0x1a0 [ 72.075891][ T4530] kiocb_invalidate_pages+0x6e/0x80 [ 72.081139][ T4530] __iomap_dio_rw+0x5d4/0x1250 [ 72.085922][ T4530] iomap_dio_rw+0x40/0x90 [ 72.090285][ T4530] ext4_file_write_iter+0xad9/0xf00 [ 72.095518][ T4530] iter_file_splice_write+0x666/0xa60 [ 72.100914][ T4530] direct_splice_actor+0x156/0x2a0 [ 72.106053][ T4530] splice_direct_to_actor+0x312/0x680 [ 72.111450][ T4530] do_splice_direct+0xda/0x150 [ 72.116264][ T4530] do_sendfile+0x380/0x650 [ 72.120723][ T4530] __x64_sys_sendfile64+0x105/0x150 [ 72.126049][ T4530] x64_sys_call+0x2bb0/0x2ff0 [ 72.130755][ T4530] do_syscall_64+0xd2/0x200 [ 72.135348][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.141351][ T4530] [ 72.143695][ T4530] read to 0xffffea0004a3d798 of 8 bytes by task 4530 on cpu 1: [ 72.151336][ T4530] folio_mapping+0xa1/0x120 [ 72.155892][ T4530] folio_wait_writeback+0x43/0x140 [ 72.161235][ T4530] file_write_and_wait_range+0x20b/0x2c0 [ 72.166941][ T4530] generic_buffers_fsync_noflush+0x45/0x120 [ 72.172869][ T4530] ext4_sync_file+0x1ab/0x690 [ 72.177565][ T4530] vfs_fsync_range+0x10a/0x130 [ 72.182356][ T4530] ext4_buffered_write_iter+0x34f/0x3c0 [ 72.187943][ T4530] ext4_file_write_iter+0xdbf/0xf00 [ 72.193172][ T4530] iter_file_splice_write+0x666/0xa60 [ 72.198572][ T4530] direct_splice_actor+0x156/0x2a0 [ 72.203700][ T4530] splice_direct_to_actor+0x312/0x680 [ 72.209117][ T4530] do_splice_direct+0xda/0x150 [ 72.213910][ T4530] do_sendfile+0x380/0x650 [ 72.218356][ T4530] __x64_sys_sendfile64+0x105/0x150 [ 72.223596][ T4530] x64_sys_call+0x2bb0/0x2ff0 [ 72.228310][ T4530] do_syscall_64+0xd2/0x200 [ 72.232859][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.238779][ T4530] [ 72.241112][ T4530] value changed: 0xffff8881095ae998 -> 0x0000000000000000 [ 72.248232][ T4530] [ 72.250602][ T4530] Reported by Kernel Concurrency Sanitizer on: [ 72.256788][ T4530] CPU: 1 UID: 0 PID: 4530 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.266458][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.276552][ T4530] ================================================================== [ 72.459267][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.668887][ T3395] tipc: Node number set to 3158440940