last executing test programs: 4m25.54249427s ago: executing program 32 (id=86): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) epoll_create(0x10001) 4m15.198332371s ago: executing program 33 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') 3m49.22616385s ago: executing program 34 (id=1204): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0xfffffffd, 0xff7, 0x1, 'queue0\x00', 0x6}) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = semget(0x1, 0x3, 0x204) semget(0x3, 0x1, 0x654) semctl$IPC_RMID(r1, 0x0, 0x0) 3m47.24899164s ago: executing program 35 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000780), &(0x7f0000000880)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) 3m41.235938913s ago: executing program 36 (id=1463): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) 3m30.742463597s ago: executing program 9 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8dd01060300001123000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 3m30.535062701s ago: executing program 9 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 3m30.390601854s ago: executing program 9 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0001f400"}) 3m30.307501996s ago: executing program 37 (id=1787): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:user_cron_spool_t:s0\x00', 0x27) 3m30.303279545s ago: executing program 9 (id=1790): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3m30.271098086s ago: executing program 9 (id=1791): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3m30.07063882s ago: executing program 9 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 3m30.06292674s ago: executing program 38 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 2m46.598640076s ago: executing program 8 (id=3016): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4012011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_udp(0xa, 0x2, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 2m46.370597301s ago: executing program 8 (id=3021): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m46.336652331s ago: executing program 8 (id=3022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m46.287151553s ago: executing program 8 (id=3023): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m46.235659224s ago: executing program 8 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2m45.998531318s ago: executing program 8 (id=3032): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x1, 0x4, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2m45.998351468s ago: executing program 39 (id=3032): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x1, 0x4, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2m19.855630121s ago: executing program 0 (id=3684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x8) r1 = open(0x0, 0x167842, 0x19) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) dup(0xffffffffffffffff) pwritev2(r1, 0x0, 0x0, 0x1400, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b708009aef1c6a007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 2m19.806174212s ago: executing program 0 (id=3686): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf6, r4, 0x1, 0x0, 0x6, @random="45e0062a0317"}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x400c4) 2m19.768814282s ago: executing program 0 (id=3689): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m19.659853205s ago: executing program 0 (id=3692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xefffffff, 0x100005}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x25, &(0x7f0000000580)={0x1, 0x0, 0x9, 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x10}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 2m19.528553248s ago: executing program 0 (id=3696): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2m19.114417376s ago: executing program 0 (id=3701): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2m17.101735627s ago: executing program 7 (id=3725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) 2m17.101325117s ago: executing program 7 (id=3727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r2) 2m17.040620228s ago: executing program 7 (id=3732): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000c00)=0xf6c) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x219}], 0x1}}], 0x1, 0x24000015) 2m16.94067076s ago: executing program 7 (id=3744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x22, 0x5, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)={0xf97cff8c, 0x8}, 0x10) 2m16.890449141s ago: executing program 7 (id=3735): bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2m15.94972496s ago: executing program 7 (id=3740): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvTOIkm6ZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBrdeygGpwAq0QeJgNP6RzW7sJOw6tmp/PtJo5s0bz/e9teY97zeJXwBj63pEHEbEVES8HRHz7fNJe4vXW1t23f17d9eO791dS6LReOsfSbM+OxenXpN5qn3PmYj4/ncifpScjVvbP9haLZdLu+1yoV7ZKdT2D25tVlY3Shul7WJxeWl58dXbrxT71tcXKr/55Nubb/zgg9996eM/HX7zJ1mz5tp1p/vRT62u507iZCYj4o2rCDYEE+3+TA27ITyWNCI+ExEvNp//+ZhovpuX0+WxBgA+BRqN+WjMny4DAKMubebAkjTfzgXMRZrm860c3nMxm5artfrNO9W97fVWrmwhcumdzXJpsZ0rXIhckpWX3suOH5SL8XD5dkQ8GxE/nb7WLOfXLp9nAAD666lH5v9/T7fmfwBgxM1cdMHKYNoBAAzOhfM/ADByzP8AMH7M/wAwfsz/ADB+zP8AMG4+6sz/E8NuCQAwEN97881saxy3v/96/Z39va3qO7fWS7WtfGVvLb9W3d3Jb1SrG+VSfq1aueh+5Wp1Z+nl2Hu3UC/V6oXa/sFKpbq3XV9pfq/3Sik3kF4BAOd59oUP/5JExOFr15pbnFrLwVwNoy0ddgOAoZHzh/HlW7hhfPk/PnDRWp49f0X4/ccI1njvMV4E9NuNz8v/w7jqkv+XEoAxIf8P48tkD+Or0Uh6rfmfnlwCAIwUOX5goD//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBEx19wWTpXTNJ+PeDoiFiKX3NkslxYj4pmI+PN0bjorLw21xQDAk0v/lrTX/7ox/9Lco7VTyX+uNfcR8eOfv/Wzd1fr9d2l7Pw/pzvn6++3zxeH0X4A4CKdebozj3fcv3d3rbMNsj2ffKu1uGgW97i9tWomYzLb/XEmchEx+6+kVW7LPq9M9CH+4VFEfK5b/5NmbmShvfLpo/Gz2E8PNH76UPy0WdfaZ/8Wnz1z5+meMS9a6xXGxYfZ+PN6t+cvjevN/UzXxY9nmiPUk+uMf8dnxr/O8z7THGu6jX/XLxvj5d9/t2fdUcQXJrvFT07iJz3iv3RSmjo3/kdf/PKLveoav4y4Ed3jn45VqFd2CrX9g1ubldWN0kZpu1hcXlpefPX2K8VCM0dd6GSqz/r7azef6dn/X0fM9og/c0H/v3ZurxsnA/Cv/vv2D7/SK/5RxDe+2v39f+6c+Nmc+PVz4z+wOvvbnst3Z/HXW/0/+n/f/5uXjP/xXw/WL3kpADAAtf2DrdVyubTb14NcdKma7k+I5Ira7GDED7LP4096n+fbKbOu1/zhFx88n1UOvad9ORjywARcuQcP/bBbAgAAAAAAAAAAAAAA9HLlf06UDruHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjLL/BQAA//8SwcrQ") r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m4.077508612s ago: executing program 40 (id=3701): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2m0.902881747s ago: executing program 41 (id=3740): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m19.233345525s ago: executing program 1 (id=4666): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fadvise64(r0, 0xffff, 0x5, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 1m18.325659944s ago: executing program 1 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 1m18.304974984s ago: executing program 1 (id=4685): socket$kcm(0x10, 0x400000002, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 1m18.232643956s ago: executing program 1 (id=4687): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0011122) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m18.119072128s ago: executing program 1 (id=4691): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1m17.864217993s ago: executing program 1 (id=4698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1m17.863999074s ago: executing program 42 (id=4698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 3.608519676s ago: executing program 5 (id=5690): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1b) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.812100733s ago: executing program 4 (id=5699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 2.785594973s ago: executing program 4 (id=5689): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8c2, 0x4, 0x2, 0x7, 0x2, 0x63b, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x4, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) socketpair(0x2b, 0x2, 0x8, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x8, 0x0) 2.728674464s ago: executing program 5 (id=5691): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(0x0, 0x64842, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) lremovexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.373320351s ago: executing program 5 (id=5693): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) clock_settime(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_cancel(0x0, 0x0, 0x0) 2.349997972s ago: executing program 5 (id=5694): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 2.270764703s ago: executing program 5 (id=5695): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x3, 0x3, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xffffffff7fffffff, 0x1, 0xffffffffffffffff, 0x0, 0x7b37}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0xd9, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.873830872s ago: executing program 4 (id=5708): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) read(r0, 0x0, 0x0) 1.778318673s ago: executing program 4 (id=5710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 703.070155ms ago: executing program 4 (id=5717): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) 702.204295ms ago: executing program 5 (id=5718): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7dffeffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 636.480317ms ago: executing program 4 (id=5720): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1b) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 555.928238ms ago: executing program 3 (id=5724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 523.320719ms ago: executing program 2 (id=5725): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r4, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 411.747901ms ago: executing program 2 (id=5726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 411.179701ms ago: executing program 6 (id=5727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f00000002c0)={0x0, 0xfb, 0x1f, 0x0, 0x6, "aeaff0036df1636a05e61d629b097b66", "a6710f5e5fc13c95a280"}, 0x1f, 0x2) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890c, &(0x7f0000000100)) 409.400751ms ago: executing program 3 (id=5728): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r5 = dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 373.751742ms ago: executing program 2 (id=5729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmmsg(r4, 0x0, 0x0, 0x8040) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r2, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) semop(0x0, 0x0, 0x0) 372.174292ms ago: executing program 6 (id=5730): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0x1000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 290.455504ms ago: executing program 3 (id=5731): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() tkill(r0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 289.897044ms ago: executing program 6 (id=5732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 289.518404ms ago: executing program 2 (id=5733): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x9, 0x4) socket$key(0xf, 0x3, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x14, &(0x7f0000002500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 255.285965ms ago: executing program 2 (id=5734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xc, 0x4}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 229.297785ms ago: executing program 3 (id=5735): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) io_cancel(0x0, 0x0, 0x0) 158.279696ms ago: executing program 3 (id=5736): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) clock_settime(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) io_cancel(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 110.490708ms ago: executing program 6 (id=5737): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) eventfd2(0x9, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000bc0)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 109.409747ms ago: executing program 6 (id=5747): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) io_cancel(0x0, 0x0, 0x0) 107.545307ms ago: executing program 3 (id=5748): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x7, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) eventfd2(0x7, 0x801) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, &(0x7f0000002700)=0x23, 0x1c) 2.50249ms ago: executing program 2 (id=5738): signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000500)={0x4e00, 0x0, 0x730, 0xbdff, 0x16, "fecfff081300001b"}) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r1, 0x8182) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) write$P9_RWALK(r3, 0x0, 0x23) 0s ago: executing program 6 (id=5750): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16=r0], 0xfe, 0x1b1, &(0x7f0000001900)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000b74c3cde00180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) kernel console output (not intermixed with test programs): 79][T15123] dummy0: left promiscuous mode [ 211.828138][T15125] binfmt_misc: register: failed to install interpreter file ./file0 [ 211.850856][T15123] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.914615][T15120] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 211.967378][T15120] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.4531: corrupted inode contents [ 212.022873][T15120] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #11: comm syz.1.4531: mark_inode_dirty error [ 212.084701][T15120] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4531: invalid indirect mapped block 1 (level 1) [ 212.142111][T15120] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.4531: corrupted inode contents [ 212.194954][T15120] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 212.229801][T15120] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.4531: corrupted inode contents [ 212.280421][T15120] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.4531: mark_inode_dirty error [ 212.327568][T15120] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 212.369076][T15120] EXT4-fs (loop1): 1 truncate cleaned up [ 212.389206][T15120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.543886][ T3399] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz0] on syz0 [ 212.577924][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.840744][T15155] loop1: detected capacity change from 0 to 1024 [ 212.877728][T15155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.003927][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.137317][T15165] hub 2-0:1.0: USB hub found [ 213.137623][T15168] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.142079][T15165] hub 2-0:1.0: 8 ports detected [ 213.169648][T15161] loop3: detected capacity change from 0 to 8192 [ 213.189216][T15161] 9pnet_fd: Insufficient options for proto=fd [ 213.206303][T15168] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.267647][T15173] syzkaller0: entered promiscuous mode [ 213.273268][T15173] syzkaller0: entered allmulticast mode [ 213.292914][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4552'. [ 213.309242][T15168] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.365189][T15168] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.396999][T15179] netlink: 'syz.5.4553': attribute type 4 has an invalid length. [ 213.406079][T15179] netlink: 'syz.5.4553': attribute type 4 has an invalid length. [ 213.416056][ T10] lo speed is unknown, defaulting to 1000 [ 213.421921][ T10] syz0: Port: 1 Link ACTIVE [ 213.453370][ T51] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.475292][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.486052][ T51] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.502487][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.507550][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 213.507565][ T29] audit: type=1326 audit(1756853203.137:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.544085][ T29] audit: type=1326 audit(1756853203.147:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.567830][ T29] audit: type=1326 audit(1756853203.147:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.591725][ T29] audit: type=1326 audit(1756853203.147:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.615855][ T29] audit: type=1326 audit(1756853203.147:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.639594][ T29] audit: type=1326 audit(1756853203.147:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.641127][T15187] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 213.663510][ T29] audit: type=1326 audit(1756853203.147:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.669934][T15187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.693511][ T29] audit: type=1326 audit(1756853203.147:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.701272][T15187] vhci_hcd vhci_hcd.0: Device attached [ 213.724800][ T29] audit: type=1326 audit(1756853203.147:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.754107][ T29] audit: type=1326 audit(1756853203.147:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.2.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 213.758909][T15188] vhci_hcd: connection closed [ 213.782815][ T292] vhci_hcd: stop threads [ 213.792085][ T292] vhci_hcd: release socket [ 213.796576][ T292] vhci_hcd: disconnect device [ 213.805001][T15185] tipc: Enabled bearer , priority 0 [ 213.817067][T15184] tipc: Resetting bearer [ 213.839981][T15184] tipc: Disabling bearer [ 214.003632][T15195] syzkaller0: entered promiscuous mode [ 214.009164][T15195] syzkaller0: entered allmulticast mode [ 214.189784][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 214.199381][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4566'. [ 214.258682][T15213] loop1: detected capacity change from 0 to 128 [ 214.324713][T15216] syz.1.4568: attempt to access beyond end of device [ 214.324713][T15216] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 214.339605][T15216] syz.1.4568: attempt to access beyond end of device [ 214.339605][T15216] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 214.354770][T15216] syz.1.4568: attempt to access beyond end of device [ 214.354770][T15216] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 214.368744][T15216] syz.1.4568: attempt to access beyond end of device [ 214.368744][T15216] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 214.418542][T15216] syz.1.4568: attempt to access beyond end of device [ 214.418542][T15216] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 214.452058][T15216] syz.1.4568: attempt to access beyond end of device [ 214.452058][T15216] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 214.484389][T15216] syz.1.4568: attempt to access beyond end of device [ 214.484389][T15216] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 214.508216][T15225] lo speed is unknown, defaulting to 1000 [ 214.522186][T15216] syz.1.4568: attempt to access beyond end of device [ 214.522186][T15216] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 214.527115][T15225] lo speed is unknown, defaulting to 1000 [ 214.566740][T15216] syz.1.4568: attempt to access beyond end of device [ 214.566740][T15216] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 214.603286][T15216] syz.1.4568: attempt to access beyond end of device [ 214.603286][T15216] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 215.116181][T15247] syzkaller0: entered promiscuous mode [ 215.121776][T15247] syzkaller0: entered allmulticast mode [ 215.285721][T15260] vhci_hcd: invalid port number 12 [ 215.350039][T15265] serio: Serial port ptm0 [ 215.606590][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4596'. [ 215.619408][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4596'. [ 216.226035][T15293] hub 6-0:1.0: USB hub found [ 216.230953][T15293] hub 6-0:1.0: 8 ports detected [ 216.333680][T15295] tmpfs: Bad value for 'size' [ 216.547991][T15314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4605'. [ 216.607452][T15316] loop9: detected capacity change from 0 to 7 [ 216.614358][T15316] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.622705][T15316] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.630793][T15316] loop9: unable to read partition table [ 216.637388][T15316] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 216.637388][T15316] ) failed (rc=-5) [ 216.692092][T15321] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 216.715402][T15321] veth7: entered promiscuous mode [ 216.722485][T15321] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 216.740138][T15321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4611'. [ 216.750046][T15321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.898428][T15329] block device autoloading is deprecated and will be removed. [ 217.437453][T15356] syzkaller1: entered promiscuous mode [ 217.443025][T15356] syzkaller1: entered allmulticast mode [ 217.594142][T15378] netlink: 'syz.3.4636': attribute type 1 has an invalid length. [ 217.618503][T15378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.635723][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4636'. [ 217.653707][T15380] loop5: detected capacity change from 0 to 8192 [ 217.663048][T15378] bond0 (unregistering): Released all slaves [ 217.697541][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4638'. [ 217.756563][T15387] loop1: detected capacity change from 0 to 1024 [ 217.776386][T15391] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4641'. [ 217.786985][T15387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.813664][T15387] EXT4-fs: test_dummy_encryption option not supported [ 217.947447][T15406] lo speed is unknown, defaulting to 1000 [ 217.956308][T15406] lo speed is unknown, defaulting to 1000 [ 218.552261][T15436] SELinux: Context @ is not valid (left unmapped). [ 218.559376][ T29] kauditd_printk_skb: 901 callbacks suppressed [ 218.559392][ T29] audit: type=1400 audit(1756853208.187:7458): avc: denied { relabelto } for pid=15434 comm="syz.6.4657" name="cgroup.controllers" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 218.590910][ T29] audit: type=1400 audit(1756853208.187:7459): avc: denied { associate } for pid=15434 comm="syz.6.4657" name="cgroup.controllers" dev="tmpfs" ino=845 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 218.823555][ T29] audit: type=1400 audit(1756853208.437:7460): avc: denied { unlink } for pid=13636 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 218.868691][T15445] loop5: detected capacity change from 0 to 2048 [ 218.878143][T15446] __nla_validate_parse: 1 callbacks suppressed [ 218.878161][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 218.908869][T15445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.974919][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 219.039458][ T29] audit: type=1326 audit(1756853208.667:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.098303][T11297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.112972][ T29] audit: type=1326 audit(1756853208.697:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.136792][ T29] audit: type=1326 audit(1756853208.697:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.160622][ T29] audit: type=1326 audit(1756853208.697:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.184546][ T29] audit: type=1326 audit(1756853208.697:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.208136][ T29] audit: type=1326 audit(1756853208.697:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.231839][ T29] audit: type=1326 audit(1756853208.697:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.6.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 219.313683][T15453] tmpfs: Bad value for 'size' [ 219.446243][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4665'. [ 219.476295][T15469] loop3: detected capacity change from 0 to 512 [ 219.509655][T15469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.553832][T15469] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.719062][ T8205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.801926][T15485] netfs: Couldn't get user pages (rc=-14) [ 219.864322][T15484] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4673'. [ 219.888841][T15484] hsr_slave_0: left promiscuous mode [ 219.912365][T15484] hsr_slave_1: left promiscuous mode [ 220.035848][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4679'. [ 220.386758][T15516] loop1: detected capacity change from 0 to 512 [ 220.402374][T15516] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.425824][T15516] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4687: Failed to acquire dquot type 0 [ 220.438803][T15516] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 220.465445][T13508] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /164/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 220.500492][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4689'. [ 220.516557][T15524] netlink: 'syz.6.4692': attribute type 10 has an invalid length. [ 220.524520][T15524] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4692'. [ 220.539667][T15524] team0: Port device geneve1 added [ 220.590164][T15528] lo speed is unknown, defaulting to 1000 [ 220.596960][T15528] lo speed is unknown, defaulting to 1000 [ 220.801199][T15545] netlink: 'syz.6.4701': attribute type 10 has an invalid length. [ 220.816433][T15548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.829888][T15545] veth0_vlan: entered allmulticast mode [ 220.841888][T15545] veth0_vlan: left promiscuous mode [ 220.849269][T15545] veth0_vlan: entered promiscuous mode [ 220.855941][T15545] team0: Device veth0_vlan failed to register rx_handler [ 220.868990][T15548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.909955][T15542] lo speed is unknown, defaulting to 1000 [ 220.916607][T15542] lo speed is unknown, defaulting to 1000 [ 220.936880][T15548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.974235][T15564] ------------[ cut here ]------------ [ 220.979796][T15564] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 220.995901][T15542] chnl_net:caif_netlink_parms(): no params data found [ 221.004050][T15564] WARNING: CPU: 1 PID: 15564 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 221.021173][T15564] Modules linked in: [ 221.025107][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz.5.4704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.030025][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4702'. [ 221.035073][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.054166][T15564] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 221.060498][T15564] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 12 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 221.080220][T15564] RSP: 0018:ffffc9000131b440 EFLAGS: 00010292 [ 221.086536][T15564] RAX: 867e6d482536e300 RBX: ffff888124c859a8 RCX: 0000000000080000 [ 221.094633][T15564] RDX: ffffc9000cc5c000 RSI: 0000000000010277 RDI: 0000000000010278 [ 221.102716][T15564] RBP: fffffffe00000030 R08: 0001ffff86a20b9f R09: 0000000000000000 [ 221.110814][T15564] R10: ffffffff88e66958 R11: ffffffff82202980 R12: ffff888124c85968 [ 221.118845][T15564] R13: ffff888122678000 R14: ffff888122678000 R15: ffff888124c859a0 [ 221.126874][T15564] FS: 00007f04ade8f6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 221.135920][T15564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.142519][T15564] CR2: 0000200000004000 CR3: 0000000152df2000 CR4: 00000000003506f0 [ 221.150761][T15564] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 221.158782][T15564] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 221.166883][T15564] Call Trace: [ 221.170182][T15564] [ 221.173192][T15564] reg_set_min_max+0x215/0x260 [ 221.178121][T15564] check_cond_jmp_op+0x1080/0x16e0 [ 221.183315][T15564] do_check+0x332a/0x7a10 [ 221.187776][T15564] do_check_common+0xc3a/0x12a0 [ 221.192652][T15564] bpf_check+0x942b/0xd9e0 [ 221.197179][T15564] ? __rcu_read_unlock+0x4f/0x70 [ 221.202209][T15564] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 221.208251][T15564] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 221.213923][T15564] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 221.220164][T15564] ? pcpu_block_update+0x232/0x3b0 [ 221.225678][T15564] ? pcpu_block_refresh_hint+0x157/0x170 [ 221.231482][T15564] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 221.237603][T15564] ? css_rstat_updated+0xb7/0x240 [ 221.242720][T15564] ? __rcu_read_unlock+0x4f/0x70 [ 221.247717][T15564] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 221.253545][T15564] ? should_fail_ex+0x30/0x280 [ 221.258330][T15564] ? selinux_bpf_prog_load+0x36/0xf0 [ 221.263730][T15564] ? should_failslab+0x8c/0xb0 [ 221.268512][T15564] ? __kmalloc_cache_noprof+0x189/0x320 [ 221.274213][T15564] ? selinux_bpf_prog_load+0xbf/0xf0 [ 221.279509][T15564] ? security_bpf_prog_load+0x2c/0xa0 [ 221.285003][T15564] bpf_prog_load+0xedd/0x1070 [ 221.289719][T15564] ? security_bpf+0x2b/0x90 [ 221.294280][T15564] __sys_bpf+0x462/0x7b0 [ 221.298558][T15564] __x64_sys_bpf+0x41/0x50 [ 221.303058][T15564] x64_sys_call+0x2aea/0x2ff0 [ 221.307789][T15564] do_syscall_64+0xd2/0x200 [ 221.312362][T15564] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 221.318617][T15564] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 221.324658][T15564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.330608][T15564] RIP: 0033:0x7f04af42ebe9 [ 221.335067][T15564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.354737][T15564] RSP: 002b:00007f04ade8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.363284][T15564] RAX: ffffffffffffffda RBX: 00007f04af665fa0 RCX: 00007f04af42ebe9 [ 221.371330][T15564] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 221.379443][T15564] RBP: 00007f04af4b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 221.387559][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.395620][T15564] R13: 00007f04af666038 R14: 00007f04af665fa0 R15: 00007fff995619d8 [ 221.403817][T15564] [ 221.406852][T15564] ---[ end trace 0000000000000000 ]--- [ 221.434595][T15574] netlink: 'syz.6.4705': attribute type 10 has an invalid length. [ 221.447539][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'. [ 221.460101][T15548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.475456][T15574] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 221.526572][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.533906][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.558993][T15542] bridge_slave_0: entered allmulticast mode [ 221.575710][T15542] bridge_slave_0: entered promiscuous mode [ 221.586474][ T292] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.601650][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.608846][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.623919][T15542] bridge_slave_1: entered allmulticast mode [ 221.633022][T15542] bridge_slave_1: entered promiscuous mode [ 221.656044][ T292] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.679835][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.689010][ T292] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.711237][T15597] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.721340][T15597] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.746673][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.756748][ T292] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.818286][T15597] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.828203][T15597] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.880806][T15603] syzkaller0: entered promiscuous mode [ 221.886475][T15603] syzkaller0: entered allmulticast mode [ 221.894781][T15542] team0: Port device team_slave_0 added [ 221.902165][T15542] team0: Port device team_slave_1 added [ 221.913116][T15597] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.923162][T15597] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.969214][T15542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.976239][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.002405][T15542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.018907][T15597] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.028841][T15597] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.039851][T15542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.047029][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.073300][T15542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.101033][T15542] hsr_slave_0: entered promiscuous mode [ 222.107259][T15542] hsr_slave_1: entered promiscuous mode [ 222.113372][T15542] debugfs: 'hsr0' already exists in 'hsr' [ 222.119099][T15542] Cannot create hsr debugfs directory [ 222.177787][ T298] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.186125][ T298] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.211666][ T298] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.220235][ T298] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.229045][ T298] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.237360][ T298] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.248684][ T1974] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.256929][ T1974] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.292642][T15627] pimreg: left allmulticast mode [ 222.561835][T15542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.574498][T15542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.585547][T15542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.594714][T15542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.651691][T15542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.665151][T15542] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.681054][ T1974] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.688181][ T1974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.724139][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.731243][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.822321][T15542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.977470][T15542] veth0_vlan: entered promiscuous mode [ 222.985551][T15542] veth1_vlan: entered promiscuous mode [ 223.001986][T15542] veth0_macvtap: entered promiscuous mode [ 223.010876][T15542] veth1_macvtap: entered promiscuous mode [ 223.023907][T15542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.036712][T15542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.048194][ T298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.061672][ T298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.083817][ T298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.106449][ T298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.159277][T15680] syzkaller0: entered promiscuous mode [ 223.165392][T15680] syzkaller0: entered allmulticast mode [ 223.220415][T15682] lo speed is unknown, defaulting to 1000 [ 223.227090][T15682] lo speed is unknown, defaulting to 1000 [ 223.314771][T15685] all: renamed from lo (while UP) [ 223.602733][T15699] tipc: Enabled bearer , priority 0 [ 223.611775][T15698] tipc: Resetting bearer [ 223.625608][T15698] tipc: Disabling bearer [ 223.673518][T15704] syzkaller1: entered promiscuous mode [ 223.679017][T15704] syzkaller1: entered allmulticast mode [ 224.113313][ T29] kauditd_printk_skb: 2093 callbacks suppressed [ 224.113331][ T29] audit: type=1400 audit(1756853213.717:9559): avc: denied { read } for pid=15714 comm="syz.6.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.150462][ T29] audit: type=1400 audit(1756853213.767:9560): avc: denied { setopt } for pid=15714 comm="syz.6.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.298189][ T29] audit: type=1326 audit(1756853213.927:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.3.4752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ce0bbebe9 code=0x0 [ 224.431002][ T29] audit: type=1400 audit(1756853214.057:9562): avc: denied { mounton } for pid=15726 comm="syz.4.4754" path="/proc/21/cgroup" dev="proc" ino=55404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 224.456955][T15727] lo speed is unknown, defaulting to 1000 [ 224.463497][T15727] lo speed is unknown, defaulting to 1000 [ 224.502133][ T29] audit: type=1400 audit(1756853214.127:9563): avc: denied { mounton } for pid=15726 comm="syz.4.4754" path="/proc/21/cgroup" dev="nsfs" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.502160][T15727] /dev/rnullb0: Can't lookup blockdev [ 224.547619][T15729] usb usb1: usbfs: process 15729 (syz.4.4755) did not claim interface 0 before use [ 224.637947][ T29] audit: type=1326 audit(1756853214.267:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.5.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 224.662048][ T29] audit: type=1326 audit(1756853214.267:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.5.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 224.685659][ T29] audit: type=1326 audit(1756853214.267:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.5.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 224.709393][ T29] audit: type=1326 audit(1756853214.267:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.5.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 224.733360][ T29] audit: type=1326 audit(1756853214.267:9568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.5.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 224.874764][T15742] wireguard0: entered promiscuous mode [ 224.880374][T15742] wireguard0: entered allmulticast mode [ 225.181924][T15761] tipc: Enabled bearer , priority 0 [ 225.182946][T15764] loop5: detected capacity change from 0 to 512 [ 225.196075][T15764] EXT4-fs: Ignoring removed oldalloc option [ 225.203501][T15760] tipc: Resetting bearer [ 225.210940][T15764] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4769: Parent and EA inode have the same ino 15 [ 225.251857][T15764] EXT4-fs (loop5): Remounting filesystem read-only [ 225.259305][T15764] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 225.259650][T15760] tipc: Disabling bearer [ 225.271073][T15764] EXT4-fs (loop5): 1 orphan inode deleted [ 225.280483][T15764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.440087][T15779] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 225.598607][T15787] bond1: (slave geneve2): Releasing active interface [ 225.611938][T15787] bond2: (slave veth7): Releasing backup interface [ 225.957763][T11297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.999833][T15792] loop5: detected capacity change from 0 to 8192 [ 226.246424][T15797] loop5: detected capacity change from 0 to 512 [ 226.256252][T15797] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 226.264685][T15797] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.272083][T15797] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4784: Failed to acquire dquot type 1 [ 226.287177][T15797] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4784: bg 0: block 40: padding at end of block bitmap is not set [ 226.302351][T15797] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 226.313602][T15797] EXT4-fs (loop5): 1 truncate cleaned up [ 226.319739][T15797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.488389][T15809] _: renamed from vlan1 (while UP) [ 226.637639][T15821] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4793'. [ 226.646978][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4793'. [ 226.656059][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4793'. [ 226.690029][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4794'. [ 226.720821][T15824] team0 (unregistering): Port device team_slave_0 removed [ 226.730510][T15824] team0 (unregistering): Port device team_slave_1 removed [ 226.860277][T15828] siw: device registration error -23 [ 227.175003][T11297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.230843][T15893] loop5: detected capacity change from 0 to 256 [ 227.249856][T15894] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.264455][T15893] FAT-fs (loop5): IO charset iso8859-9 not found [ 227.308554][T15894] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.360408][T15894] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.377242][T15898] lo speed is unknown, defaulting to 1000 [ 227.394599][T15898] lo speed is unknown, defaulting to 1000 [ 227.471832][T15894] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.536834][T15874] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.562107][T15874] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.585541][T15874] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.613411][T15874] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.684078][T15909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4804'. [ 227.710533][T15911] loop5: detected capacity change from 0 to 256 [ 227.727081][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4805'. [ 227.826036][T15919] syz_tun: entered allmulticast mode [ 227.852021][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 227.869858][T15919] syz_tun (unregistering): left allmulticast mode [ 228.051608][T15934] netlink: 'syz.4.4814': attribute type 30 has an invalid length. [ 228.178767][T15938] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4816'. [ 228.211420][T15941] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4817'. [ 228.244331][T15943] netlink: zone id is out of range [ 228.249713][T15943] netlink: zone id is out of range [ 228.256872][T15943] netlink: zone id is out of range [ 228.262069][T15943] netlink: zone id is out of range [ 228.267317][T15943] netlink: zone id is out of range [ 228.272527][T15943] netlink: zone id is out of range [ 228.279059][T15943] netlink: zone id is out of range [ 228.304276][T15943] netlink: zone id is out of range [ 228.309484][T15943] netlink: zone id is out of range [ 228.314921][T15943] netlink: zone id is out of range [ 228.315479][T15947] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 228.366471][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4822'. [ 228.375813][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.383276][T15951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.391139][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.398644][T15951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.761660][T15961] lo speed is unknown, defaulting to 1000 [ 228.770932][T15961] lo speed is unknown, defaulting to 1000 [ 228.780109][T15963] loop5: detected capacity change from 0 to 164 [ 228.805488][T15963] Unable to read rock-ridge attributes [ 229.701672][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 229.701691][ T29] audit: type=1400 audit(1756853219.327:9914): avc: denied { bind } for pid=15978 comm="syz.2.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.903289][ T29] audit: type=1400 audit(1756853219.427:9915): avc: denied { ioctl } for pid=15984 comm="syz.6.4834" path="pid:[4026532366]" dev="nsfs" ino=4026532366 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.940425][T15990] syzkaller0: entered promiscuous mode [ 229.946061][T15990] syzkaller0: entered allmulticast mode [ 230.108066][T16014] loop5: detected capacity change from 0 to 512 [ 230.203388][T16014] netlink: 'syz.5.4846': attribute type 15 has an invalid length. [ 230.272304][ T29] audit: type=1400 audit(1756853219.897:9916): avc: denied { create } for pid=16025 comm="syz.5.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.280973][T16026] netlink: 'syz.5.4854': attribute type 1 has an invalid length. [ 230.300058][ T29] audit: type=1400 audit(1756853219.907:9917): avc: denied { ioctl } for pid=16025 comm="syz.5.4854" path="socket:[56034]" dev="sockfs" ino=56034 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.304411][T16025] delete_channel: no stack [ 230.340373][T16028] veth0_vlan: entered allmulticast mode [ 230.402571][T16028] veth0_vlan: left promiscuous mode [ 230.451671][T16028] veth0_vlan: entered promiscuous mode [ 230.886814][ T29] audit: type=1400 audit(1756853220.517:9918): avc: denied { create } for pid=16046 comm="syz.5.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.949069][ T29] audit: type=1326 audit(1756853220.567:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 230.972792][ T29] audit: type=1326 audit(1756853220.567:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 230.996653][ T29] audit: type=1326 audit(1756853220.567:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 231.020235][ T29] audit: type=1326 audit(1756853220.567:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 231.044043][ T29] audit: type=1326 audit(1756853220.567:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 231.091082][T16057] loop5: detected capacity change from 0 to 1024 [ 231.134102][T16057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.166684][T16057] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm gtp: Allocating blocks 449-513 which overlap fs metadata [ 231.182547][T16056] EXT4-fs (loop5): pa ffff888106d9db60: logic 48, phys. 177, len 21 [ 231.190757][T16056] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 231.322849][T11297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.557723][T16078] SELinux: ebitmap: truncated map [ 231.572588][T16078] SELinux: failed to load policy [ 231.710096][T16087] __nla_validate_parse: 4 callbacks suppressed [ 231.710131][T16087] netlink: 404 bytes leftover after parsing attributes in process `syz.6.4871'. [ 232.649988][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4875'. [ 232.767727][T16097] SELinux: failed to load policy [ 232.774716][T16094] lo speed is unknown, defaulting to 1000 [ 232.796778][T16094] lo speed is unknown, defaulting to 1000 [ 232.865875][T16112] netlink: 'syz.5.4885': attribute type 10 has an invalid length. [ 232.873789][T16112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4885'. [ 232.884862][T16112] team0: Port device geneve1 added [ 232.893499][T15834] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.902301][T15834] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.931885][T16112] lo speed is unknown, defaulting to 1000 [ 232.940425][T15906] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.952226][T15906] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.962416][T16112] lo speed is unknown, defaulting to 1000 [ 233.171391][T16130] loop5: detected capacity change from 0 to 512 [ 233.191474][T16130] EXT4-fs: Ignoring removed nobh option [ 233.269083][T16130] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4888: iget: bad i_size value: 38620345925642 [ 233.289551][T16130] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4888: couldn't read orphan inode 15 (err -117) [ 233.339792][T16130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.375556][T16130] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4888'. [ 233.388809][T16130] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4888: bg 0: block 5: invalid block bitmap [ 233.409561][T16130] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 233.422324][T16130] EXT4-fs (loop5): This should not happen!! Data will be lost [ 233.422324][T16130] [ 233.432414][T16130] EXT4-fs (loop5): Total free blocks count 0 [ 233.438550][T16130] EXT4-fs (loop5): Free/Dirty block details [ 233.444504][T16130] EXT4-fs (loop5): free_blocks=0 [ 233.449460][T16130] EXT4-fs (loop5): dirty_blocks=16 [ 233.454625][T16130] EXT4-fs (loop5): Block reservation details [ 233.460797][T16130] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 233.545184][T11297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.718886][T16234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4902'. [ 234.964244][T16258] syzkaller0: entered promiscuous mode [ 234.969777][T16258] syzkaller0: entered allmulticast mode [ 235.094295][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 235.094314][ T29] audit: type=1400 audit(1756853224.727:10047): avc: denied { create } for pid=16274 comm="syz.5.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.229381][ T29] audit: type=1400 audit(1756853224.857:10048): avc: denied { create } for pid=16294 comm="syz.3.4906" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.277510][ T29] audit: type=1400 audit(1756853224.887:10049): avc: denied { mounton } for pid=16294 comm="syz.3.4906" path="/619/file0" dev="tmpfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.367138][ T29] audit: type=1400 audit(1756853224.997:10050): avc: denied { unlink } for pid=8205 comm="syz-executor" name="file0" dev="tmpfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.399898][ T29] audit: type=1400 audit(1756853225.027:10051): avc: denied { mount } for pid=16309 comm="syz.3.4907" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.488045][T16312] tipc: Enabled bearer , priority 0 [ 235.496085][T16311] tipc: Resetting bearer [ 235.513373][T16311] tipc: Disabling bearer [ 235.558729][ T29] audit: type=1400 audit(1756853225.187:10052): avc: denied { create } for pid=16315 comm="syz.3.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.582427][ T29] audit: type=1400 audit(1756853225.207:10053): avc: denied { ioctl } for pid=16315 comm="syz.3.4912" path="socket:[56455]" dev="sockfs" ino=56455 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.609870][ T29] audit: type=1400 audit(1756853225.217:10054): avc: denied { map } for pid=16318 comm="syz.4.4913" path="socket:[57374]" dev="sockfs" ino=57374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 235.724381][ T29] audit: type=1400 audit(1756853225.337:10055): avc: denied { watch watch_reads } for pid=16323 comm="syz.3.4915" path="/623" dev="tmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 235.770500][T16328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.096098][T16336] netlink: 'syz.6.4919': attribute type 4 has an invalid length. [ 236.119259][ T29] audit: type=1400 audit(1756853225.747:10056): avc: denied { append } for pid=16337 comm="syz.3.4920" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 236.170321][T16341] netlink: 'syz.6.4919': attribute type 4 has an invalid length. [ 236.304547][T16350] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.380445][T16350] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.380624][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4927'. [ 236.407880][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4927'. [ 236.486107][T16350] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.554843][T16350] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.697373][T15839] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.141472][T15839] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.149744][T15839] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.158299][T15839] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.267440][T16384] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 237.293902][T16384] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i, priority 10 [ 237.382868][T16384] SELinux: Context A)t'*'ĺkشL&z [ 237.382868][T16384] :_t 0H^B>&Zw8 lX&D;td BIݛ~L [ 237.382868][T16384] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 237.433085][T16384] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 237.617928][T16403] lo speed is unknown, defaulting to 1000 [ 237.627673][T16402] netlink: 'syz.5.4944': attribute type 12 has an invalid length. [ 237.651862][T16403] lo speed is unknown, defaulting to 1000 [ 238.068772][T16411] tipc: New replicast peer: 255.255.255.83 [ 238.074804][T16411] tipc: Enabled bearer , priority 10 [ 238.363352][ T10] tipc: Node number set to 4007375544 [ 238.467120][T16429] SELinux: policydb version -2047732469 does not match my version range 15-35 [ 238.477350][T16429] SELinux: failed to load policy [ 238.499819][T16431] 9pnet_fd: Insufficient options for proto=fd [ 238.532432][T16435] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.593968][T16443] usb usb8: check_ctrlrecip: process 16443 (syz.6.4958) requesting ep 01 but needs 81 [ 238.603896][T16443] usb usb8: usbfs: process 16443 (syz.6.4958) did not claim interface 0 before use [ 238.723999][T16448] SELinux: ebitmap: truncated map [ 238.729812][T16448] SELinux: failed to load policy [ 238.822319][T16455] siw: device registration error -23 [ 238.855282][T16460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4966'. [ 238.865112][T16460] dummy0: left allmulticast mode [ 238.870722][T16460] bridge0: port 3(dummy0) entered disabled state [ 238.878545][T16460] bridge_slave_1: left allmulticast mode [ 238.884626][T16460] bridge_slave_1: left promiscuous mode [ 238.890663][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.908622][T16460] bridge_slave_0: left allmulticast mode [ 238.914397][T16460] bridge_slave_0: left promiscuous mode [ 238.920230][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.305746][T16483] veth0_vlan: entered allmulticast mode [ 240.129146][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 240.129163][ T29] audit: type=1326 audit(1756853229.757:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.161096][ T29] audit: type=1326 audit(1756853229.757:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.185176][ T29] audit: type=1326 audit(1756853229.787:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.209140][ T29] audit: type=1326 audit(1756853229.787:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.240501][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4977'. [ 240.258326][T11418] Process accounting resumed [ 240.312536][ T29] audit: type=1326 audit(1756853229.787:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.336841][ T29] audit: type=1326 audit(1756853229.787:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.360865][ T29] audit: type=1326 audit(1756853229.787:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.384839][ T29] audit: type=1326 audit(1756853229.787:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.408791][ T29] audit: type=1326 audit(1756853229.787:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.433191][ T29] audit: type=1326 audit(1756853229.787:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.2.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42b2a7ebe9 code=0x7ffc0000 [ 240.501014][T16505] lo speed is unknown, defaulting to 1000 [ 240.508726][T16505] lo speed is unknown, defaulting to 1000 [ 240.766377][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.775833][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.788692][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.797460][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.150056][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5000'. [ 241.160942][T16549] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 241.335596][T16562] netlink: 'syz.2.5004': attribute type 15 has an invalid length. [ 241.581419][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5013'. [ 241.610064][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 241.620608][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5013'. [ 241.645286][T16580] ref_ctr_offset mismatch. inode: 0x94f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 241.804666][T16591] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.866009][T16591] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.882230][ T3399] hid_parser_main: 47 callbacks suppressed [ 241.882248][ T3399] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 241.895911][ T3399] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 241.903330][ T3399] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 241.918635][ T3399] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 241.977117][T16591] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.069159][T16591] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.166616][T15886] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.179622][T15886] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.191206][T15886] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.202696][T15886] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.254545][T16613] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5035'. [ 242.263683][T16613] netem: unknown loss type 12 [ 242.268396][T16613] netem: change failed [ 242.327521][T16617] syzkaller1: entered promiscuous mode [ 242.333052][T16617] syzkaller1: entered allmulticast mode [ 242.423859][T16620] 9pnet_fd: p9_fd_create_tcp (16620): problem connecting socket to 127.0.0.1 [ 242.442431][T16620] net_ratelimit: 1 callbacks suppressed [ 242.442446][T16620] openvswitch: netlink: Message has 6 unknown bytes. [ 242.488263][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5032'. [ 242.724872][T16640] netfs: Couldn't get user pages (rc=-14) [ 242.770439][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'. [ 242.790981][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'. [ 242.888930][T16648] lo speed is unknown, defaulting to 1000 [ 242.895550][T16648] lo speed is unknown, defaulting to 1000 [ 242.961063][T16651] syzkaller0: refused to change device tx_queue_len [ 242.999251][T16654] syzkaller0: entered promiscuous mode [ 243.005043][T16654] syzkaller0: entered allmulticast mode [ 243.227347][T16663] bridge: RTM_NEWNEIGH with invalid ether address [ 243.916592][T16682] syzkaller0: refused to change device tx_queue_len [ 243.931603][T16681] netfs: Couldn't get user pages (rc=-14) [ 243.948287][ T3392] IPVS: starting estimator thread 0... [ 244.044783][T16687] IPVS: using max 2160 ests per chain, 108000 per kthread [ 244.159436][T16706] bridge: RTM_NEWNEIGH with invalid ether address [ 244.425239][T16718] netlink: 'syz.3.5079': attribute type 10 has an invalid length. [ 244.483077][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 244.489111][T16722] netfs: Couldn't get user pages (rc=-14) [ 244.902459][T16731] siw: device registration error -23 [ 244.997108][T16744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16744 comm=syz.4.5080 [ 245.035198][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 245.044405][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 245.053417][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 245.161927][T16755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5084'. [ 245.172753][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 245.172770][ T29] audit: type=1326 audit(1756853234.797:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.222477][ T29] audit: type=1326 audit(1756853234.837:10383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.241469][T15850] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.246190][ T29] audit: type=1326 audit(1756853234.837:10384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.254616][T15850] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.278435][ T29] audit: type=1326 audit(1756853234.837:10385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.310435][ T29] audit: type=1326 audit(1756853234.837:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.334411][ T29] audit: type=1326 audit(1756853234.837:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.358077][ T29] audit: type=1326 audit(1756853234.837:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.365053][T15850] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.382074][ T29] audit: type=1326 audit(1756853234.837:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.382105][ T29] audit: type=1326 audit(1756853234.837:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.390571][T15850] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.414302][ T29] audit: type=1326 audit(1756853234.837:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 245.474965][T15850] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.483397][T15850] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.491916][T15850] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.500681][T15850] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.676354][T16771] lo speed is unknown, defaulting to 1000 [ 245.703888][T16771] lo speed is unknown, defaulting to 1000 [ 246.521416][T16796] syzkaller1: entered promiscuous mode [ 246.527053][T16796] syzkaller1: entered allmulticast mode [ 246.767662][T16809] tipc: Enabled bearer , priority 0 [ 246.776389][T16807] tipc: Resetting bearer [ 246.791479][T16807] tipc: Disabling bearer [ 247.499127][T16830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16830 comm=syz.6.5109 [ 247.517387][T16828] bridge_slave_0: left allmulticast mode [ 247.523103][T16828] bridge_slave_0: left promiscuous mode [ 247.528944][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.776396][T16828] bridge_slave_1: left allmulticast mode [ 247.782123][T16828] bridge_slave_1: left promiscuous mode [ 247.787930][T16828] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.105051][T16839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5108'. [ 248.163691][T16828] bond0: (slave bond_slave_0): Releasing backup interface [ 248.171410][T16842] netlink: 'syz.6.5111': attribute type 4 has an invalid length. [ 248.208036][T16828] bond0: (slave bond_slave_1): Releasing backup interface [ 248.222558][T16843] netlink: 'syz.6.5111': attribute type 4 has an invalid length. [ 249.506605][T16870] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5120'. [ 249.523610][T16870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.544935][T16870] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 249.564602][T16870] bond0 (unregistering): Released all slaves [ 249.832137][T16882] wireguard0: entered promiscuous mode [ 249.837790][T16882] wireguard0: entered allmulticast mode [ 250.396589][T16903] syzkaller0: entered promiscuous mode [ 250.402105][T16903] syzkaller0: entered allmulticast mode [ 250.422138][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 250.422155][ T29] audit: type=1400 audit(1756853240.047:10791): avc: denied { relabelfrom } for pid=16901 comm="syz.4.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 250.448813][ T29] audit: type=1400 audit(1756853240.047:10792): avc: denied { relabelto } for pid=16901 comm="syz.4.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 250.527309][T16911] syz_tun: entered allmulticast mode [ 250.533545][T16911] netlink: 'syz.6.5133': attribute type 4 has an invalid length. [ 250.550243][T16911] dvmrp1: entered allmulticast mode [ 250.557064][ T29] audit: type=1400 audit(1756853240.187:10793): avc: denied { write } for pid=16908 comm="syz.2.5132" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 250.581023][T16914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.599032][T16910] syz_tun: left allmulticast mode [ 250.623561][ T29] audit: type=1326 audit(1756853240.247:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.647480][ T29] audit: type=1326 audit(1756853240.247:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.671196][ T29] audit: type=1326 audit(1756853240.247:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.695192][ T29] audit: type=1326 audit(1756853240.247:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.719195][ T29] audit: type=1326 audit(1756853240.247:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.743070][ T29] audit: type=1326 audit(1756853240.247:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.766997][ T29] audit: type=1326 audit(1756853240.247:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16917 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 250.925156][T16929] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5142'. [ 250.950034][T16929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5142'. [ 250.959090][T16929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5142'. [ 251.449741][T16946] syzkaller0: entered promiscuous mode [ 251.455284][T16946] syzkaller0: entered allmulticast mode [ 251.796968][T16955] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5151'. [ 251.868033][T16958] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5152'. [ 251.881491][T16958] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 251.905369][T16958] bond0 (unregistering): Released all slaves [ 252.124162][T15906] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.133078][T15906] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.144513][T15906] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.153144][T15906] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.270464][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 252.280210][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5168'. [ 252.532618][T16996] netlink: 'syz.3.5164': attribute type 4 has an invalid length. [ 252.547189][T16996] dvmrp1: entered allmulticast mode [ 252.967860][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5170'. [ 252.986807][T17006] team0 (unregistering): Port device geneve1 removed [ 252.998147][T15886] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.006670][T15886] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.015423][T15886] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.024009][T15886] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.717430][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5173'. [ 253.780417][T15906] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.790088][T15906] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.800389][T15906] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.809742][T15906] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.936184][T17032] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 253.995004][T17038] netlink: 'syz.3.5178': attribute type 30 has an invalid length. [ 254.115396][T17053] netlink: 'syz.5.5194': attribute type 30 has an invalid length. [ 254.750450][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5186'. [ 254.879213][T17065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.262542][T17088] veth0_vlan: left promiscuous mode [ 255.264594][T17090] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5198'. [ 255.282420][T17088] veth0_vlan: entered promiscuous mode [ 255.321044][T17090] bond0 (unregistering): Released all slaves [ 255.393697][T17093] lo speed is unknown, defaulting to 1000 [ 255.412289][T17093] lo speed is unknown, defaulting to 1000 [ 255.414618][T17095] tipc: Enabled bearer , priority 0 [ 255.426068][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 255.426085][ T29] audit: type=1400 audit(1756853245.057:11031): avc: denied { create } for pid=17092 comm="syz.6.5199" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.458341][T17095] syzkaller0: entered promiscuous mode [ 255.463975][T17095] syzkaller0: entered allmulticast mode [ 255.470799][ T29] audit: type=1400 audit(1756853245.057:11032): avc: denied { write } for pid=17092 comm="syz.6.5199" name="file0" dev="tmpfs" ino=1473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.493592][ T29] audit: type=1400 audit(1756853245.057:11033): avc: denied { open } for pid=17092 comm="syz.6.5199" path="/277/file0" dev="tmpfs" ino=1473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.516853][ T29] audit: type=1400 audit(1756853245.057:11034): avc: denied { ioctl } for pid=17092 comm="syz.6.5199" path="/277/file0" dev="tmpfs" ino=1473 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.541360][ T29] audit: type=1400 audit(1756853245.087:11035): avc: denied { ioctl } for pid=17094 comm="syz.5.5200" path="socket:[59901]" dev="sockfs" ino=59901 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.577198][T17098] tipc: Resetting bearer [ 255.595091][T17094] tipc: Resetting bearer [ 255.603891][T17094] tipc: Disabling bearer [ 255.666271][T17096] lo speed is unknown, defaulting to 1000 [ 255.672585][T17096] lo speed is unknown, defaulting to 1000 [ 255.746546][T17101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.819598][ T29] audit: type=1400 audit(1756853245.447:11036): avc: denied { create } for pid=17103 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.843718][ T29] audit: type=1400 audit(1756853245.467:11037): avc: denied { setopt } for pid=17103 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.864404][ T29] audit: type=1400 audit(1756853245.467:11038): avc: denied { read } for pid=17103 comm="syz.4.5203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 255.888189][ T29] audit: type=1400 audit(1756853245.517:11039): avc: denied { name_bind } for pid=17105 comm="syz.5.5204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 255.945771][ T29] audit: type=1400 audit(1756853245.577:11040): avc: denied { sqpoll } for pid=17108 comm="syz.5.5205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.189028][T17143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.201842][T17143] netem: change failed [ 257.223662][T17145] lo speed is unknown, defaulting to 1000 [ 257.228469][T17147] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5221'. [ 257.230358][T17145] lo speed is unknown, defaulting to 1000 [ 257.277990][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5233'. [ 258.795028][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.817926][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.874140][T15844] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.885405][T15844] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.894379][T15844] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.902985][T15844] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669810][T17193] lo speed is unknown, defaulting to 1000 [ 259.684526][T17193] lo speed is unknown, defaulting to 1000 [ 259.843597][T17197] tipc: Enabled bearer , priority 0 [ 259.854484][T17198] veth0_vlan: left promiscuous mode [ 259.881854][T17198] veth0_vlan: entered promiscuous mode [ 259.943507][T17197] syzkaller0: entered promiscuous mode [ 259.949104][T17197] syzkaller0: entered allmulticast mode [ 259.982605][T17197] tipc: Resetting bearer [ 260.011926][T17195] tipc: Resetting bearer [ 260.033584][T17195] tipc: Disabling bearer [ 260.047564][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5235'. [ 260.093314][T17206] netlink: 'syz.2.5238': attribute type 10 has an invalid length. [ 260.101174][T17206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5238'. [ 260.110386][T17206] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 260.138181][T17206] lo speed is unknown, defaulting to 1000 [ 260.144717][T17206] lo speed is unknown, defaulting to 1000 [ 260.506843][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 260.506863][ T29] audit: type=1326 audit(1756853250.137:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.730857][ T29] audit: type=1326 audit(1756853250.167:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.755270][ T29] audit: type=1326 audit(1756853250.167:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.779213][ T29] audit: type=1326 audit(1756853250.167:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.803581][ T29] audit: type=1326 audit(1756853250.167:11197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.827319][ T29] audit: type=1326 audit(1756853250.167:11198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.851418][ T29] audit: type=1326 audit(1756853250.167:11199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.875483][ T29] audit: type=1326 audit(1756853250.167:11200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.899190][ T29] audit: type=1326 audit(1756853250.177:11201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 260.922943][ T29] audit: type=1326 audit(1756853250.177:11202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 261.800608][T17242] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5251'. [ 262.008157][T17249] SELinux: failed to load policy [ 262.025935][T17253] tipc: Started in network mode [ 262.031045][T17253] tipc: Node identity 3a196e1f58a3, cluster identity 4711 [ 262.038229][T17253] tipc: Enabled bearer , priority 0 [ 262.047716][T17253] syzkaller0: entered promiscuous mode [ 262.053363][T17253] syzkaller0: entered allmulticast mode [ 262.174782][T17253] tipc: Resetting bearer [ 262.186095][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5257'. [ 262.382315][T17252] tipc: Resetting bearer [ 262.391799][T17252] tipc: Disabling bearer [ 263.285384][T17273] lo speed is unknown, defaulting to 1000 [ 263.299097][T17273] lo speed is unknown, defaulting to 1000 [ 263.348437][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 263.450600][T17294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5270'. [ 264.929358][T17318] netlink: 'syz.3.5281': attribute type 4 has an invalid length. [ 264.945221][T17318] netlink: 'syz.3.5281': attribute type 4 has an invalid length. [ 265.022261][T17324] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5283'. [ 265.096774][T17339] usb usb8: check_ctrlrecip: process 17339 (syz.2.5288) requesting ep 01 but needs 81 [ 265.106434][T17339] usb usb8: usbfs: process 17339 (syz.2.5288) did not claim interface 0 before use [ 265.161254][T17349] SELinux: ebitmap: truncated map [ 265.167267][T17349] SELinux: failed to load policy [ 265.551651][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 265.551671][ T29] audit: type=1400 audit(1756853255.177:11363): avc: denied { execute_no_trans } for pid=17360 comm="syz.4.5295" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.110410][ T29] audit: type=1400 audit(1756853255.737:11364): avc: denied { execute } for pid=17363 comm="syz.3.5300" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=60706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 266.147935][ T29] audit: type=1400 audit(1756853255.777:11365): avc: denied { mounton } for pid=17367 comm="syz.2.5310" path="/695/file0" dev="tmpfs" ino=3602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.182986][ T29] audit: type=1400 audit(1756853255.797:11366): avc: denied { mount } for pid=17367 comm="syz.2.5310" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.205353][ T29] audit: type=1400 audit(1756853255.807:11367): avc: denied { read write } for pid=17367 comm="syz.2.5310" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.226850][ T29] audit: type=1400 audit(1756853255.807:11368): avc: denied { open } for pid=17367 comm="syz.2.5310" path="/695/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.249512][ T29] audit: type=1400 audit(1756853255.807:11369): avc: denied { unmount } for pid=8181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.270483][ T29] audit: type=1400 audit(1756853255.807:11370): avc: denied { create } for pid=17369 comm="syz.5.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.291126][ T29] audit: type=1400 audit(1756853255.877:11371): avc: denied { write } for pid=17369 comm="syz.5.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.311628][ T29] audit: type=1400 audit(1756853255.877:11372): avc: denied { nlmsg_write } for pid=17369 comm="syz.5.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.355520][T17374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5301'. [ 266.390930][T17376] tipc: Enabled bearer , priority 0 [ 266.398767][T17376] syzkaller0: entered promiscuous mode [ 266.404326][T17376] syzkaller0: entered allmulticast mode [ 266.418372][T17376] tipc: Resetting bearer [ 266.550840][T17375] tipc: Resetting bearer [ 266.559023][T17375] tipc: Disabling bearer [ 266.584512][T17387] usb usb8: check_ctrlrecip: process 17387 (syz.5.5305) requesting ep 01 but needs 81 [ 266.594430][T17387] usb usb8: usbfs: process 17387 (syz.5.5305) did not claim interface 0 before use [ 266.712839][T17391] netlink: 'syz.2.5308': attribute type 10 has an invalid length. [ 268.271062][T17412] geneve2: entered promiscuous mode [ 268.287499][T17414] lo speed is unknown, defaulting to 1000 [ 268.305021][T17414] lo speed is unknown, defaulting to 1000 [ 268.332730][T15839] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.352752][T15839] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.361358][T15839] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.371157][T15839] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.441178][T17423] netlink: 'syz.3.5320': attribute type 12 has an invalid length. [ 268.664527][T17430] : renamed from vlan0 [ 269.009336][T17444] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5330'. [ 269.018696][T17444] hsr_slave_0: left promiscuous mode [ 269.024574][T17444] hsr_slave_1: left promiscuous mode [ 269.165782][T17440] wireguard0: entered promiscuous mode [ 269.171430][T17440] wireguard0: entered allmulticast mode [ 269.264893][T17466] netlink: 'syz.6.5337': attribute type 12 has an invalid length. [ 269.366676][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5344'. [ 269.516546][ T1038] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 269.524203][ T1038] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 269.531705][ T1038] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 269.544205][ T1038] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 270.098919][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5361'. [ 270.164631][T17523] lo speed is unknown, defaulting to 1000 [ 270.171300][T17523] lo speed is unknown, defaulting to 1000 [ 270.188470][ T1038] Process accounting resumed [ 270.545992][T17545] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5368'. [ 270.555297][T17545] netem: unknown loss type 12 [ 270.830638][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 270.830654][ T29] audit: type=1400 audit(1756853260.457:11467): avc: denied { create } for pid=17549 comm="syz.5.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.859707][T17550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5370'. [ 270.861875][ T29] audit: type=1400 audit(1756853260.487:11468): avc: denied { write } for pid=17549 comm="syz.5.5370" path="socket:[62355]" dev="sockfs" ino=62355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.894848][ T29] audit: type=1400 audit(1756853260.527:11469): avc: denied { create } for pid=17553 comm="syz.2.5371" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 270.916423][ T29] audit: type=1400 audit(1756853260.527:11470): avc: denied { mounton } for pid=17553 comm="syz.2.5371" path="/710/file0" dev="tmpfs" ino=3678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 270.975192][ T29] audit: type=1400 audit(1756853260.607:11471): avc: denied { unlink } for pid=8181 comm="syz-executor" name="file0" dev="tmpfs" ino=3678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.009194][ T29] audit: type=1400 audit(1756853260.637:11472): avc: denied { create } for pid=17556 comm="syz.2.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 271.024478][T17558] siw: device registration error -23 [ 271.030320][ T29] audit: type=1400 audit(1756853260.657:11473): avc: denied { write } for pid=17556 comm="syz.2.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 271.079320][ T29] audit: type=1400 audit(1756853260.707:11474): avc: denied { create } for pid=17559 comm="syz.5.5384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.099127][ T29] audit: type=1400 audit(1756853260.707:11475): avc: denied { bind } for pid=17559 comm="syz.5.5384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.141456][ T29] audit: type=1326 audit(1756853260.767:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04af42ebe9 code=0x7ffc0000 [ 271.193853][ T3392] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 271.201333][ T3392] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 271.208765][ T3392] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 271.220901][ T3392] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 271.282974][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5380'. [ 271.449390][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5383'. [ 271.783049][T17599] wireguard0: entered promiscuous mode [ 271.788567][T17599] wireguard0: entered allmulticast mode [ 272.172898][T17617] wireguard0: entered promiscuous mode [ 272.178690][T17617] wireguard0: entered allmulticast mode [ 272.266052][T17620] netlink: zone id is out of range [ 272.271308][T17620] netlink: zone id is out of range [ 272.276585][T17620] netlink: zone id is out of range [ 272.281743][T17620] netlink: zone id is out of range [ 272.286927][T17620] netlink: zone id is out of range [ 272.292046][T17620] netlink: zone id is out of range [ 272.299135][T17620] netlink: zone id is out of range [ 272.305652][T17620] netlink: zone id is out of range [ 272.311038][T17620] netlink: zone id is out of range [ 272.316247][T17620] netlink: zone id is out of range [ 272.360202][T17627] siw: device registration error -23 [ 273.209189][ T3392] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 273.216932][ T3392] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 273.224406][ T3392] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 273.231860][ T3392] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 273.239453][ T3392] hid-generic 0000:0000:0000.0015: reserved main item tag 0xd [ 273.247431][ T3392] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 273.383662][T17659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5411'. [ 273.402674][T17659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17659 comm=syz.4.5411 [ 273.465492][ T3392] IPVS: starting estimator thread 0... [ 273.478861][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5414'. [ 273.583330][T17664] IPVS: using max 2928 ests per chain, 146400 per kthread [ 273.624549][T17672] netlink: 'syz.5.5426': attribute type 10 has an invalid length. [ 273.632894][T17672] netlink: 'syz.5.5426': attribute type 10 has an invalid length. [ 274.146830][T17680] wireguard0: entered promiscuous mode [ 274.152558][T17680] wireguard0: entered allmulticast mode [ 274.278520][T17689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5422'. [ 274.416315][T17697] pim6reg: entered allmulticast mode [ 274.447025][T17697] pim6reg: left allmulticast mode [ 274.485730][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 274.552015][T17709] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5431'. [ 275.155698][T17729] netlink: 'syz.6.5439': attribute type 10 has an invalid length. [ 275.164658][T17729] dummy0: left promiscuous mode [ 275.172689][T17729] team0: Port device dummy0 added [ 275.180197][T17729] netlink: 'syz.6.5439': attribute type 10 has an invalid length. [ 275.192405][T17729] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 275.205050][T17729] team0: Failed to send options change via netlink (err -105) [ 275.213026][T17729] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 275.224015][T17729] team0: Port device dummy0 removed [ 275.279816][T17735] tipc: Enabled bearer , priority 0 [ 275.298957][T17735] syzkaller0: entered promiscuous mode [ 275.304626][T17735] syzkaller0: entered allmulticast mode [ 275.321290][T17735] tipc: Resetting bearer [ 275.329049][T17734] tipc: Resetting bearer [ 275.335838][T17734] tipc: Disabling bearer [ 275.470856][T17742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5444'. [ 275.497420][T17740] tipc: Enabled bearer , priority 0 [ 275.509961][T17742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17742 comm=syz.6.5444 [ 275.523853][T17739] tipc: Resetting bearer [ 275.551975][T17739] tipc: Disabling bearer [ 275.562885][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5448'. [ 275.583601][T17748] netlink: 'syz.6.5448': attribute type 13 has an invalid length. [ 275.614548][T17748] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.651592][ T3392] hid_parser_main: 15 callbacks suppressed [ 275.651638][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.665252][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.672649][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.680101][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.687619][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.695042][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.702526][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.710152][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.717594][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.725113][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 275.733758][ T3392] hid-generic 0000:0000:0000.0016: reserved main item tag 0xd [ 275.753330][ T3392] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.00 Device [syz0] on syz0 [ 275.860296][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 275.860311][ T29] audit: type=1400 audit(1756853265.487:11631): avc: denied { create } for pid=17761 comm="syz.6.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.902746][T17766] syzkaller0: entered promiscuous mode [ 275.908442][T17766] syzkaller0: entered allmulticast mode [ 275.938391][ T29] audit: type=1400 audit(1756853265.497:11632): avc: denied { write } for pid=17761 comm="syz.6.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.958217][ T29] audit: type=1400 audit(1756853265.517:11633): avc: denied { read } for pid=17761 comm="syz.6.5453" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 276.358412][ T29] audit: type=1400 audit(1756853265.857:11634): avc: denied { mount } for pid=17772 comm="syz.3.5457" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 276.785592][T17780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5459'. [ 276.947183][ T29] audit: type=1400 audit(1756853266.567:11635): avc: denied { watch } for pid=17783 comm="syz.2.5460" path="/723/control" dev="tmpfs" ino=3747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 277.185916][T17795] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5463'. [ 277.221958][ T29] audit: type=1400 audit(1756853266.847:11636): avc: denied { write } for pid=17789 comm="syz.6.5463" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.250906][T17797] pim6reg: entered allmulticast mode [ 277.287424][ T29] audit: type=1400 audit(1756853266.877:11637): avc: denied { ioctl } for pid=17789 comm="syz.6.5463" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.349212][T17797] pim6reg: left allmulticast mode [ 277.462130][ T3392] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.492237][ T29] audit: type=1326 audit(1756853267.117:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 277.492327][ T29] audit: type=1326 audit(1756853267.117:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 277.498291][ T29] audit: type=1326 audit(1756853267.117:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.4.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2845ebe9 code=0x7ffc0000 [ 277.552093][T17807] netlink: 'syz.3.5470': attribute type 10 has an invalid length. [ 277.615237][T17813] usb usb9: usbfs: process 17813 (syz.4.5474) did not claim interface 32 before use [ 277.662664][T17807] netlink: 'syz.3.5470': attribute type 10 has an invalid length. [ 277.666931][T17807] : (slave dummy0): Enslaving as an active interface with an up link [ 277.830027][T17834] pim6reg: entered allmulticast mode [ 277.943271][T17834] pim6reg: left allmulticast mode [ 278.002816][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5486'. [ 278.023874][T17850] netlink: 'syz.3.5486': attribute type 13 has an invalid length. [ 278.067234][T17850] 8021q: adding VLAN 0 to HW filter on device  [ 278.078794][T17850] net_ratelimit: 76 callbacks suppressed [ 278.078805][T17850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.167041][T17855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.196593][T17861] netlink: 'syz.5.5490': attribute type 10 has an invalid length. [ 278.205685][T17861] netlink: 'syz.5.5490': attribute type 10 has an invalid length. [ 278.314511][T17867] netlink: 356 bytes leftover after parsing attributes in process `syz.5.5494'. [ 278.326649][T17869] lo speed is unknown, defaulting to 1000 [ 278.333326][T17869] lo speed is unknown, defaulting to 1000 [ 278.357482][T17872] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 278.364041][T17872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.371913][T17872] vhci_hcd vhci_hcd.0: Device attached [ 278.395994][T17869] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 278.402613][T17869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 278.410351][T17869] vhci_hcd vhci_hcd.0: Device attached [ 278.420110][T17876] vhci_hcd: connection closed [ 278.420397][T15841] vhci_hcd: stop threads [ 278.429398][T15841] vhci_hcd: release socket [ 278.433859][T15841] vhci_hcd: disconnect device [ 278.727674][T17873] vhci_hcd: connection closed [ 278.728052][T15839] vhci_hcd: stop threads [ 278.737164][T15839] vhci_hcd: release socket [ 278.741668][T15839] vhci_hcd: disconnect device [ 279.351787][T17901] netlink: 'syz.2.5503': attribute type 10 has an invalid length. [ 279.361523][T17901] netlink: 'syz.2.5503': attribute type 10 has an invalid length. [ 279.374556][T17901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 279.873439][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5505'. [ 280.116795][T17921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17921 comm=syz.4.5520 [ 280.243851][T17924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5510'. [ 280.591560][T17937] tipc: Enabled bearer , priority 0 [ 280.601097][T17937] syzkaller0: entered promiscuous mode [ 280.606613][T17937] syzkaller0: entered allmulticast mode [ 280.616085][T17937] tipc: Resetting bearer [ 280.628718][T17936] tipc: Resetting bearer [ 280.658715][T17936] tipc: Disabling bearer [ 280.867853][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 280.867871][ T29] audit: type=1326 audit(1756853270.497:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7910195ba7 code=0x7ffc0000 [ 280.990917][ T29] audit: type=1326 audit(1756853270.527:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791013adb9 code=0x7ffc0000 [ 281.014627][ T29] audit: type=1326 audit(1756853270.527:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7910195ba7 code=0x7ffc0000 [ 281.038491][ T29] audit: type=1326 audit(1756853270.527:11904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791013adb9 code=0x7ffc0000 [ 281.062293][ T29] audit: type=1326 audit(1756853270.527:11905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 281.085724][ T29] audit: type=1326 audit(1756853270.537:11906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7910195ba7 code=0x7ffc0000 [ 281.109406][ T29] audit: type=1326 audit(1756853270.537:11907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791013adb9 code=0x7ffc0000 [ 281.132991][ T29] audit: type=1326 audit(1756853270.537:11908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f791019ebe9 code=0x7ffc0000 [ 281.156510][ T29] audit: type=1326 audit(1756853270.547:11909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7910195ba7 code=0x7ffc0000 [ 281.180104][ T29] audit: type=1326 audit(1756853270.547:11910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791013adb9 code=0x7ffc0000 [ 282.046468][T17994] usb usb9: usbfs: process 17994 (syz.5.5540) did not claim interface 32 before use [ 282.086788][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5542'. [ 282.113774][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5542'. [ 282.238969][T18006] tipc: Enabled bearer , priority 0 [ 282.249086][T18006] syzkaller0: entered promiscuous mode [ 282.254706][T18006] syzkaller0: entered allmulticast mode [ 282.260645][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5534'. [ 282.271376][T18006] tipc: Resetting bearer [ 282.278925][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5534'. [ 282.289137][T18005] tipc: Resetting bearer [ 282.304959][T18005] tipc: Disabling bearer [ 282.416309][T18014] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5537'. [ 282.639767][ T8181] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 282.650850][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.650922][ T8181] Tainted: [W]=WARN [ 282.650930][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.650944][ T8181] Call Trace: [ 282.650952][ T8181] [ 282.651023][ T8181] __dump_stack+0x1d/0x30 [ 282.651048][ T8181] dump_stack_lvl+0xe8/0x140 [ 282.651066][ T8181] dump_stack+0x15/0x1b [ 282.651081][ T8181] dump_header+0x81/0x220 [ 282.651191][ T8181] oom_kill_process+0x342/0x400 [ 282.651229][ T8181] out_of_memory+0x979/0xb80 [ 282.651258][ T8181] try_charge_memcg+0x5e6/0x9e0 [ 282.651386][ T8181] charge_memcg+0x51/0xc0 [ 282.651411][ T8181] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 282.651431][ T8181] __read_swap_cache_async+0x1df/0x350 [ 282.651462][ T8181] swap_cluster_readahead+0x277/0x3e0 [ 282.651641][ T8181] swapin_readahead+0xde/0x6f0 [ 282.651675][ T8181] ? __filemap_get_folio+0x4f7/0x6b0 [ 282.651730][ T8181] ? ktime_get+0x1eb/0x210 [ 282.651756][ T8181] ? swap_cache_get_folio+0x77/0x200 [ 282.651782][ T8181] do_swap_page+0x301/0x2430 [ 282.651855][ T8181] ? finish_task_switch+0xad/0x2b0 [ 282.651879][ T8181] ? __pfx_default_wake_function+0x10/0x10 [ 282.651906][ T8181] handle_mm_fault+0x9a5/0x2c20 [ 282.651940][ T8181] do_user_addr_fault+0x636/0x1090 [ 282.652006][ T8181] ? fpregs_restore_userregs+0xe2/0x1d0 [ 282.652032][ T8181] ? switch_fpu_return+0xe/0x20 [ 282.652058][ T8181] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 282.652081][ T8181] exc_page_fault+0x62/0xa0 [ 282.652165][ T8181] asm_exc_page_fault+0x26/0x30 [ 282.652209][ T8181] RIP: 0033:0x7f42b2ab1465 [ 282.652281][ T8181] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 282.652302][ T8181] RSP: 002b:00007ffd5212b118 EFLAGS: 00010246 [ 282.652321][ T8181] RAX: 0000000000000000 RBX: 00000000000006cd RCX: 00007f42b2ab1463 [ 282.652343][ T8181] RDX: 00007ffd5212b130 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.652356][ T8181] RBP: 00007ffd5212b19c R08: 000000001fa48789 R09: 0000000000000000 [ 282.652370][ T8181] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 282.652384][ T8181] R13: 00000000000927c0 R14: 0000000000044e37 R15: 00007ffd5212b1f0 [ 282.652411][ T8181] [ 282.652418][ T8181] memory: usage 307200kB, limit 307200kB, failcnt 522 [ 282.890739][ T8181] memory+swap: usage 2476kB, limit 9007199254740988kB, failcnt 0 [ 282.898550][ T8181] kmem: usage 1784kB, limit 9007199254740988kB, failcnt 0 [ 282.905768][ T8181] Memory cgroup stats for /syz2: [ 283.084781][ T8181] cache 0 [ 283.092766][ T8181] rss 24576 [ 283.096029][ T8181] shmem 0 [ 283.099061][ T8181] mapped_file 0 [ 283.102521][ T8181] dirty 0 [ 283.105665][ T8181] writeback 0 [ 283.108965][ T8181] workingset_refault_anon 231 [ 283.113708][ T8181] workingset_refault_file 0 [ 283.118294][ T8181] swap 520192 [ 283.121667][ T8181] swapcached 16384 [ 283.125426][ T8181] pgpgin 214730 [ 283.128889][ T8181] pgpgout 214723 [ 283.132434][ T8181] pgfault 253689 [ 283.135995][ T8181] pgmajfault 37 [ 283.139446][ T8181] inactive_anon 0 [ 283.143079][ T8181] active_anon 28672 [ 283.146907][ T8181] inactive_file 0 [ 283.150634][ T8181] active_file 0 [ 283.154288][ T8181] unevictable 0 [ 283.157791][ T8181] hierarchical_memory_limit 314572800 [ 283.163167][ T8181] hierarchical_memsw_limit 9223372036854771712 [ 283.169365][ T8181] total_cache 0 [ 283.172821][ T8181] total_rss 24576 [ 283.176502][ T8181] total_shmem 0 [ 283.179963][ T8181] total_mapped_file 0 [ 283.184007][ T8181] total_dirty 0 [ 283.187466][ T8181] total_writeback 0 [ 283.191273][ T8181] total_workingset_refault_anon 231 [ 283.196572][ T8181] total_workingset_refault_file 0 [ 283.201592][ T8181] total_swap 520192 [ 283.205416][ T8181] total_swapcached 16384 [ 283.209751][ T8181] total_pgpgin 214731 [ 283.213927][ T8181] total_pgpgout 214724 [ 283.218097][ T8181] total_pgfault 253692 [ 283.222239][ T8181] total_pgmajfault 37 [ 283.226408][ T8181] total_inactive_anon 0 [ 283.230568][ T8181] total_active_anon 28672 [ 283.234977][ T8181] total_inactive_file 0 [ 283.239126][ T8181] total_active_file 0 [ 283.243166][ T8181] total_unevictable 0 [ 283.247220][ T8181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5532,pid=18002,uid=0 [ 283.262359][ T8181] Memory cgroup out of memory: Killed process 18002 (syz.2.5532) total-vm:95876kB, anon-rss:1008kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 283.987811][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5543'. [ 284.048161][T18033] lo speed is unknown, defaulting to 1000 [ 284.054688][T18033] lo speed is unknown, defaulting to 1000 [ 284.104080][T18044] SELinux: security_context_str_to_sid (=S|1rWiM!Oj4~1c3FfX50X2kcm?'wC) failed with errno=-22 [ 284.189911][T18052] tipc: Enabled bearer , priority 0 [ 284.216144][T18052] syzkaller0: entered promiscuous mode [ 284.221677][T18052] syzkaller0: entered allmulticast mode [ 284.270671][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'. [ 284.339434][T18060] netlink: 'syz.2.5549': attribute type 4 has an invalid length. [ 284.396837][T18060] Falling back ldisc for ptm0. [ 284.492115][T18052] tipc: Resetting bearer [ 284.501687][T18050] tipc: Resetting bearer [ 284.510625][T18050] tipc: Disabling bearer [ 284.620719][T18062] tipc: Enabled bearer , priority 0 [ 284.627999][T18062] syzkaller0: entered promiscuous mode [ 284.633536][T18062] syzkaller0: entered allmulticast mode [ 284.644220][T18062] tipc: Resetting bearer [ 284.652231][T18061] tipc: Resetting bearer [ 284.660551][T18061] tipc: Disabling bearer [ 284.762509][T18072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5551'. [ 284.783089][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5563'. [ 284.902144][T18070] lo speed is unknown, defaulting to 1000 [ 284.909537][T18070] lo speed is unknown, defaulting to 1000 [ 285.420205][T18160] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5557'. [ 286.423859][T18227] tipc: Enabled bearer , priority 0 [ 286.453482][T18227] syzkaller0: entered promiscuous mode [ 286.458987][T18227] syzkaller0: entered allmulticast mode [ 286.486067][T18227] tipc: Resetting bearer [ 286.500903][T18225] tipc: Resetting bearer [ 286.515133][T18225] tipc: Disabling bearer [ 286.600200][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 286.600218][ T29] audit: type=1400 audit(1756853276.227:12173): avc: denied { write } for pid=18241 comm="syz.5.5567" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 286.663180][ T29] audit: type=1400 audit(1756853276.267:12174): avc: denied { create } for pid=18241 comm="syz.5.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.683726][ T29] audit: type=1400 audit(1756853276.267:12175): avc: denied { write } for pid=18241 comm="syz.5.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.704217][ T29] audit: type=1400 audit(1756853276.267:12176): avc: denied { nlmsg_write } for pid=18241 comm="syz.5.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.725288][ T29] audit: type=1400 audit(1756853276.277:12177): avc: denied { create } for pid=18241 comm="syz.5.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.745112][ T29] audit: type=1400 audit(1756853276.287:12178): avc: denied { create } for pid=18241 comm="syz.5.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.765055][ T29] audit: type=1400 audit(1756853276.287:12179): avc: denied { setopt } for pid=18241 comm="syz.5.5567" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.887887][ T29] audit: type=1400 audit(1756853276.447:12180): avc: denied { mount } for pid=18246 comm="syz.3.5568" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 286.887925][ T29] audit: type=1400 audit(1756853276.477:12181): avc: denied { unmount } for pid=8205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 286.887985][ T29] audit: type=1400 audit(1756853276.507:12182): avc: denied { mounton } for pid=18250 comm="syz.5.5570" path="/563/file0" dev="tmpfs" ino=2937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.547817][T18421] tipc: Enabled bearer , priority 0 [ 289.568763][T18421] syzkaller0: entered promiscuous mode [ 289.574517][T18421] syzkaller0: entered allmulticast mode [ 289.629292][T18421] tipc: Resetting bearer [ 289.654097][T18420] tipc: Resetting bearer [ 289.662082][T18420] tipc: Disabling bearer [ 290.040847][T18428] lo speed is unknown, defaulting to 1000 [ 290.078183][T18428] lo speed is unknown, defaulting to 1000 [ 290.092425][T18431] lo speed is unknown, defaulting to 1000 [ 290.132909][T18431] lo speed is unknown, defaulting to 1000 [ 290.175142][T18433] __nla_validate_parse: 1 callbacks suppressed [ 290.175159][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5591'. [ 290.231091][T18443] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.245018][T18444] tipc: Enabled bearer , priority 0 [ 290.295804][T18446] syzkaller0: entered promiscuous mode [ 290.301318][T18446] syzkaller0: entered allmulticast mode [ 290.368369][T18446] tipc: Resetting bearer [ 290.423823][T18441] tipc: Resetting bearer [ 290.430570][T18441] tipc: Disabling bearer [ 290.451405][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5589'. [ 290.549164][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'. [ 290.571913][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5597'. [ 290.642072][T18465] geneve2: entered promiscuous mode [ 290.647422][T18465] geneve2: entered allmulticast mode [ 290.730881][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5603'. [ 290.761210][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5603'. [ 290.863532][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5604'. [ 291.186135][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 291.239206][T18484] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 291.431464][T18492] tipc: Enabled bearer , priority 0 [ 291.459011][T18492] syzkaller0: entered promiscuous mode [ 291.464671][T18492] syzkaller0: entered allmulticast mode [ 291.477000][T18492] tipc: Resetting bearer [ 291.488233][T18496] syzkaller1: entered promiscuous mode [ 291.493918][T18496] syzkaller1: entered allmulticast mode [ 291.502688][T18491] tipc: Resetting bearer [ 291.512601][T18491] tipc: Disabling bearer [ 291.643073][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 291.643088][ T29] audit: type=1400 audit(1756853281.267:12349): avc: denied { ioctl } for pid=18499 comm="syz.6.5615" path="socket:[64710]" dev="sockfs" ino=64710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.689921][ T29] audit: type=1400 audit(1756853281.317:12350): avc: denied { read } for pid=18507 comm="syz.4.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.895055][T18520] vhci_hcd: invalid port number 254 [ 291.900321][T18520] vhci_hcd: default hub control req: a309 v0004 i00fe l0 [ 291.932343][ T29] audit: type=1400 audit(1756853281.557:12351): avc: denied { read } for pid=18507 comm="syz.4.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.980852][ T29] audit: type=1400 audit(1756853281.587:12352): avc: denied { map_create } for pid=18521 comm="syz.3.5622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.000325][ T29] audit: type=1400 audit(1756853281.587:12353): avc: denied { perfmon } for pid=18521 comm="syz.3.5622" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.021983][ T29] audit: type=1400 audit(1756853281.587:12354): avc: denied { map_read map_write } for pid=18521 comm="syz.3.5622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.042394][ T29] audit: type=1400 audit(1756853281.587:12355): avc: denied { prog_load } for pid=18521 comm="syz.3.5622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.061761][ T29] audit: type=1400 audit(1756853281.587:12356): avc: denied { bpf } for pid=18521 comm="syz.3.5622" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.083055][ T29] audit: type=1400 audit(1756853281.587:12357): avc: denied { prog_run } for pid=18521 comm="syz.3.5622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.102272][ T29] audit: type=1400 audit(1756853281.587:12358): avc: denied { module_request } for pid=18521 comm="syz.3.5622" kmod="netdev-veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 292.125204][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5622'. [ 292.238116][T18542] syzkaller1: entered promiscuous mode [ 292.243753][T18542] syzkaller1: entered allmulticast mode [ 292.640090][T18568] netlink: 'syz.4.5637': attribute type 10 has an invalid length. [ 292.846217][T18584] syzkaller1: entered promiscuous mode [ 292.851795][T18584] syzkaller1: entered allmulticast mode [ 292.871067][T18586] lo speed is unknown, defaulting to 1000 [ 292.877538][T18586] lo speed is unknown, defaulting to 1000 [ 292.921862][T18587] lo speed is unknown, defaulting to 1000 [ 292.928475][T18587] lo speed is unknown, defaulting to 1000 [ 293.368580][T18621] syzkaller1: entered promiscuous mode [ 293.374125][T18621] syzkaller1: entered allmulticast mode [ 293.443880][T18631] 9pnet_fd: Insufficient options for proto=fd [ 293.880884][T18646] lo speed is unknown, defaulting to 1000 [ 293.888218][T18646] lo speed is unknown, defaulting to 1000 [ 293.976749][T18647] lo speed is unknown, defaulting to 1000 [ 293.998373][T18647] lo speed is unknown, defaulting to 1000 [ 294.265269][T18660] tipc: Enabled bearer , priority 0 [ 294.274483][T18660] syzkaller0: entered promiscuous mode [ 294.280061][T18660] syzkaller0: entered allmulticast mode [ 294.299973][T18660] tipc: Resetting bearer [ 294.313483][T18658] tipc: Resetting bearer [ 294.325323][T18658] tipc: Disabling bearer [ 294.377473][ T10] hid_parser_main: 25 callbacks suppressed [ 294.377491][ T10] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 294.391421][ T10] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 294.400286][ T10] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 294.409097][ T10] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 294.443349][T18676] tipc: Enabled bearer , priority 0 [ 294.450545][T18676] syzkaller0: entered promiscuous mode [ 294.456294][T18676] syzkaller0: entered allmulticast mode [ 294.466798][T18676] tipc: Resetting bearer [ 294.473889][T18675] tipc: Resetting bearer [ 294.480354][T18675] tipc: Disabling bearer [ 295.199255][T18691] __nla_validate_parse: 34 callbacks suppressed [ 295.199273][T18691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5680'. [ 295.214826][T18691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5680'. [ 295.231749][T18700] geneve3: entered promiscuous mode [ 295.237040][T18700] geneve3: entered allmulticast mode [ 295.244893][T18691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5680'. [ 295.261242][T18702] tipc: Enabled bearer , priority 0 [ 295.269643][T18702] syzkaller0: entered promiscuous mode [ 295.275386][T18702] syzkaller0: entered allmulticast mode [ 295.292436][T18702] tipc: Resetting bearer [ 295.300054][T18701] tipc: Resetting bearer [ 295.314393][T18701] tipc: Disabling bearer [ 295.324871][T18704] tipc: Enabled bearer , priority 0 [ 295.332199][T18704] syzkaller0: entered promiscuous mode [ 295.337758][T18704] syzkaller0: entered allmulticast mode [ 295.345996][T18704] tipc: Resetting bearer [ 295.352363][T18703] tipc: Resetting bearer [ 295.368688][T18703] tipc: Disabling bearer [ 296.270995][T18729] netlink: 'syz.5.5694': attribute type 10 has an invalid length. [ 296.352810][T18735] tipc: Enabled bearer , priority 0 [ 296.361277][T18735] syzkaller0: entered promiscuous mode [ 296.366915][T18735] syzkaller0: entered allmulticast mode [ 296.378486][T18735] tipc: Resetting bearer [ 296.385276][T18737] tipc: Enabled bearer , priority 0 [ 296.392124][T18733] tipc: Resetting bearer [ 296.399874][T18733] tipc: Disabling bearer [ 296.406669][T18737] syzkaller0: entered promiscuous mode [ 296.412221][T18737] syzkaller0: entered allmulticast mode [ 296.421380][T18737] tipc: Resetting bearer [ 296.428714][T18736] tipc: Resetting bearer [ 296.435360][T18736] tipc: Disabling bearer [ 296.622738][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5705'. [ 296.650003][T18750] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 296.658469][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 296.658488][ T29] audit: type=1400 audit(1756853286.277:12781): avc: denied { connect } for pid=18751 comm="syz.3.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.697408][ T29] audit: type=1400 audit(1756853286.317:12782): avc: denied { read } for pid=18751 comm="syz.3.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.723744][ T29] audit: type=1400 audit(1756853286.357:12783): avc: denied { append } for pid=18755 comm="syz.4.5708" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.752707][ T29] audit: type=1400 audit(1756853286.377:12784): avc: denied { kexec_image_load } for pid=18755 comm="syz.4.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 296.833089][ T29] audit: type=1326 audit(1756853286.457:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 296.856917][ T29] audit: type=1326 audit(1756853286.457:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 296.884290][ T29] audit: type=1326 audit(1756853286.467:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 296.908200][ T29] audit: type=1326 audit(1756853286.467:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 296.931984][ T29] audit: type=1326 audit(1756853286.507:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 296.955774][ T29] audit: type=1326 audit(1756853286.507:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.3.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0bbebe9 code=0x7ffc0000 [ 297.056365][T18769] tipc: Enabled bearer , priority 0 [ 297.072104][T18769] syzkaller0: entered promiscuous mode [ 297.077660][T18769] syzkaller0: entered allmulticast mode [ 297.111647][T18769] tipc: Resetting bearer [ 297.133477][T18771] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5714'. [ 297.173621][T18768] tipc: Resetting bearer [ 297.181022][T18768] tipc: Disabling bearer [ 297.233627][T18771] 0{X: renamed from gretap0 [ 297.287646][T18771] 0{X: entered allmulticast mode [ 297.293867][T18771] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 297.786407][T18762] Set syz1 is full, maxelem 65536 reached [ 298.055092][T18793] geneve3: entered promiscuous mode [ 298.060400][T18793] geneve3: entered allmulticast mode [ 298.094213][T18797] tipc: Enabled bearer , priority 0 [ 298.101767][T18797] syzkaller0: entered promiscuous mode [ 298.107365][T18797] syzkaller0: entered allmulticast mode [ 298.117665][T18797] tipc: Resetting bearer [ 298.131257][T18796] tipc: Resetting bearer [ 298.140768][T18796] tipc: Disabling bearer [ 298.147409][T18799] netlink: 'syz.2.5725': attribute type 10 has an invalid length. [ 298.155511][T18799] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5725'. [ 298.305133][T18814] tipc: Enabled bearer , priority 0 [ 298.312453][T18814] syzkaller0: entered promiscuous mode [ 298.318054][T18814] syzkaller0: entered allmulticast mode [ 298.334117][T18814] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.352624][T18814] tipc: Resetting bearer [ 298.359284][T18813] tipc: Resetting bearer [ 298.380615][T18813] tipc: Disabling bearer [ 298.394344][T18818] tipc: Enabled bearer , priority 0 [ 298.401456][T18818] syzkaller0: entered promiscuous mode [ 298.406990][T18818] syzkaller0: entered allmulticast mode [ 298.434101][T18818] tipc: Resetting bearer [ 298.440751][T18817] tipc: Resetting bearer [ 298.447970][T18817] tipc: Disabling bearer [ 298.643258][ C1] ================================================================== [ 298.651749][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 298.658973][ C1] [ 298.659488][T18833] tipc: Enabled bearer , priority 0 [ 298.661402][ C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0: [ 298.661425][ C1] wq_worker_tick+0x60/0x230 [ 298.681356][ C1] sched_tick+0x11a/0x270 [ 298.685722][ C1] update_process_times+0x15f/0x190 [ 298.691044][ C1] tick_nohz_handler+0x249/0x2d0 [ 298.696176][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 298.701438][ C1] hrtimer_interrupt+0x21a/0x460 [ 298.706388][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 298.712477][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 298.718121][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.724115][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 298.729149][ C1] process_scheduled_works+0x486/0x9d0 [ 298.734807][ C1] worker_thread+0x582/0x770 [ 298.739421][ C1] kthread+0x486/0x510 [ 298.743512][ C1] ret_from_fork+0xda/0x150 [ 298.748022][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.752820][ C1] [ 298.755159][ C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1: [ 298.763677][ C1] wq_worker_tick+0x60/0x230 [ 298.768362][ C1] sched_tick+0x11a/0x270 [ 298.772732][ C1] update_process_times+0x15f/0x190 [ 298.777957][ C1] tick_nohz_handler+0x249/0x2d0 [ 298.783081][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 298.788279][ C1] hrtimer_interrupt+0x21a/0x460 [ 298.793221][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 298.799120][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 298.804836][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.810905][ C1] queue_work_on+0x102/0x160 [ 298.815581][ C1] tty_insert_flip_string_and_push_buffer+0x1ce/0x1f0 [ 298.822439][ C1] pty_write+0x70/0x90 [ 298.826525][ C1] tty_put_char+0x8c/0xc0 [ 298.831036][ C1] __process_echoes+0x12a/0x6b0 [ 298.836004][ C1] n_tty_receive_buf_common+0x8e4/0xbe0 [ 298.841635][ C1] n_tty_receive_buf2+0x33/0x40 [ 298.846481][ C1] tty_ldisc_receive_buf+0x66/0xf0 [ 298.851598][ C1] tty_port_default_receive_buf+0x59/0x90 [ 298.857323][ C1] flush_to_ldisc+0x145/0x340 [ 298.862004][ C1] process_scheduled_works+0x4ce/0x9d0 [ 298.867465][ C1] worker_thread+0x582/0x770 [ 298.872162][ C1] kthread+0x486/0x510 [ 298.876316][ C1] ret_from_fork+0xda/0x150 [ 298.880817][ C1] ret_from_fork_asm+0x1a/0x30 [ 298.885580][ C1] [ 298.887903][ C1] value changed: 0x000000000031be60 -> 0x000000000031e570 [ 298.895008][ C1] [ 298.897326][ C1] Reported by Kernel Concurrency Sanitizer on: [ 298.903562][ C1] CPU: 1 UID: 0 PID: 15839 Comm: kworker/u8:16 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.915374][ C1] Tainted: [W]=WARN [ 298.919185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.929241][ C1] Workqueue: events_unbound flush_to_ldisc [ 298.935158][ C1] ================================================================== [ 298.971279][T18833] tipc: Disabling bearer