last executing test programs: 1.251786826s ago: executing program 3 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) 650.720385ms ago: executing program 0 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x194, &(0x7f0000000740)=ANY=[@ANYBLOB="580000800000000000000000010000009500000000000076"], &(0x7f0000000780)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = socket(0x15, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f00001d8000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r1, 0xf19c8000) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, 0x0, 0x2007) r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r4, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@generic="c1cbe483ab2d556aeef09e8bc1881cbbf81b0c3f63d9c21df149524dd9839c9e339369df07c1b9164ff2963486c97aae3ac778c460f2ae5c08fefdad9ec689fb9af1fff4e62999d92eccba9d6d710df861feeea7997c471ae37184cbb26fcd196205da0d11260f83e5abdfdac73c6319fbf74e2ebcca4051877d75c509f21716322e76b1a90bd76d3e06eaa8c0a6513b666395e5c7"]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x6011, r1, 0x0) 595.414571ms ago: executing program 1 (id=1110): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ad8, 0x8}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xe3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) 535.473157ms ago: executing program 1 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 508.57476ms ago: executing program 1 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000a814143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000400cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000a84da170352d8b4b0e1c8c2a2d5be7e3ae4f0c76d411c24f9d51851fd2d802db803e070bf49d3a5f40516c76cc89a299fe217bfce105e03293082f2187acdd51c5d1a48352e0e0374e94167a873ff4205e27e8cb755d727ea635af186fb94712834e9e3201c926fc39667a5e33f7266e9b254f6fd981f58962bd4a84b1", @ANYBLOB="4000990014000300090000000000000000000000000008001400010000000000000000000000ffff00000000"], 0x44}}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@delsa={0x28, 0x11, 0x200, 0x70bd2d, 0x25dfdbfb, {@in=@broadcast, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x0, 0x1, {0x2}}, 0x14}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x3}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r6, 0x15f1, 0x6184, 0x23, 0x0, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x100) ioctl$SG_BLKTRACESTART(r7, 0x1274, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000380)=0x28) 438.132887ms ago: executing program 1 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 437.754127ms ago: executing program 2 (id=1119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 424.021608ms ago: executing program 1 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010025bd7000fbd45f251c208008ff01ff0a000e000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xc, 0xf9, 0x7, 0x5c, @private1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8, 0x28, 0x7, 0x3}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000580)='btrfs_trigger_flush\x00', r5, 0x0, 0x10000004}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ec7238000000000000080000000c00028008000380040001801800018014000200756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x7c, r9, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}}, 0x4004011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb3ce948140ba8a07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r10}, 0x18) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x403fc}, {&(0x7f00000001c0)=""/227, 0xe3}, &(0x7f0000000480)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x17, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x5}, &(0x7f0000000080)=0x10, 0x0, 0x5, 0x8000, 0x3, 0x1, 0x18, 0xfffffffffffffffd}}], 0xa0, 0x20040000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 372.249483ms ago: executing program 1 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x648c46, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x808c, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=f']) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x140200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={0x0, r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x99bc56, 0x0, 0x1, 0x0, &(0x7f0000000200)) chdir(0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x1d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000080)=""/16) prctl$PR_SET_TSC(0x1a, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000200)=0x101, 0x4) eventfd(0x7) 371.376773ms ago: executing program 3 (id=1122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x7b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="7e7c03910eaa5c32bdd782a9992c0ec72754c1edb6b0aded5d913d9f152503fc5dcb6ca5e4b5dd4b1a6530ede99447325cab9e5cb5b5c7035e8a3a3e6c9e261cf7f1d51a0a464f40b5e6f109dc53d891544311da3c8260ef68a8bfe36e91ea3d4d598f583ebf2f6cd275651dc779dfd68071211f7cad79e15791b2f59fb225b3aad04d2baba97dc41401fbf7e593e696", 0x90}, {&(0x7f0000000780)="13b4ecd61cbdb54fc1842626f0acc455e209", 0x12}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8", 0x5c, 0x14008885, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0x1, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) 370.867623ms ago: executing program 4 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x810) 347.091925ms ago: executing program 3 (id=1124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ad8, 0x8}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) 312.159139ms ago: executing program 4 (id=1125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0, 0x0, 0x2144}, 0x18) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffbffff}, 0x18) socket$packet(0x11, 0x2, 0x300) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 311.401549ms ago: executing program 3 (id=1126): bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd9d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r2, 0x0, 0x40000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddf, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffc0}}}}]}, 0x38}}, 0x80) 310.820879ms ago: executing program 2 (id=1127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) 246.587015ms ago: executing program 2 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 245.670505ms ago: executing program 2 (id=1129): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) syz_clone3(&(0x7f0000000400)={0x10000100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0, {0x2b}, &(0x7f0000000100)=""/216, 0xd8, &(0x7f0000000240)=""/81, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r0, 0xe, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[], 0x53) r9 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r9, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000840)=""/187, 0xbb}, {&(0x7f0000000900)=""/6, 0x6}, {&(0x7f0000000940)=""/104, 0x68}], 0x6, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1, &(0x7f0000002cc0)=""/148, 0x94}, 0xfffffffe}, {{&(0x7f0000002d80)=@rc={0x1f, @none}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002ec0)=""/76, 0x4c}, {&(0x7f0000002f40)=""/33, 0x21}, {&(0x7f0000002f80)=""/10, 0xa}, {&(0x7f0000002fc0)=""/145, 0x91}, {&(0x7f0000003080)=""/100, 0x64}], 0x6, &(0x7f0000003180)=""/142, 0x8e}, 0x8}, {{&(0x7f0000003240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/13, 0xd}, {&(0x7f0000003300)=""/107, 0x6b}], 0x2}, 0xec}, {{&(0x7f00000033c0)=@rc, 0x80, &(0x7f00000048c0)=[{&(0x7f0000003440)=""/119, 0x77}, {&(0x7f00000034c0)=""/101, 0x65}, {&(0x7f0000003540)=""/191, 0xbf}, {&(0x7f0000003600)=""/211, 0xd3}, {&(0x7f0000003700)=""/4096, 0x1000}, {0xfffffffffffffffe}, {&(0x7f0000004700)=""/215, 0xd7}, {&(0x7f0000004800)=""/189, 0xbd}], 0x8, &(0x7f0000004940)=""/56, 0x38}, 0x2}, {{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004a00)=""/112, 0x70}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/85, 0x55}, {&(0x7f0000005b00)=""/30, 0x1e}, {&(0x7f0000005b40)=""/32, 0x20}, {&(0x7f0000005b80)=""/119, 0x77}], 0x6, &(0x7f0000005c80)=""/101, 0x65}, 0x7fff}, {{&(0x7f0000005d00), 0x80, &(0x7f0000005f40)=[{&(0x7f0000005d80)=""/194, 0xc2}, {&(0x7f0000005e80)=""/18, 0x12}, {&(0x7f0000005ec0)=""/67, 0x43}], 0x3, &(0x7f0000005f80)=""/204, 0xcc}, 0x7}, {{&(0x7f0000006080)=@qipcrtr, 0x80, &(0x7f0000006140)=[{&(0x7f0000006100)=""/46, 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006180)=""/14, 0xe}, {&(0x7f00000061c0)=""/150, 0x96}, {&(0x7f0000006280)=""/46, 0x2e}, {&(0x7f00000062c0)=""/152, 0x98}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/62, 0x3e}], 0x6, &(0x7f0000007440)=""/197, 0xc5}, 0x3}], 0x9, 0x41, &(0x7f0000007780)={0x0, 0x989680}) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000300)={r8, r2, 0xfffffc01}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f6261746164760068000380"], 0x94}}, 0x804) 212.648059ms ago: executing program 2 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000a814143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000400cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="4000990014000300090000000000000000000000000008001400010000000000000000000000ffff00000000"], 0x44}}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@delsa={0x28, 0x11, 0x200, 0x70bd2d, 0x25dfdbfb, {@in=@broadcast, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x0, 0x1, {0x2}}, 0x14}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x3}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r6, 0x15f1, 0x6184, 0x23, 0x0, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x100) ioctl$SG_BLKTRACESTART(r7, 0x1274, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000380)=0x28) 211.893909ms ago: executing program 4 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x97}, 0x18) prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0) r3 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r3}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x1034}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xac, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe985, 0x74}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0xfffffffc, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ac}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb778}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$GTP_CMD_ECHOREQ(r5, 0x0, 0x81) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xf8, 0x0, @void}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 160.972824ms ago: executing program 2 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) 160.324004ms ago: executing program 4 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 159.816454ms ago: executing program 4 (id=1134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0xffffdfff, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0x9, 0x1, 0x1, 0x3, 0x10001, 0xb9a9, 0x40}}}}]}, 0x58}}, 0x44840) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 121.077948ms ago: executing program 0 (id=1135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x7b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="7e7c03910eaa5c32bdd782a9992c0ec72754c1edb6b0aded5d913d9f152503fc5dcb6ca5e4b5dd4b1a6530ede99447325cab9e5cb5b5c7035e8a3a3e6c9e261cf7f1d51a0a464f40b5e6f109dc53d891544311da3c8260ef68a8bfe36e91ea3d4d598f583ebf2f6cd275651dc779dfd68071211f7cad79e15791b2f59fb225b3aad04d2baba97dc41401fbf7e593e696", 0x90}, {&(0x7f0000000780)="13b4ecd61cbdb54fc1842626f0acc455e209", 0x12}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8", 0x5c, 0x14008885, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x1, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x5c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) 99.50275ms ago: executing program 0 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x810) 45.128485ms ago: executing program 4 (id=1137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xff}) 44.611005ms ago: executing program 0 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) 40.746756ms ago: executing program 3 (id=1139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d009}, 0x20070004) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ad8, 0x8}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) 33.838307ms ago: executing program 0 (id=1140): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000440)={{0x10001, 0x7}, 0x100, './file0\x00'}) sendfile(r2, r0, 0x0, 0x8000fffffffc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) 943.06µs ago: executing program 3 (id=1141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4a4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x478, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x91c}, @TCA_TBF_PBURST={0x8, 0x7, 0xd19}, @TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PTAB={0x404, 0x3, [0xfffffffc, 0x6, 0x6, 0x9, 0x7, 0x4, 0x3d0, 0x3d, 0xfffffff8, 0x6, 0x5eb, 0x0, 0x3, 0x5, 0x1, 0x80, 0x0, 0xfdf, 0x401, 0x3, 0x2, 0x4, 0x5, 0x7ff, 0x10, 0xa7, 0x101, 0xff, 0x7, 0x4, 0x4, 0xefff0ea4, 0x80000001, 0x3ff, 0x0, 0x3, 0x2, 0xa, 0x14, 0x400, 0x0, 0x10001, 0x6, 0x6, 0x3, 0x4, 0x6, 0x80, 0xff, 0x7, 0x1, 0x0, 0x7, 0x1, 0x401, 0x5, 0x0, 0x1, 0x6, 0x2, 0x2, 0x8, 0x0, 0x5, 0xb, 0x3, 0x2ab, 0xfffeffff, 0x5, 0x3, 0xdb86, 0xfffffffd, 0x8000, 0xfffffffb, 0x8, 0x6, 0x4, 0x0, 0xca7, 0x6, 0xf37, 0x4, 0x9, 0x4, 0x0, 0x962, 0x53, 0xff, 0xa665, 0x9, 0x1, 0x6, 0x2a83, 0x4, 0x5, 0xf7e, 0xea8, 0xcb, 0xfffffff8, 0x800, 0x2, 0x0, 0x9, 0x1000, 0x200, 0x4, 0xfffffff9, 0x0, 0x6, 0x3, 0x7fff, 0xa13, 0x80000000, 0x7, 0xc0000000, 0xf, 0xd7, 0xa6a, 0x10000, 0x9, 0xddb9, 0x8, 0x4, 0x0, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x10001, 0x6, 0x6, 0x4, 0x3, 0x3, 0xa7, 0x6, 0x5, 0xd2, 0x1, 0x80000001, 0x80, 0x2, 0x50, 0x6, 0x7fffffff, 0x8, 0xc4a, 0xfffffffd, 0x67, 0x3, 0x47, 0x7, 0x800, 0x6, 0x3, 0x8, 0xfffffffa, 0xff, 0x6, 0x101, 0x1, 0x8, 0xe1b, 0x6, 0x81, 0x3, 0x39, 0x7, 0xfff, 0x9, 0x6, 0x3, 0x8001, 0x80000000, 0x3, 0x7f, 0x1, 0x7fff, 0x8, 0xbf, 0x6, 0x2, 0x3, 0xc, 0x10, 0x400, 0x10001, 0x3, 0x7, 0x3, 0x5, 0x100, 0xfffffffc, 0x0, 0x101, 0x120, 0x9, 0x3, 0x4, 0x3, 0x1, 0x3, 0xfffffffe, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x0, 0xb4, 0x2, 0x81, 0x8000000, 0x8000, 0x7, 0xffff, 0x0, 0x3, 0xfffeffff, 0xfffffff7, 0x101, 0x9, 0x1ff, 0x8, 0x28e, 0x10, 0x6, 0x8, 0x7fffffff, 0x440, 0x1, 0x0, 0x3, 0x541f, 0x207, 0x2, 0x401, 0x12, 0x2, 0x1, 0x0, 0xb58d, 0x8, 0x7, 0x2, 0x10, 0x4e6, 0x24bf, 0x2, 0x2, 0x1, 0xfffffb8a, 0xffffffff, 0x4, 0x835]}, @TCA_TBF_PBURST={0x8, 0x7, 0x13c}, @TCA_TBF_RATE64={0xc, 0x4, 0xd509f6524773c689}, @TCA_TBF_PBURST={0x8, 0x7, 0x1101}, @TCA_TBF_RATE64={0xc, 0x4, 0x21755f0837e3306f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x0, 0x4, 0x1, 0x4, 0x6}, {0x10, 0x1, 0xac, 0x0, 0x1, 0x1}, 0x0, 0x7, 0x83e}}]}}]}, 0x4a4}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000040)="441f", 0x2) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x400, 0xc20c, 0x4, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={r10, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x4}, &(0x7f00000001c0)=0x90) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r11, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000100000000902000063ffdbdf25021800"/28], 0x1c}}, 0x40810) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x2000) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r8, 0x80000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 0s ago: executing program 0 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0, 0x0, 0x2144}, 0x18) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffbffff}, 0x18) socket$packet(0x11, 0x2, 0x300) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 36.625948][ T29] audit: type=1400 audit(1760001990.054:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.649305][ T29] audit: type=1400 audit(1760001990.084:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.650321][ T3304] cgroup: Unknown subsys name 'net' [ 36.677363][ T29] audit: type=1400 audit(1760001990.104:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.770011][ T3304] cgroup: Unknown subsys name 'cpuset' [ 36.776237][ T3304] cgroup: Unknown subsys name 'rlimit' [ 36.907266][ T29] audit: type=1400 audit(1760001990.334:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.933542][ T29] audit: type=1400 audit(1760001990.334:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.948035][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.954149][ T29] audit: type=1400 audit(1760001990.334:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.954186][ T29] audit: type=1400 audit(1760001990.344:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.998622][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.003525][ T29] audit: type=1400 audit(1760001990.344:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.037024][ T29] audit: type=1400 audit(1760001990.344:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.060650][ T29] audit: type=1400 audit(1760001990.404:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.006454][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 39.057236][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.064374][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.071647][ T3320] bridge_slave_0: entered allmulticast mode [ 39.078268][ T3320] bridge_slave_0: entered promiscuous mode [ 39.085698][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.092998][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.100193][ T3320] bridge_slave_1: entered allmulticast mode [ 39.106779][ T3320] bridge_slave_1: entered promiscuous mode [ 39.144710][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.160001][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.201610][ T3320] team0: Port device team_slave_0 added [ 39.218355][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 39.227814][ T3320] team0: Port device team_slave_1 added [ 39.259422][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 39.298302][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.305342][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.331424][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.342330][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 39.362857][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.369881][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.396012][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.409512][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 39.458005][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.465180][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.472326][ T3315] bridge_slave_0: entered allmulticast mode [ 39.478687][ T3315] bridge_slave_0: entered promiscuous mode [ 39.494436][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.501556][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.508711][ T3314] bridge_slave_0: entered allmulticast mode [ 39.515258][ T3314] bridge_slave_0: entered promiscuous mode [ 39.521765][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.528934][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.536272][ T3315] bridge_slave_1: entered allmulticast mode [ 39.542699][ T3315] bridge_slave_1: entered promiscuous mode [ 39.560852][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.567923][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.575137][ T3314] bridge_slave_1: entered allmulticast mode [ 39.581638][ T3314] bridge_slave_1: entered promiscuous mode [ 39.628309][ T3320] hsr_slave_0: entered promiscuous mode [ 39.634405][ T3320] hsr_slave_1: entered promiscuous mode [ 39.641482][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.652065][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.662203][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.673374][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.680453][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.687770][ T3313] bridge_slave_0: entered allmulticast mode [ 39.694307][ T3313] bridge_slave_0: entered promiscuous mode [ 39.707476][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.736077][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.743212][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.750549][ T3313] bridge_slave_1: entered allmulticast mode [ 39.756941][ T3313] bridge_slave_1: entered promiscuous mode [ 39.777926][ T3315] team0: Port device team_slave_0 added [ 39.788534][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.795757][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.802930][ T3322] bridge_slave_0: entered allmulticast mode [ 39.809431][ T3322] bridge_slave_0: entered promiscuous mode [ 39.824656][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.834487][ T3315] team0: Port device team_slave_1 added [ 39.840919][ T3314] team0: Port device team_slave_0 added [ 39.846659][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.853844][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.861191][ T3322] bridge_slave_1: entered allmulticast mode [ 39.867672][ T3322] bridge_slave_1: entered promiscuous mode [ 39.875017][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.897189][ T3314] team0: Port device team_slave_1 added [ 39.931363][ T3313] team0: Port device team_slave_0 added [ 39.939895][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.946866][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.972912][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.990727][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.003744][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.013590][ T3313] team0: Port device team_slave_1 added [ 40.024490][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.031492][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.057660][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.074281][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.081261][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.107339][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.135799][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.142800][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.168813][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.180167][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.187227][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.213535][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.234253][ T3322] team0: Port device team_slave_0 added [ 40.240258][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.247214][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.273197][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.293468][ T3322] team0: Port device team_slave_1 added [ 40.332860][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.339888][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.365936][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.381304][ T3315] hsr_slave_0: entered promiscuous mode [ 40.387675][ T3315] hsr_slave_1: entered promiscuous mode [ 40.393905][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 40.399684][ T3315] Cannot create hsr debugfs directory [ 40.415102][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.422222][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.448164][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.463435][ T3314] hsr_slave_0: entered promiscuous mode [ 40.469714][ T3314] hsr_slave_1: entered promiscuous mode [ 40.475545][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 40.481388][ T3314] Cannot create hsr debugfs directory [ 40.489397][ T3313] hsr_slave_0: entered promiscuous mode [ 40.495433][ T3313] hsr_slave_1: entered promiscuous mode [ 40.501476][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 40.507204][ T3313] Cannot create hsr debugfs directory [ 40.567309][ T3322] hsr_slave_0: entered promiscuous mode [ 40.573416][ T3322] hsr_slave_1: entered promiscuous mode [ 40.579355][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 40.585094][ T3322] Cannot create hsr debugfs directory [ 40.638960][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.675614][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.693211][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.704954][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.774946][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.783969][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.793153][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.805703][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.840783][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.849790][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.859441][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.868894][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.896243][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.913681][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.922536][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.932130][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.955775][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.964950][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.976335][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.991008][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.008924][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.046172][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.078792][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.091048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.098237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.110639][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.117805][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.146924][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.157137][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.177810][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.191479][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.201489][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.209466][ T1764] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.216747][ T1764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.229456][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.248960][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.259524][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.272006][ T1764] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.279141][ T1764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.311771][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.323838][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.331065][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.348172][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.355280][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.364906][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.372090][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.381165][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.388327][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.398379][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.418377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.425517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.434484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.441591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.469444][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.488079][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.502332][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.520122][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.580783][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.656572][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.679582][ T3320] veth0_vlan: entered promiscuous mode [ 41.711454][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.727251][ T3313] veth0_vlan: entered promiscuous mode [ 41.734659][ T3320] veth1_vlan: entered promiscuous mode [ 41.745056][ T3313] veth1_vlan: entered promiscuous mode [ 41.768105][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.777409][ T3320] veth0_macvtap: entered promiscuous mode [ 41.801298][ T3320] veth1_macvtap: entered promiscuous mode [ 41.830126][ T3313] veth0_macvtap: entered promiscuous mode [ 41.855042][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.870127][ T3313] veth1_macvtap: entered promiscuous mode [ 41.878302][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.906720][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.917174][ T3322] veth0_vlan: entered promiscuous mode [ 41.923412][ T3315] veth0_vlan: entered promiscuous mode [ 41.933893][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.945872][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.954969][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.965712][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.977529][ T3315] veth1_vlan: entered promiscuous mode [ 41.983942][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.995435][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.008395][ T3322] veth1_vlan: entered promiscuous mode [ 42.020117][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.034664][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 42.034753][ T29] audit: type=1400 audit(1760001995.464:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.9YL2iA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.052326][ T3315] veth0_macvtap: entered promiscuous mode [ 42.071230][ T29] audit: type=1400 audit(1760001995.464:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.086103][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.093264][ T29] audit: type=1400 audit(1760001995.464:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.9YL2iA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.110894][ T3314] veth0_vlan: entered promiscuous mode [ 42.127552][ T29] audit: type=1400 audit(1760001995.464:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.154767][ T29] audit: type=1400 audit(1760001995.474:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.9YL2iA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.181575][ T29] audit: type=1400 audit(1760001995.474:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.9YL2iA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 42.209050][ T29] audit: type=1400 audit(1760001995.474:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.229793][ T29] audit: type=1400 audit(1760001995.504:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.252586][ T29] audit: type=1400 audit(1760001995.504:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 42.276751][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.277127][ T3315] veth1_macvtap: entered promiscuous mode [ 42.302953][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.319692][ T3322] veth0_macvtap: entered promiscuous mode [ 42.328902][ T29] audit: type=1400 audit(1760001995.754:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.340513][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.367627][ T3322] veth1_macvtap: entered promiscuous mode [ 42.375227][ T3314] veth1_vlan: entered promiscuous mode [ 42.393053][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.406605][ T3314] veth0_macvtap: entered promiscuous mode [ 42.423095][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.431774][ T3314] veth1_macvtap: entered promiscuous mode [ 42.443528][ T3488] Zero length message leads to an empty skb [ 42.444396][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.453917][ T3489] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 42.473620][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.491406][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.515049][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.522633][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.555618][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 42.561867][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.586317][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 42.593199][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628337][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.639557][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 42.661060][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.684055][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.719540][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.730953][ T3492] infiniband syz0: set active [ 42.735761][ T3492] infiniband syz0: added ip6gre0 [ 42.740777][ T23] ip6gre0 speed is unknown, defaulting to 1000 [ 42.798247][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.818723][ T3492] RDS/IB: syz0: added [ 42.838469][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.856199][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.865641][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.875040][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 42.924073][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 43.037965][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 43.107011][ T3518] tipc: Started in network mode [ 43.112013][ T3518] tipc: Node identity 32991df178c7, cluster identity 4711 [ 43.119379][ T3518] tipc: Enabled bearer , priority 0 [ 43.139692][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 43.161079][ T3517] tipc: Disabling bearer [ 43.245325][ T3492] ip6gre0 speed is unknown, defaulting to 1000 [ 43.299640][ T3513] lo speed is unknown, defaulting to 1000 [ 43.305525][ T3513] lo speed is unknown, defaulting to 1000 [ 43.328121][ T3513] lo speed is unknown, defaulting to 1000 [ 43.376664][ T3513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.417576][ T3513] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.484971][ T3492] syz.0.7 (3492) used greatest stack depth: 10584 bytes left [ 43.521054][ T3513] lo speed is unknown, defaulting to 1000 [ 43.569884][ T3513] lo speed is unknown, defaulting to 1000 [ 43.639576][ T3513] lo speed is unknown, defaulting to 1000 [ 43.668131][ T3513] lo speed is unknown, defaulting to 1000 [ 43.716065][ T3513] lo speed is unknown, defaulting to 1000 [ 43.768188][ T3549] siw: device registration error -23 [ 44.158693][ T3584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25'. [ 44.201964][ T3584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 44.359514][ T3603] random: crng reseeded on system resumption [ 44.618920][ T3627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 45.262533][ T3652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.414359][ T3656] syzkaller0: entered promiscuous mode [ 45.420036][ T3656] syzkaller0: entered allmulticast mode [ 45.464973][ T3652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.486600][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.509819][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.535642][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.548733][ T3652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.583196][ T3660] infiniband syz0: set active [ 45.587966][ T3660] infiniband syz0: added ip6gre0 [ 45.598497][ T3660] RDS/IB: syz0: added [ 45.602674][ T3395] ip6gre0 speed is unknown, defaulting to 1000 [ 45.609271][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.642953][ T3652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.710487][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.751052][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.778432][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.813403][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.846330][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.867959][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 45.965284][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 46.034399][ T3660] ip6gre0 speed is unknown, defaulting to 1000 [ 46.426972][ T3692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 46.520023][ T3699] random: crng reseeded on system resumption [ 46.738348][ T3689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 46.924091][ T3709] FAULT_INJECTION: forcing a failure. [ 46.924091][ T3709] name failslab, interval 1, probability 0, space 0, times 1 [ 46.936986][ T3709] CPU: 0 UID: 0 PID: 3709 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.937021][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 46.937115][ T3709] Call Trace: [ 46.937123][ T3709] [ 46.937132][ T3709] __dump_stack+0x1d/0x30 [ 46.937159][ T3709] dump_stack_lvl+0xe8/0x140 [ 46.937182][ T3709] dump_stack+0x15/0x1b [ 46.937204][ T3709] should_fail_ex+0x265/0x280 [ 46.937294][ T3709] should_failslab+0x8c/0xb0 [ 46.937348][ T3709] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 46.937385][ T3709] ? __alloc_skb+0x101/0x320 [ 46.937431][ T3709] __alloc_skb+0x101/0x320 [ 46.937459][ T3709] netlink_alloc_large_skb+0xbf/0xf0 [ 46.937485][ T3709] netlink_sendmsg+0x3cf/0x6b0 [ 46.937519][ T3709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.937654][ T3709] __sock_sendmsg+0x142/0x180 [ 46.937675][ T3709] ____sys_sendmsg+0x31e/0x4e0 [ 46.937756][ T3709] ___sys_sendmsg+0x17b/0x1d0 [ 46.937832][ T3709] __x64_sys_sendmsg+0xd4/0x160 [ 46.937902][ T3709] x64_sys_call+0x191e/0x3000 [ 46.937930][ T3709] do_syscall_64+0xd2/0x200 [ 46.937954][ T3709] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.937982][ T3709] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.938061][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.938083][ T3709] RIP: 0033:0x7fd60a81eec9 [ 46.938155][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.938175][ T3709] RSP: 002b:00007fd609287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.938205][ T3709] RAX: ffffffffffffffda RBX: 00007fd60aa75fa0 RCX: 00007fd60a81eec9 [ 46.938222][ T3709] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 46.938238][ T3709] RBP: 00007fd609287090 R08: 0000000000000000 R09: 0000000000000000 [ 46.938254][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.938270][ T3709] R13: 00007fd60aa76038 R14: 00007fd60aa75fa0 R15: 00007ffc28c699e8 [ 46.938374][ T3709] [ 47.355742][ T3719] tipc: Started in network mode [ 47.360763][ T3719] tipc: Node identity 3a155e660f1c, cluster identity 4711 [ 47.368015][ T3719] tipc: Enabled bearer , priority 0 [ 47.402484][ T3719] tipc: Resetting bearer [ 47.422455][ T3716] tipc: Disabling bearer [ 47.497336][ T3726] siw: device registration error -23 [ 47.768784][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 47.768803][ T29] audit: type=1400 audit(1760002001.194:183): avc: denied { kexec_image_load } for pid=3745 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 48.056553][ T3769] tipc: Started in network mode [ 48.062064][ T3769] tipc: Node identity 32a33fc5b1bd, cluster identity 4711 [ 48.069574][ T3769] tipc: Enabled bearer , priority 0 [ 48.161433][ T3769] tipc: Resetting bearer [ 48.186254][ T3768] tipc: Disabling bearer [ 49.063049][ T3818] random: crng reseeded on system resumption [ 49.398440][ T29] audit: type=1400 audit(1760002002.824:184): avc: denied { create } for pid=3858 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.431073][ T3862] random: crng reseeded on system resumption [ 49.467873][ T29] audit: type=1400 audit(1760002002.854:185): avc: denied { accept } for pid=3858 comm="syz.2.106" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.488236][ T29] audit: type=1400 audit(1760002002.854:186): avc: denied { setopt } for pid=3858 comm="syz.2.106" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.508419][ T29] audit: type=1400 audit(1760002002.854:187): avc: denied { create } for pid=3858 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.519881][ T3868] FAULT_INJECTION: forcing a failure. [ 49.519881][ T3868] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.527900][ T29] audit: type=1400 audit(1760002002.854:188): avc: denied { create } for pid=3858 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.540968][ T3868] CPU: 1 UID: 0 PID: 3868 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.541083][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.541099][ T3868] Call Trace: [ 49.541109][ T3868] [ 49.541122][ T3868] __dump_stack+0x1d/0x30 [ 49.541153][ T3868] dump_stack_lvl+0xe8/0x140 [ 49.541262][ T3868] dump_stack+0x15/0x1b [ 49.541286][ T3868] should_fail_ex+0x265/0x280 [ 49.541335][ T3868] should_fail+0xb/0x20 [ 49.541378][ T3868] should_fail_usercopy+0x1a/0x20 [ 49.541413][ T3868] _copy_to_user+0x20/0xa0 [ 49.541447][ T3868] simple_read_from_buffer+0xb5/0x130 [ 49.541478][ T3868] proc_fail_nth_read+0x10e/0x150 [ 49.541573][ T3868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.541612][ T3868] vfs_read+0x1a8/0x770 [ 49.541641][ T3868] ? __rcu_read_unlock+0x4f/0x70 [ 49.541677][ T3868] ? __fget_files+0x184/0x1c0 [ 49.541715][ T3868] ksys_read+0xda/0x1a0 [ 49.541742][ T3868] __x64_sys_read+0x40/0x50 [ 49.541775][ T3868] x64_sys_call+0x27c0/0x3000 [ 49.541837][ T3868] do_syscall_64+0xd2/0x200 [ 49.541870][ T3868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.541908][ T3868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.541938][ T3868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.541999][ T3868] RIP: 0033:0x7ffb885bd8dc [ 49.542021][ T3868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.542122][ T3868] RSP: 002b:00007ffb8701f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.542175][ T3868] RAX: ffffffffffffffda RBX: 00007ffb88815fa0 RCX: 00007ffb885bd8dc [ 49.542202][ T3868] RDX: 000000000000000f RSI: 00007ffb8701f0a0 RDI: 0000000000000003 [ 49.542219][ T3868] RBP: 00007ffb8701f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.542235][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.542252][ T3868] R13: 00007ffb88816038 R14: 00007ffb88815fa0 R15: 00007ffe0d198588 [ 49.542279][ T3868] [ 49.569122][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 49.570481][ T29] audit: type=1400 audit(1760002002.854:189): avc: denied { connect } for pid=3858 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.702519][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 49.716513][ T29] audit: type=1326 audit(1760002002.944:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.1.110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3c315eec9 code=0x0 [ 49.982879][ T29] audit: type=1326 audit(1760002003.384:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 50.006305][ T29] audit: type=1326 audit(1760002003.384:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 50.069775][ T3886] uprobe: syz.4.118:3886 failed to unregister, leaking uprobe [ 50.185162][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 50.209446][ T3893] random: crng reseeded on system resumption [ 50.304089][ T3896] loop4: detected capacity change from 0 to 128 [ 50.319651][ T3896] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.349286][ T3896] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.479478][ T3911] syz0: rxe_newlink: already configured on ip6gre0 [ 50.517562][ T3916] siw: device registration error -23 [ 51.123594][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.312858][ T3952] siw: device registration error -23 [ 51.326032][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 51.397518][ T3956] netlink: 388 bytes leftover after parsing attributes in process `syz.1.145'. [ 51.695931][ T3966] tipc: Enabled bearer , priority 0 [ 51.722633][ T3966] tipc: Resetting bearer [ 51.730468][ T3965] tipc: Disabling bearer [ 52.149298][ T4018] FAULT_INJECTION: forcing a failure. [ 52.149298][ T4018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.162439][ T4018] CPU: 1 UID: 0 PID: 4018 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.162465][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.162478][ T4018] Call Trace: [ 52.162502][ T4018] [ 52.162510][ T4018] __dump_stack+0x1d/0x30 [ 52.162530][ T4018] dump_stack_lvl+0xe8/0x140 [ 52.162549][ T4018] dump_stack+0x15/0x1b [ 52.162570][ T4018] should_fail_ex+0x265/0x280 [ 52.162662][ T4018] should_fail+0xb/0x20 [ 52.162698][ T4018] should_fail_usercopy+0x1a/0x20 [ 52.162797][ T4018] _copy_from_iter+0xd2/0xe80 [ 52.162818][ T4018] ? __build_skb_around+0x1ab/0x200 [ 52.162849][ T4018] ? __alloc_skb+0x223/0x320 [ 52.162876][ T4018] netlink_sendmsg+0x471/0x6b0 [ 52.162988][ T4018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.163057][ T4018] __sock_sendmsg+0x142/0x180 [ 52.163076][ T4018] ____sys_sendmsg+0x31e/0x4e0 [ 52.163179][ T4018] ___sys_sendmsg+0x17b/0x1d0 [ 52.163229][ T4018] __x64_sys_sendmsg+0xd4/0x160 [ 52.163307][ T4018] x64_sys_call+0x191e/0x3000 [ 52.163465][ T4018] do_syscall_64+0xd2/0x200 [ 52.163559][ T4018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.163592][ T4018] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.163619][ T4018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.163669][ T4018] RIP: 0033:0x7ff9e367eec9 [ 52.163743][ T4018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.163760][ T4018] RSP: 002b:00007ff9e20df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.163779][ T4018] RAX: ffffffffffffffda RBX: 00007ff9e38d5fa0 RCX: 00007ff9e367eec9 [ 52.163859][ T4018] RDX: 0000000000004004 RSI: 0000200000000180 RDI: 0000000000000005 [ 52.163927][ T4018] RBP: 00007ff9e20df090 R08: 0000000000000000 R09: 0000000000000000 [ 52.163939][ T4018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.163952][ T4018] R13: 00007ff9e38d6038 R14: 00007ff9e38d5fa0 R15: 00007ffe1859b788 [ 52.163975][ T4018] [ 52.367886][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 52.433767][ T4025] tipc: Enabled bearer , priority 0 [ 52.463027][ T4025] syzkaller0: entered promiscuous mode [ 52.468567][ T4025] syzkaller0: entered allmulticast mode [ 52.585644][ T4024] tipc: Resetting bearer [ 52.660447][ T4024] tipc: Disabling bearer [ 52.782912][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 52.782940][ T29] audit: type=1326 audit(1760002006.214:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.4.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9e367eec9 code=0x0 [ 52.834320][ T4050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.897821][ T4055] FAULT_INJECTION: forcing a failure. [ 52.897821][ T4055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.910956][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.911068][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.911084][ T4055] Call Trace: [ 52.911093][ T4055] [ 52.911103][ T4055] __dump_stack+0x1d/0x30 [ 52.911131][ T4055] dump_stack_lvl+0xe8/0x140 [ 52.911156][ T4055] dump_stack+0x15/0x1b [ 52.911175][ T4055] should_fail_ex+0x265/0x280 [ 52.911241][ T4055] should_fail+0xb/0x20 [ 52.911271][ T4055] should_fail_usercopy+0x1a/0x20 [ 52.911291][ T4055] _copy_from_iter+0xd2/0xe80 [ 52.911318][ T4055] ? __build_skb_around+0x1ab/0x200 [ 52.911351][ T4055] ? __alloc_skb+0x223/0x320 [ 52.911493][ T4055] netlink_sendmsg+0x471/0x6b0 [ 52.911535][ T4055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.911639][ T4055] __sock_sendmsg+0x142/0x180 [ 52.911659][ T4055] ____sys_sendmsg+0x31e/0x4e0 [ 52.911700][ T4055] ___sys_sendmsg+0x17b/0x1d0 [ 52.911870][ T4055] __x64_sys_sendmsg+0xd4/0x160 [ 52.911973][ T4055] x64_sys_call+0x191e/0x3000 [ 52.911997][ T4055] do_syscall_64+0xd2/0x200 [ 52.912079][ T4055] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.912223][ T4055] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.912270][ T4055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.912293][ T4055] RIP: 0033:0x7ffb885beec9 [ 52.912457][ T4055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.912475][ T4055] RSP: 002b:00007ffb8701f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.912495][ T4055] RAX: ffffffffffffffda RBX: 00007ffb88815fa0 RCX: 00007ffb885beec9 [ 52.912507][ T4055] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 52.912520][ T4055] RBP: 00007ffb8701f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.912532][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.912544][ T4055] R13: 00007ffb88816038 R14: 00007ffb88815fa0 R15: 00007ffe0d198588 [ 52.912611][ T4055] [ 53.265765][ T4064] tipc: Started in network mode [ 53.270825][ T4064] tipc: Node identity 42e2ec2d581c, cluster identity 4711 [ 53.278086][ T4064] tipc: Enabled bearer , priority 0 [ 53.304443][ T29] audit: type=1400 audit(1760002006.734:297): avc: denied { getopt } for pid=4065 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.323883][ T29] audit: type=1400 audit(1760002006.734:298): avc: denied { name_connect } for pid=4065 comm="syz.2.185" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.350804][ T4064] syzkaller0: entered promiscuous mode [ 53.356325][ T4064] syzkaller0: entered allmulticast mode [ 53.369118][ T29] audit: type=1400 audit(1760002006.794:299): avc: denied { ioctl } for pid=4065 comm="syz.2.185" path="socket:[6548]" dev="sockfs" ino=6548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.394517][ T4063] tipc: Resetting bearer [ 53.403052][ T4063] tipc: Disabling bearer [ 53.471228][ T29] audit: type=1400 audit(1760002006.904:300): avc: denied { ioctl } for pid=4074 comm="syz.3.188" path="socket:[6571]" dev="sockfs" ino=6571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.537387][ T4080] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 53.542315][ T29] audit: type=1400 audit(1760002006.954:301): avc: denied { setopt } for pid=4074 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.745148][ T4108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.194'. [ 53.983127][ T4133] tipc: Enabled bearer , priority 0 [ 53.990645][ T4133] syzkaller0: entered promiscuous mode [ 53.996248][ T4133] syzkaller0: entered allmulticast mode [ 54.011577][ T4130] tipc: Resetting bearer [ 54.044841][ T4130] tipc: Disabling bearer [ 54.105224][ T29] audit: type=1326 audit(1760002007.534:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.3.202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60a81eec9 code=0x0 [ 54.151344][ T4146] veth0: entered promiscuous mode [ 54.162386][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 54.206136][ T29] audit: type=1400 audit(1760002007.634:303): avc: denied { write } for pid=4152 comm="syz.0.205" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.227762][ T29] audit: type=1400 audit(1760002007.634:304): avc: denied { write } for pid=4152 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.247837][ T29] audit: type=1400 audit(1760002007.634:305): avc: denied { read } for pid=4152 comm="syz.0.205" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.435742][ T4168] tipc: Started in network mode [ 54.440865][ T4168] tipc: Node identity fe660877bafd, cluster identity 4711 [ 54.448200][ T4168] tipc: Enabled bearer , priority 0 [ 54.455857][ T4168] syzkaller0: entered promiscuous mode [ 54.461580][ T4168] syzkaller0: entered allmulticast mode [ 54.472419][ T4168] tipc: Resetting bearer [ 54.479296][ T4167] tipc: Resetting bearer [ 54.486938][ T4167] tipc: Disabling bearer [ 54.581895][ T4183] loop1: detected capacity change from 0 to 512 [ 54.588677][ T4183] ext4: Bad value for 'journal_dev' [ 54.601841][ T4189] __nla_validate_parse: 3 callbacks suppressed [ 54.601856][ T4189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.220'. [ 54.668505][ T4193] siw: device registration error -23 [ 54.803769][ T4202] loop1: detected capacity change from 0 to 512 [ 54.810868][ T4202] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.866464][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.879693][ T4202] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.929225][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.991795][ T4218] loop3: detected capacity change from 0 to 512 [ 54.998433][ T4218] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.998453][ T4217] tipc: Enabled bearer , priority 0 [ 54.999694][ T4217] syzkaller0: entered promiscuous mode [ 55.017265][ T4217] syzkaller0: entered allmulticast mode [ 55.026940][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.052488][ T4218] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.064491][ T4217] tipc: Resetting bearer [ 55.073438][ T4215] tipc: Resetting bearer [ 55.089802][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.120715][ T4215] tipc: Disabling bearer [ 55.158907][ T4233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 55.234936][ T4241] FAULT_INJECTION: forcing a failure. [ 55.234936][ T4241] name failslab, interval 1, probability 0, space 0, times 0 [ 55.235542][ T4239] loop1: detected capacity change from 0 to 1024 [ 55.247677][ T4241] CPU: 1 UID: 0 PID: 4241 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.247713][ T4241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.247744][ T4241] Call Trace: [ 55.247754][ T4241] [ 55.247767][ T4241] __dump_stack+0x1d/0x30 [ 55.247799][ T4241] dump_stack_lvl+0xe8/0x140 [ 55.247827][ T4241] dump_stack+0x15/0x1b [ 55.247888][ T4241] should_fail_ex+0x265/0x280 [ 55.247955][ T4241] should_failslab+0x8c/0xb0 [ 55.247993][ T4241] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 55.248051][ T4241] ? __alloc_skb+0x101/0x320 [ 55.248135][ T4241] __alloc_skb+0x101/0x320 [ 55.248170][ T4241] netlink_alloc_large_skb+0xbf/0xf0 [ 55.248206][ T4241] netlink_sendmsg+0x3cf/0x6b0 [ 55.248323][ T4241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.248363][ T4241] __sock_sendmsg+0x142/0x180 [ 55.248391][ T4241] ____sys_sendmsg+0x31e/0x4e0 [ 55.248481][ T4241] ___sys_sendmsg+0x17b/0x1d0 [ 55.248539][ T4241] __x64_sys_sendmsg+0xd4/0x160 [ 55.248644][ T4241] x64_sys_call+0x191e/0x3000 [ 55.248674][ T4241] do_syscall_64+0xd2/0x200 [ 55.248707][ T4241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.248811][ T4241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.248840][ T4241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.248872][ T4241] RIP: 0033:0x7ffb885beec9 [ 55.248893][ T4241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.248999][ T4241] RSP: 002b:00007ffb8701f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.249026][ T4241] RAX: ffffffffffffffda RBX: 00007ffb88815fa0 RCX: 00007ffb885beec9 [ 55.249043][ T4241] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 55.249060][ T4241] RBP: 00007ffb8701f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.249078][ T4241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.249093][ T4241] R13: 00007ffb88816038 R14: 00007ffb88815fa0 R15: 00007ffe0d198588 [ 55.249120][ T4241] [ 55.475428][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.602028][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 55.627769][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.647636][ T4261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.671914][ T4261] bond0: (slave bond1): Enslaving as an active interface with an up link [ 55.725327][ T4265] tipc: Enabled bearer , priority 0 [ 55.732217][ T4261] loop2: detected capacity change from 0 to 512 [ 55.739754][ T4265] syzkaller0: entered promiscuous mode [ 55.745383][ T4265] syzkaller0: entered allmulticast mode [ 55.755993][ T4269] siw: device registration error -23 [ 55.788296][ T4261] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.248: casefold flag without casefold feature [ 55.801611][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.252'. [ 55.890781][ T4261] EXT4-fs (loop2): get root inode failed [ 55.896478][ T4261] EXT4-fs (loop2): mount failed [ 55.904837][ T4265] tipc: Resetting bearer [ 55.940782][ T4264] tipc: Resetting bearer [ 55.958294][ T4278] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 55.969707][ T4264] tipc: Disabling bearer [ 56.071721][ T4261] bridge_slave_0: left allmulticast mode [ 56.077434][ T4261] bridge_slave_0: left promiscuous mode [ 56.083220][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.083785][ T4283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4283 comm=syz.2.248 [ 56.108780][ T4261] bridge_slave_1: left allmulticast mode [ 56.114655][ T4261] bridge_slave_1: left promiscuous mode [ 56.120525][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.138215][ T4261] bond0: (slave bond_slave_0): Releasing backup interface [ 56.155528][ T4261] bond0: (slave bond_slave_1): Releasing backup interface [ 56.184503][ T4261] team0: Port device team_slave_0 removed [ 56.196199][ T4261] team0: Port device team_slave_1 removed [ 56.208778][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.216391][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.225563][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.233155][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.243339][ T4261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.277609][ T4261] syz.2.248 (4261) used greatest stack depth: 10568 bytes left [ 56.305130][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 56.411659][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.264'. [ 56.621857][ T4332] tipc: Enabled bearer , priority 0 [ 56.674873][ T4338] syzkaller0: entered promiscuous mode [ 56.680478][ T4338] syzkaller0: entered allmulticast mode [ 56.692556][ T4340] loop2: detected capacity change from 0 to 1024 [ 56.702008][ T4340] ======================================================= [ 56.702008][ T4340] WARNING: The mand mount option has been deprecated and [ 56.702008][ T4340] and is ignored by this kernel. Remove the mand [ 56.702008][ T4340] option from the mount to silence this warning. [ 56.702008][ T4340] ======================================================= [ 56.740184][ T4332] tipc: Resetting bearer [ 56.747199][ T4331] tipc: Resetting bearer [ 56.754501][ T4340] EXT4-fs: Ignoring removed nobh option [ 56.761480][ T4331] tipc: Disabling bearer [ 56.830021][ T4340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.917747][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.927264][ T4356] loop4: detected capacity change from 0 to 512 [ 56.934307][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 56.957244][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.970363][ T4356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.990233][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 57.009531][ T4356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.023598][ T4361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.278'. [ 57.081642][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.251440][ T4381] tipc: Enabled bearer , priority 0 [ 57.274010][ T4387] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 57.284226][ T4381] syzkaller0: entered promiscuous mode [ 57.289774][ T4381] syzkaller0: entered allmulticast mode [ 57.310085][ T4381] tipc: Resetting bearer [ 57.326897][ T4380] tipc: Resetting bearer [ 57.334266][ T4380] tipc: Disabling bearer [ 57.464789][ T4406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.291'. [ 57.507861][ T4410] process 'syz.1.293' launched './file0' with NULL argv: empty string added [ 57.535280][ T4412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.294'. [ 57.697399][ T4424] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 58.095344][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 58.095358][ T29] audit: type=1326 audit(1760002011.524:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9e367eec9 code=0x0 [ 58.149690][ T4476] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 58.209301][ T29] audit: type=1400 audit(1760002011.644:424): avc: denied { mounton } for pid=4480 comm="syz.0.318" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.276781][ T29] audit: type=1326 audit(1760002011.694:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.300222][ T29] audit: type=1326 audit(1760002011.704:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.323615][ T29] audit: type=1326 audit(1760002011.704:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.347370][ T29] audit: type=1326 audit(1760002011.704:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.370660][ T29] audit: type=1326 audit(1760002011.704:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.394009][ T29] audit: type=1326 audit(1760002011.704:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.419342][ T29] audit: type=1326 audit(1760002011.784:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.482573][ T29] audit: type=1326 audit(1760002011.874:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 58.537650][ T4494] bridge0: entered allmulticast mode [ 58.567537][ T4493] infiniband syz!: set active [ 58.572312][ T4493] infiniband syz!: added team_slave_0 [ 58.584689][ T4493] RDS/IB: syz!: added [ 58.597133][ T4501] tipc: Enabled bearer , priority 0 [ 58.605438][ T4501] syzkaller0: entered promiscuous mode [ 58.611055][ T4501] syzkaller0: entered allmulticast mode [ 58.620754][ T4501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 58.759933][ T4500] tipc: Resetting bearer [ 58.777845][ T4500] tipc: Disabling bearer [ 58.853168][ T4505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.912584][ T4505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.964875][ T4505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.013216][ T4505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.117802][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.130954][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.147441][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.164894][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.267824][ T4526] mmap: syz.4.331 (4526) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.625349][ T4515] __nla_validate_parse: 3 callbacks suppressed [ 59.625368][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 60.540324][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 61.049731][ T4548] tipc: Enabled bearer , priority 0 [ 61.057028][ T4548] syzkaller0: entered promiscuous mode [ 61.062683][ T4548] syzkaller0: entered allmulticast mode [ 61.092610][ T4548] tipc: Resetting bearer [ 61.100783][ T4547] tipc: Resetting bearer [ 61.128429][ T4547] tipc: Disabling bearer [ 61.610192][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 61.690240][ T4590] siw: device registration error -23 [ 61.752968][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 61.785764][ T4597] tipc: Enabled bearer , priority 0 [ 61.792961][ T4597] syzkaller0: entered promiscuous mode [ 61.798529][ T4597] syzkaller0: entered allmulticast mode [ 61.808387][ T4597] tipc: Resetting bearer [ 61.819403][ T4596] tipc: Resetting bearer [ 61.835520][ T4596] tipc: Disabling bearer [ 62.100301][ T4618] siw: device registration error -23 [ 62.210893][ T4627] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.281702][ T4640] tipc: Enabled bearer , priority 0 [ 62.288758][ T4640] syzkaller0: entered promiscuous mode [ 62.294367][ T4640] syzkaller0: entered allmulticast mode [ 62.304960][ T4640] tipc: Resetting bearer [ 62.312351][ T4639] tipc: Resetting bearer [ 62.320389][ T4639] tipc: Disabling bearer [ 62.328539][ T4627] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.421213][ T4627] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.521344][ T4627] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.713134][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 62.813595][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.826337][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.834984][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.851965][ T4664] siw: device registration error -23 [ 62.882899][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.963714][ T4674] tipc: Enabled bearer , priority 0 [ 62.970788][ T4674] syzkaller0: entered promiscuous mode [ 62.976378][ T4674] syzkaller0: entered allmulticast mode [ 62.986846][ T4674] tipc: Resetting bearer [ 62.999536][ T4671] tipc: Resetting bearer [ 63.017894][ T4671] tipc: Disabling bearer [ 63.408436][ T4707] siw: device registration error -23 [ 63.456306][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 63.456389][ T29] audit: type=1326 audit(1760002016.884:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.493165][ T4709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.509043][ T29] audit: type=1326 audit(1760002016.884:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.532333][ T29] audit: type=1326 audit(1760002016.884:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.555765][ T29] audit: type=1326 audit(1760002016.884:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.579061][ T29] audit: type=1326 audit(1760002016.884:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.602419][ T29] audit: type=1326 audit(1760002016.884:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.625818][ T29] audit: type=1326 audit(1760002016.914:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.649313][ T29] audit: type=1326 audit(1760002016.914:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.672575][ T29] audit: type=1326 audit(1760002016.914:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.695880][ T29] audit: type=1326 audit(1760002016.914:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 63.783070][ T4709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.842478][ T4709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.902939][ T4709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.986912][ T297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.006678][ T297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.039130][ T297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.054219][ T297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.113559][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 64.159653][ T4741] siw: device registration error -23 [ 65.701863][ T4819] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 66.174777][ T4828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.429'. [ 66.269869][ T4839] xt_l2tp: v2 sid > 0xffff: 262144 [ 66.462929][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 67.304402][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 67.402054][ T4930] siw: device registration error -23 [ 67.474849][ T4940] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 67.751181][ T4966] tipc: Enabled bearer , priority 0 [ 67.762712][ T4966] syzkaller0: entered promiscuous mode [ 67.768295][ T4966] syzkaller0: entered allmulticast mode [ 67.813457][ T4966] tipc: Resetting bearer [ 67.831141][ T4965] tipc: Resetting bearer [ 67.838781][ T4965] tipc: Disabling bearer [ 67.939292][ T4980] siw: device registration error -23 [ 67.991963][ T4990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.052814][ T4990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.125221][ T4990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.213000][ T4990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.288350][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.297331][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 68.318155][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.343539][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.361228][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.585685][ T5021] tipc: Enabled bearer , priority 0 [ 68.619767][ T5021] syzkaller0: entered promiscuous mode [ 68.625269][ T5021] syzkaller0: entered allmulticast mode [ 68.670385][ T5021] tipc: Resetting bearer [ 68.684814][ T5026] siw: device registration error -23 [ 68.698475][ T5018] tipc: Resetting bearer [ 68.710180][ T5018] tipc: Disabling bearer [ 68.770452][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 68.770470][ T29] audit: type=1326 audit(1760002022.204:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.819380][ T29] audit: type=1326 audit(1760002022.204:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.843454][ T29] audit: type=1326 audit(1760002022.204:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.867800][ T29] audit: type=1326 audit(1760002022.204:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.891280][ T29] audit: type=1326 audit(1760002022.234:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.915135][ T29] audit: type=1326 audit(1760002022.234:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.938511][ T29] audit: type=1326 audit(1760002022.234:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.962094][ T29] audit: type=1326 audit(1760002022.234:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 68.985451][ T29] audit: type=1326 audit(1760002022.234:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 69.008953][ T29] audit: type=1326 audit(1760002022.234:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3c315eec9 code=0x7ffc0000 [ 69.034479][ T5047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.070919][ T5047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.160060][ T5047] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.204331][ T5062] siw: device registration error -23 [ 69.221191][ T5047] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.327635][ T297] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.355507][ T297] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.388221][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 69.401769][ T297] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.428934][ T297] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.872538][ T5098] tipc: Enabled bearer , priority 0 [ 69.879592][ T5098] syzkaller0: entered promiscuous mode [ 69.885141][ T5098] syzkaller0: entered allmulticast mode [ 69.894401][ T5098] tipc: Resetting bearer [ 69.900929][ T5097] tipc: Resetting bearer [ 69.908181][ T5097] tipc: Disabling bearer [ 70.173124][ T5113] siw: device registration error -23 [ 70.214080][ T5117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.293365][ T5117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.359556][ T5117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.382697][ T5134] tipc: Enabled bearer , priority 0 [ 70.399431][ T5134] syzkaller0: entered promiscuous mode [ 70.405213][ T5134] syzkaller0: entered allmulticast mode [ 70.430216][ T5117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.447608][ T5134] tipc: Resetting bearer [ 70.454474][ T5133] tipc: Resetting bearer [ 70.482363][ T5133] tipc: Disabling bearer [ 70.514182][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.536821][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.569385][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590822][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.661856][ T5162] siw: device registration error -23 [ 70.867209][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 71.195509][ T5184] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 71.229097][ T5186] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.301291][ T5186] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.380792][ T5193] siw: device registration error -23 [ 71.400095][ T5186] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.471267][ T5186] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.851253][ T5233] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 71.895406][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 72.106729][ T5241] siw: device registration error -23 [ 72.700947][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 72.743162][ T5303] tipc: Enabled bearer , priority 0 [ 72.790111][ T5303] syzkaller0: entered promiscuous mode [ 72.795637][ T5303] syzkaller0: entered allmulticast mode [ 72.829210][ T5303] tipc: Resetting bearer [ 72.848142][ T5302] tipc: Resetting bearer [ 72.865315][ T5302] tipc: Disabling bearer [ 73.145200][ T5308] tipc: Enabled bearer , priority 0 [ 73.159489][ T5308] syzkaller0: entered promiscuous mode [ 73.165098][ T5308] syzkaller0: entered allmulticast mode [ 73.174881][ T5309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'. [ 73.188297][ T5309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.560'. [ 73.210931][ T5308] tipc: Resetting bearer [ 73.217608][ T5306] tipc: Resetting bearer [ 73.225224][ T5306] tipc: Disabling bearer [ 73.650391][ T5359] tipc: Enabled bearer , priority 0 [ 73.679286][ T5359] syzkaller0: entered promiscuous mode [ 73.684812][ T5359] syzkaller0: entered allmulticast mode [ 73.727200][ T5359] tipc: Resetting bearer [ 73.743406][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 73.752534][ T5358] tipc: Resetting bearer [ 73.760296][ T5358] tipc: Disabling bearer [ 73.779945][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 73.779959][ T29] audit: type=1326 audit(1760002027.204:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.826762][ T29] audit: type=1326 audit(1760002027.244:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.850270][ T29] audit: type=1326 audit(1760002027.244:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.873721][ T29] audit: type=1326 audit(1760002027.244:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.897442][ T29] audit: type=1326 audit(1760002027.244:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.920858][ T29] audit: type=1326 audit(1760002027.254:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.944148][ T29] audit: type=1326 audit(1760002027.254:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 73.967633][ T29] audit: type=1326 audit(1760002027.254:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 74.197559][ T5395] loop1: detected capacity change from 0 to 1024 [ 74.209589][ T5395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.255486][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.610044][ T5446] loop0: detected capacity change from 0 to 1024 [ 74.625893][ T29] audit: type=1326 audit(1760002028.054:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 74.649398][ T29] audit: type=1326 audit(1760002028.054:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb885beec9 code=0x7ffc0000 [ 74.673971][ T5446] EXT4-fs: Ignoring removed nobh option [ 74.841810][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.888011][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918603][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.951844][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.979716][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 75.139770][ T5446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.202434][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.399184][ T5501] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 75.506360][ T5510] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.584432][ T5510] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.633144][ T5510] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.686933][ T5510] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.747779][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.767269][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.799529][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.813817][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839570][ T5520] loop4: detected capacity change from 0 to 1024 [ 75.851862][ T5520] EXT4-fs: Ignoring removed nobh option [ 75.873998][ T5522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.884504][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.931188][ T5522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.944639][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.981243][ T5522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.056216][ T5522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.133456][ T5543] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 76.210389][ T5555] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 76.405519][ T5574] loop4: detected capacity change from 0 to 1024 [ 76.421007][ T5574] EXT4-fs: Ignoring removed nobh option [ 76.450002][ T5574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.457086][ T5584] syz0: rxe_newlink: already configured on ip6gre0 [ 76.488766][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 76.506336][ T5587] siw: device registration error -23 [ 76.520139][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.655796][ T5606] siw: device registration error -23 [ 77.335803][ T5682] FAULT_INJECTION: forcing a failure. [ 77.335803][ T5682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.349097][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.3.674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.349131][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.349147][ T5682] Call Trace: [ 77.349156][ T5682] [ 77.349165][ T5682] __dump_stack+0x1d/0x30 [ 77.349289][ T5682] dump_stack_lvl+0xe8/0x140 [ 77.349309][ T5682] dump_stack+0x15/0x1b [ 77.349325][ T5682] should_fail_ex+0x265/0x280 [ 77.349364][ T5682] should_fail+0xb/0x20 [ 77.349403][ T5682] should_fail_usercopy+0x1a/0x20 [ 77.349425][ T5682] _copy_from_user+0x1c/0xb0 [ 77.349454][ T5682] kstrtouint_from_user+0x69/0xf0 [ 77.349502][ T5682] ? 0xffffffff81000000 [ 77.349517][ T5682] ? selinux_file_permission+0x1e4/0x320 [ 77.349555][ T5682] proc_fail_nth_write+0x50/0x160 [ 77.349591][ T5682] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.349673][ T5682] vfs_write+0x269/0x960 [ 77.349696][ T5682] ? __rcu_read_unlock+0x4f/0x70 [ 77.349847][ T5682] ? __fget_files+0x184/0x1c0 [ 77.349881][ T5682] ksys_write+0xda/0x1a0 [ 77.349905][ T5682] __x64_sys_write+0x40/0x50 [ 77.349928][ T5682] x64_sys_call+0x2802/0x3000 [ 77.349953][ T5682] do_syscall_64+0xd2/0x200 [ 77.349994][ T5682] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.350038][ T5682] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.350061][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.350098][ T5682] RIP: 0033:0x7fd60a81d97f [ 77.350112][ T5682] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 77.350132][ T5682] RSP: 002b:00007fd609287030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.350224][ T5682] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd60a81d97f [ 77.350237][ T5682] RDX: 0000000000000001 RSI: 00007fd6092870a0 RDI: 0000000000000004 [ 77.350299][ T5682] RBP: 00007fd609287090 R08: 0000000000000000 R09: 0000000000000000 [ 77.350310][ T5682] R10: 0000200000000440 R11: 0000000000000293 R12: 0000000000000001 [ 77.350321][ T5682] R13: 00007fd60aa76038 R14: 00007fd60aa75fa0 R15: 00007ffc28c699e8 [ 77.350339][ T5682] [ 78.019514][ T5757] capability: warning: `syz.4.711' uses 32-bit capabilities (legacy support in use) [ 78.298329][ T5797] capability: warning: `syz.3.730' uses deprecated v2 capabilities in a way that may be insecure [ 78.310727][ T5797] netlink: 'syz.3.730': attribute type 13 has an invalid length. [ 78.352639][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.359882][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.399512][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.409497][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.443941][ T36] ip6gre0 speed is unknown, defaulting to 1000 [ 78.449162][ T58] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.450227][ T36] syz0: Port: 1 Link DOWN [ 78.458527][ T58] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.471929][ T58] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.480547][ T58] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.789226][ T29] kauditd_printk_skb: 990 callbacks suppressed [ 78.789243][ T29] audit: type=1400 audit(1760002032.224:2352): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.825172][ T29] audit: type=1400 audit(1760002032.254:2353): avc: denied { prog_load } for pid=5820 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.851327][ T29] audit: type=1400 audit(1760002032.284:2354): avc: denied { prog_load } for pid=5833 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.870690][ T29] audit: type=1400 audit(1760002032.284:2355): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 78.892809][ T29] audit: type=1400 audit(1760002032.284:2356): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 78.914859][ T29] audit: type=1400 audit(1760002032.284:2357): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 78.937206][ T29] audit: type=1400 audit(1760002032.284:2358): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 78.959329][ T29] audit: type=1400 audit(1760002032.284:2359): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 78.981469][ T29] audit: type=1400 audit(1760002032.284:2360): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 79.003575][ T29] audit: type=1400 audit(1760002032.284:2361): avc: denied { module_request } for pid=5833 comm="syz.4.747" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 79.087247][ T5853] FAULT_INJECTION: forcing a failure. [ 79.087247][ T5853] name failslab, interval 1, probability 0, space 0, times 0 [ 79.100000][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz.1.754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.100033][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.100047][ T5853] Call Trace: [ 79.100055][ T5853] [ 79.100064][ T5853] __dump_stack+0x1d/0x30 [ 79.100160][ T5853] dump_stack_lvl+0xe8/0x140 [ 79.100184][ T5853] dump_stack+0x15/0x1b [ 79.100204][ T5853] should_fail_ex+0x265/0x280 [ 79.100247][ T5853] should_failslab+0x8c/0xb0 [ 79.100281][ T5853] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 79.100363][ T5853] ? sidtab_sid2str_get+0xa0/0x130 [ 79.100456][ T5853] kmemdup_noprof+0x2b/0x70 [ 79.100488][ T5853] sidtab_sid2str_get+0xa0/0x130 [ 79.100523][ T5853] security_sid_to_context_core+0x1eb/0x2e0 [ 79.100622][ T5853] security_sid_to_context+0x27/0x40 [ 79.100655][ T5853] avc_audit_post_callback+0x10f/0x520 [ 79.100784][ T5853] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.100879][ T5853] common_lsm_audit+0x1bb/0x230 [ 79.100913][ T5853] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.100959][ T5853] slow_avc_audit+0x104/0x140 [ 79.101070][ T5853] avc_has_perm+0x13a/0x180 [ 79.101115][ T5853] sel_write_load+0xf8/0x380 [ 79.101156][ T5853] ? __pfx_sel_write_load+0x10/0x10 [ 79.101197][ T5853] vfs_write+0x269/0x960 [ 79.101289][ T5853] ? __rcu_read_unlock+0x4f/0x70 [ 79.101322][ T5853] ? __fget_files+0x184/0x1c0 [ 79.101354][ T5853] ksys_write+0xda/0x1a0 [ 79.101378][ T5853] __x64_sys_write+0x40/0x50 [ 79.101424][ T5853] x64_sys_call+0x2802/0x3000 [ 79.101449][ T5853] do_syscall_64+0xd2/0x200 [ 79.101479][ T5853] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.101558][ T5853] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.101581][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.101602][ T5853] RIP: 0033:0x7fb3c315eec9 [ 79.101688][ T5853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.101711][ T5853] RSP: 002b:00007fb3c1bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.101734][ T5853] RAX: ffffffffffffffda RBX: 00007fb3c33b5fa0 RCX: 00007fb3c315eec9 [ 79.101751][ T5853] RDX: 0000000000000086 RSI: 0000200000000500 RDI: 0000000000000003 [ 79.101806][ T5853] RBP: 00007fb3c1bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.101885][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.101902][ T5853] R13: 00007fb3c33b6038 R14: 00007fb3c33b5fa0 R15: 00007ffcc5c09608 [ 79.101927][ T5853] [ 79.466628][ T5872] netlink: 52 bytes leftover after parsing attributes in process `syz.4.763'. [ 79.562816][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 79.620585][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 79.725573][ T5906] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 79.850706][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.880255][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.894794][ T297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.929182][ T297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.014082][ T5933] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 80.033565][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.794'. [ 80.042802][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 80.231049][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 80.282510][ T5965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.805'. [ 80.296889][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.805'. [ 80.458362][ T5995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'. [ 80.473583][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.819'. [ 81.543539][ T6145] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 81.915522][ T6181] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 82.883027][ T6268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 82.925617][ T6269] bond_slave_1: mtu less than device minimum [ 83.809500][ T29] kauditd_printk_skb: 1851 callbacks suppressed [ 83.809517][ T29] audit: type=1400 audit(1760002037.244:4213): avc: denied { map_create } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.844390][ T29] audit: type=1400 audit(1760002037.264:4214): avc: denied { prog_load } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.863456][ T29] audit: type=1400 audit(1760002037.264:4215): avc: denied { prog_load } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.882446][ T29] audit: type=1400 audit(1760002037.264:4216): avc: denied { prog_load } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.901464][ T29] audit: type=1400 audit(1760002037.264:4217): avc: denied { create } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 83.921926][ T29] audit: type=1400 audit(1760002037.264:4218): avc: denied { open } for pid=6325 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 84.053436][ T29] audit: type=1326 audit(1760002037.384:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff9e367eec9 code=0x7ffc0000 [ 84.076867][ T29] audit: type=1326 audit(1760002037.394:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e367eec9 code=0x7ffc0000 [ 84.100318][ T29] audit: type=1326 audit(1760002037.394:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.4.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e367eec9 code=0x7ffc0000 [ 84.123732][ T29] audit: type=1400 audit(1760002037.404:4222): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.296168][ T6353] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.566143][ T6400] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.151696][ T6440] FAULT_INJECTION: forcing a failure. [ 85.151696][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 85.164454][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.4.1023 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.164489][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.164522][ T6440] Call Trace: [ 85.164529][ T6440] [ 85.164538][ T6440] __dump_stack+0x1d/0x30 [ 85.164562][ T6440] dump_stack_lvl+0xe8/0x140 [ 85.164587][ T6440] dump_stack+0x15/0x1b [ 85.164607][ T6440] should_fail_ex+0x265/0x280 [ 85.164755][ T6440] should_failslab+0x8c/0xb0 [ 85.164789][ T6440] kmem_cache_alloc_noprof+0x50/0x480 [ 85.164891][ T6440] ? ep_insert+0x2cf/0xdb0 [ 85.164929][ T6440] ep_insert+0x2cf/0xdb0 [ 85.165030][ T6440] do_epoll_ctl+0x686/0x8a0 [ 85.165068][ T6440] __x64_sys_epoll_ctl+0xcb/0x100 [ 85.165105][ T6440] x64_sys_call+0x706/0x3000 [ 85.165131][ T6440] do_syscall_64+0xd2/0x200 [ 85.165176][ T6440] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.165212][ T6440] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.165312][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.165342][ T6440] RIP: 0033:0x7ff9e367eec9 [ 85.165438][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.165461][ T6440] RSP: 002b:00007ff9e20df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 85.165486][ T6440] RAX: ffffffffffffffda RBX: 00007ff9e38d5fa0 RCX: 00007ff9e367eec9 [ 85.165503][ T6440] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 85.165519][ T6440] RBP: 00007ff9e20df090 R08: 0000000000000000 R09: 0000000000000000 [ 85.165535][ T6440] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 85.165585][ T6440] R13: 00007ff9e38d6038 R14: 00007ff9e38d5fa0 R15: 00007ffe1859b788 [ 85.165606][ T6440] [ 85.370295][ T6446] __nla_validate_parse: 14 callbacks suppressed [ 85.370315][ T6446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1026'. [ 85.386109][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1026'. [ 85.470278][ T6457] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.586238][ T6471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1038'. [ 85.595572][ T6471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1038'. [ 85.897911][ T6494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1049'. [ 85.908186][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 86.165110][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 86.178831][ T6526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1062'. [ 86.296073][ T6536] binfmt_misc: register: failed to install interpreter file ./file0 [ 86.752032][ T6574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 86.973822][ T6589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1089'. [ 86.983432][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1089'. [ 87.115061][ T6604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.459138][ T6651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.759292][ T6689] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.916579][ T6705] sch_tbf: peakrate 1 is lower than or equals to rate 2410937664428781679 ! [ 87.931407][ T52] ================================================================== [ 87.939570][ T52] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 87.939622][ T52] [ 87.939629][ T52] write to 0xffffc900112b9020 of 8 bytes by task 6707 on cpu 0: [ 87.939645][ T52] n_tty_write+0x1aa/0xb40 [ 87.939670][ T52] file_tty_write+0x378/0x690 [ 87.939689][ T52] tty_write+0x25/0x30 [ 87.939709][ T52] vfs_write+0x52a/0x960 [ 87.939733][ T52] ksys_write+0xda/0x1a0 [ 87.939753][ T52] __x64_sys_write+0x40/0x50 [ 87.939773][ T52] x64_sys_call+0x2802/0x3000 [ 87.939799][ T52] do_syscall_64+0xd2/0x200 [ 87.939824][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.939844][ T52] [ 87.939848][ T52] read to 0xffffc900112b9020 of 8 bytes by task 52 on cpu 1: [ 87.939865][ T52] n_tty_receive_buf_common+0x87c/0xbe0 [ 87.939903][ T52] n_tty_receive_buf2+0x33/0x40 [ 87.939931][ T52] tty_ldisc_receive_buf+0x63/0xf0 [ 87.939952][ T52] tty_port_default_receive_buf+0x59/0x90 [ 87.939976][ T52] flush_to_ldisc+0x148/0x340 [ 87.940000][ T52] process_scheduled_works+0x4cb/0x9d0 [ 87.940033][ T52] worker_thread+0x582/0x770 [ 87.940048][ T52] kthread+0x486/0x510 [ 87.940068][ T52] ret_from_fork+0x122/0x1b0 [ 87.940090][ T52] ret_from_fork_asm+0x1a/0x30 [ 87.940116][ T52] [ 87.940121][ T52] value changed: 0x0000000000000000 -> 0x0000000000000009 [ 87.940134][ T52] [ 87.940147][ T52] Reported by Kernel Concurrency Sanitizer on: [ 87.940159][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.940184][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.940199][ T52] Workqueue: events_unbound flush_to_ldisc [ 87.940222][ T52] ==================================================================