last executing test programs: 19m25.305194308s ago: executing program 32 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000006ae9bfa100000000000007010000f8ffff00b702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2ac}}, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0xc0011122) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472757374657c2e73b7268a0423e0797a"], &(0x7f0000000040)='kmem_cache_free\x00', 0x10, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) kexec_load(0x78, 0x0, 0x0, 0x3e0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 14m21.109838166s ago: executing program 33 (id=2804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffff, 0x3, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x218, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe6, 0xa8, @random="0590e8886991dbb84b85736e26b2d1a63d1313008643e50011ec274afd17c6774fecb5c2ba6ba5a9404cd8d641a0c7ac8c6955ee8ce6f117be5391f89f108755e2b831c295193971aeb3c955b7955a31548b4c4d9b41d832c908369887b672b653bea53d3bd258e5b99fed6849e237fc5232c8cf343bcc45980686eec958b79a598894cc9992e022537cc8325383a4f28a7b0622254c4742b3f78a43b1aee4bdcdbe1060e437304662e60c8765a6582b06f0d0dcac40aa74c201c7f3d3851ec52c2248a31ca3b29c203a21eb7809739f820756e8f7b53c4a608ee840e221fa206546"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf3, 0xa8, @random="de534c19ae655c5486aca2ac7d1b4ef00ba5ed15cf9a1b8908141899b12a1378fa16a0a17e919a3823f33eaeb6d45c2e0ee672867b29aed6637b62f87d9dad13912a7b32ecb670f23c271d4a14af4b2bd38fdd6ddf8e61e7d30ea1ad8b2760e061f32dc899f47e5c4dfebf0f04b146278be8cc7d7624061d88493964f383b8a3bdcdf86e921ff096c2fe8d5fce29f7e6c96569199770ffabba7b44cb2bea908533a612b7f3f36932208e290ec017372e031cb25fa1383150516b6a0d7af5428d9bc1ddcca6380e90136ccf4fd3e64a403ec55a67b09ba10a6223981dba4eff784f52958ed8d42078608eb80475ce85"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) alarm(0x8) alarm(0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 7m12.08718613s ago: executing program 6 (id=9258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) 7m12.030889921s ago: executing program 6 (id=9260): r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 7m11.961811252s ago: executing program 6 (id=9262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r8) 7m11.344916314s ago: executing program 2 (id=9273): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 7m11.305627575s ago: executing program 2 (id=9275): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") 7m11.259158245s ago: executing program 2 (id=9276): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 7m11.200325797s ago: executing program 2 (id=9278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) 7m10.643196648s ago: executing program 6 (id=9287): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000040)=0x8) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) io_setup(0x490, &(0x7f0000000000)=0x0) r6 = io_uring_setup(0x6001, &(0x7f00000003c0)={0x0, 0x823a, 0x800, 0x2, 0x249}) close_range(r6, r6, 0x0) io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r7 = eventfd2(0x3ff, 0x800) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x0, 0x0, 0x2, 0x0, 0x1, r7}]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x20000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40814) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x84, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x4000) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x90, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008000}, 0xc000) 7m9.901371022s ago: executing program 2 (id=9289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 7m9.768001355s ago: executing program 6 (id=9290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '('}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000015000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m9.746475085s ago: executing program 2 (id=9291): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)) 7m9.715656706s ago: executing program 34 (id=9291): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)) 7m9.606434328s ago: executing program 6 (id=9294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f00000002c0)="8d09327c", 0x4}], 0x3) 7m9.605841438s ago: executing program 35 (id=9294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f00000002c0)="8d09327c", 0x4}], 0x3) 3m52.515105195s ago: executing program 8 (id=13385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0xff, 0x6, @remote}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 3m52.445933026s ago: executing program 8 (id=13389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000001280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="f550b36301e9a32630461b1edea61a15dc8e30c9", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 3m52.405684727s ago: executing program 8 (id=13390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56a69, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x5}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3m52.25209688s ago: executing program 8 (id=13395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 3m52.154465482s ago: executing program 8 (id=13397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 3m51.73762611s ago: executing program 8 (id=13403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 3m51.73751797s ago: executing program 36 (id=13403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 2m53.138405303s ago: executing program 7 (id=14854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m53.079441535s ago: executing program 7 (id=14857): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000161a0000001812000043c8c82ad7bb514ab598707504faae849cdb502ce06d2b58d7e8fba2960dd188fd07a0f553dcc266befdbe16a7d6036d", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000540)=[{0xe, 0x5}, {0x400, 0x1}, {0x2, 0x45}, {0x0, 0x100}]}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x200080d1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054f579802c0001800e000100696d6d656469617465000000180002800c00028005000100fd000000080001400000001424000180090001006d6173710000000014000280080002400000001408000340000000160900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) r7 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r7, 0x0, 0xe38e, 0x5, 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x3, 0x6, 0x603, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000884}, 0x20000004) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 2m52.206925612s ago: executing program 7 (id=14873): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0xb, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x101, 0x7fff, 0x0) 2m52.152617563s ago: executing program 7 (id=14874): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m52.105814924s ago: executing program 7 (id=14876): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0xa, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m51.916711177s ago: executing program 7 (id=14878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 2m51.853818189s ago: executing program 37 (id=14878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 2m30.129870133s ago: executing program 1 (id=15230): syz_mount_image$ext4(0x0, &(0x7f00000006c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000700)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m29.993987365s ago: executing program 1 (id=15231): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 2m29.604642883s ago: executing program 1 (id=15233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m29.264295579s ago: executing program 1 (id=15235): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.770842649s ago: executing program 1 (id=15244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) 2m28.308914518s ago: executing program 1 (id=15246): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x3, 0x0, 0x8) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m28.265229359s ago: executing program 38 (id=15246): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x3, 0x0, 0x8) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.434008284s ago: executing program 5 (id=16872): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 5.250957967s ago: executing program 5 (id=16875): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x20000000000014, &(0x7f0000000140), 0x106, 0x4}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8010) bind$inet6(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 5.08142232s ago: executing program 5 (id=16879): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3f2, 0x800, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4810}, 0x200040c5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast1, 0x15, 0x3, 'nq\x00', 0x1, 0x0, 0x5}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'nq\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.224648936s ago: executing program 5 (id=16892): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7fffeffd) 2.219468207s ago: executing program 0 (id=16902): syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = fspick(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x44004, 0x0, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) 2.219160767s ago: executing program 9 (id=16903): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/89, 0x59}, 0x10001) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000003c0)={0x5, 0x1, {0x3, 0x2, 0x0, 0x3, 0x6}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x4080) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.107371529s ago: executing program 0 (id=16895): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0x5}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xfffffffffffffffe, 0x0, 0x9}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 2.0497058s ago: executing program 9 (id=16896): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000000800"], 0xb8}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000003c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="ba9da06baa48363a081fc9f8c404cdf5395a0dad45eff168614313493669f058f5497c681f60f2ccb51d67e1b26008474574ac8a3ddea66d973235085db454643d30a1589158df38904a1ba7d710b487f2a121cabf0db2a89209143ed58a8b55e96a38c9a7a6c1ed6337f8c9cb060896eacbf390", @ANYRES16, @ANYBLOB="796100000000030000007e000000"], 0x14}}, 0x0) 1.841423304s ago: executing program 9 (id=16898): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x48940, 0x10c) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/243, 0x13c}], 0x1, 0x4309, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601040000000000000000409005b805000100"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.839780834s ago: executing program 3 (id=16899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0x4, 0x6, 0x9, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x4, 0x1}, 0x10, 0x20de0, r2, 0x7, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x1, 0x4, 0xa, 0x5}, {0x5, 0x3, 0xb, 0x1}, {0x4, 0x2, 0xd, 0x5}, {0x5, 0x5, 0x6, 0x2}, {0x5, 0x1, 0x10, 0x8}, {0x4, 0x1, 0xe}, {0x3, 0x2, 0x1, 0x6}], 0x10, 0x9}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="add86bb0cf91db75bb86582fca15905205236f32fa95cd4fb7b0bbe82cf15c3b41b1ba195e52426569eaf726a0d4f80fa63bd94a3b68ccea0ac846"], 0x56) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 1.784406535s ago: executing program 0 (id=16900): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x407, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0x0, @loopback={0x3f}, 0x3}, 0x1c, 0x0}}], 0x2, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, 0x0, 0x0) syz_io_uring_setup(0x356f, &(0x7f0000000340)={0x0, 0x3d8d, 0x8000, 0x2, 0x11e, 0x0, r2}, &(0x7f0000000200), &(0x7f00000003c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, r5, 0x0) 1.659653267s ago: executing program 0 (id=16904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.637870408s ago: executing program 3 (id=16905): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000008100181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 1.457030571s ago: executing program 3 (id=16906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.230301326s ago: executing program 4 (id=16908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000340)=""/79, 0x4f) getdents(r1, 0xfffffffffffffffd, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_extract_tcp_res(0x0, 0x2, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000700), 0x2, 0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.149388427s ago: executing program 3 (id=16909): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/89, 0x59}, 0x10001) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000003c0)={0x5, 0x1, {0x3, 0x2, 0x0, 0x3, 0x6}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x4080) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.148966267s ago: executing program 0 (id=16910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x818018, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.148684397s ago: executing program 9 (id=16911): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000480)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.134010348s ago: executing program 4 (id=16912): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.01682646s ago: executing program 4 (id=16913): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 1.0153398s ago: executing program 5 (id=16923): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 922.319112ms ago: executing program 3 (id=16914): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22000040, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x40000) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 859.022543ms ago: executing program 4 (id=16915): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000007a00e6050000006a582a9ee9ff54f8"], 0x50) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x406) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000006c0)='sched_switch\x00', r2, 0x0, 0xff}, 0x18) r3 = socket(0x23, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 635.624187ms ago: executing program 4 (id=16916): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x20, &(0x7f0000000740)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff4}}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call], &(0x7f0000000840)='syzkaller\x00', 0x95c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xb, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xbf, &(0x7f0000000480)=""/191, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x1c, r2, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x9, 0x0, &(0x7f0000000bc0)=[{0x0, 0x4, 0x5, 0x4}, {0x3, 0x4, 0xa}, {0x0, 0x3, 0xe, 0x7}, {0x0, 0x4, 0xd, 0x7}, {0x1, 0x1, 0xf, 0x3}, {0x4, 0x3, 0x3, 0x3}, {0x3, 0x5, 0x5, 0x9}, {0x3, 0x2, 0x9, 0x2}, {0x3, 0x3, 0xb, 0xc}], 0x10, 0x5599}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$eJzs3dFrW9cZAPDvynbiJM7sbHvIwpaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYGxraZ/61JdCn0uh5E9oC4H2vZTSEtokfWihrYrkqyZxZVsmlpVYvx8c33PuvfL3HQsd69x7uTeAjnUqIsYioisizkZEf7o+k5ZYWy/V/R7cvzVZLUlUKtc+TSJJ19V/V5Iuj6Qv642Iv/454h/J9+OWVlbnJgqF/FLazpXnF3OlldVzs/MTM/mZ/MLYyPDF0UujF0aHdq2vl//40f///eqfLr/1mxsfjH9y5p/VtPrSbY/3oxlrTe633vWe2t+irjsilnYS7BnWlfanp92JAADQlOp3/B9GxC8i4uFL7c4GAAAAaIXK7/viqySiAgAAAOxbmdo1sEkmm14L0BeZTDa7fg3vj+NwplAslX89XVxemFq/VnYgejLTs4X8UHqt8ED0JNX2cK3+qH1+Q3skIo5FxH/7D9Xa2cliYardBz8AAACgQxzZMP//vH99/g8AAADsMwPtTgAAAABoOfN/AAAA2P82nf8n3XubCAAAANAKf7lypVoq9edfT11fWZ4rXj83lS/NZeeXJ7OTxaXF7EyxOFO7Z9/8dr+vUCwu/jYWlm/myvlSOVdaWR2fLy4vlMdrz/Uez3tONAAAAOy9Yz+/834SEWu/O1QrVQfSbU3M1cdamx3QSpmd7Z60Kg9g73W1OwGgbba5wPedn+5VIsCecz4e2GZi/78N7R0eNgAAAJ4Fgz95qvP/zgfCc8xEHjqX8//QudzgCzqX8//Q4Q5uv0vvZhve3uVcAACAlumrlSSTTc8F9kUmk81GHK09FqAnmZ4t5Ici4gcR8V5/z8Fqe7jdSQMAAAAAAAAAAAAAAAAAAAAAAADAc6ZSSaICAAAA7GsRmY+T9EH+g/2n+zYeHziQfNFfW0bEjZevvXBzolxeGq6u/+y79eUX0/Xn23EEAwAAANioPk+vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDc9uH9rsl72Mu69P0TEQKP43dFbW/a+0R8Rhx8m0f3Y65KI6NqF+Gu3I+J4o/hJNa0YSLPYGD8TEYfaHP/ILsSHTnanOv6MNfr8ZeJUbdn489edlqd179Rm41+mPv7VxrlG49/RJmOcuPt6btP4tyNOdDcef+rxk6ccf//+t9XVzbZVXokYbPj/J3kiVq48v5grrayem52fmMnP5BdGRoYvjl4avTA6lJueLeTTnw1j/Odnb36zVf8PbxJ/YJv+n26y/1/fvXn/R1vEP/PLjfG/rL3/x7eIX/3b/yr9P1DdPlivr63XH3fytXdPbtX/qU36v937f6bJ/p+9+q8Pm9wVANgDpZXVuYlCIb+k8lxWeryDKltVrqYf9B2/vM0DEwAAsOsefelvdyYAAAAAAAAAAAAAAAAAAADQuVp+E7KDT95ZoLd9XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NK3AQAA///VO9QU") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r6, 0x0, 0x0, 0xe7b, 0x0, 0x1) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) sendmsg$nl_route(r0, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 568.214629ms ago: executing program 5 (id=16917): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 102.604358ms ago: executing program 0 (id=16918): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) geteuid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) io_setup(0x3, &(0x7f0000000340)) 84.241829ms ago: executing program 3 (id=16919): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x10200, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000000000d0425bd7000ffdbff2500000000", @ANYRES32, @ANYBLOB="1000000000000000240012800b0001006272696467650000140002800500070006000000050019"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r3 = gettid() openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.233358ms ago: executing program 9 (id=16920): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xa, 0x1ff, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x4040010) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) 81.625168ms ago: executing program 4 (id=16921): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000600)={0x0, 0xf07d, 0x800, 0x40001, 0x87}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r5, 0x6e2, 0x600, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r1, 0x8aa, 0xeffd, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=16922): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001585acf9bf7761bd7e3afbc29fa4ed713fae", @ANYRES16=r2, @ANYBLOB="01002bbd700002dcdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r3, 0x40071bb2, 0x0, 0xfd9, 0x1, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x12a8, 0x24bb, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(0x0, 0x6e3) read(r7, &(0x7f0000001400)=""/4096, 0x1000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xffffff8f, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}}}, &(0x7f0000000380)=0x84) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x267, 0x0, 0x400]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) kernel console output (not intermixed with test programs): .15939'. [ 1102.371854][T19216] netlink: 'syz.0.15942': attribute type 5 has an invalid length. [ 1102.642537][T19213] loop5: detected capacity change from 0 to 512 [ 1102.693804][T19213] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.15940: bad orphan inode 11862016 [ 1102.719201][T19213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1102.733518][T19213] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.836228][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15953'. [ 1102.872288][T19253] netlink: 'syz.0.15950': attribute type 13 has an invalid length. [ 1102.894583][T19253] gretap0: refused to change device tx_queue_len [ 1102.912096][T19253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1103.017016][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1103.124494][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15957'. [ 1103.264700][ T29] kauditd_printk_skb: 940 callbacks suppressed [ 1103.264720][ T29] audit: type=1400 audit(2000000518.311:349318): avc: denied { create } for pid=19275 comm="syz.0.15961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1103.306081][ T29] audit: type=1400 audit(2000000518.311:349319): avc: denied { write } for pid=19275 comm="syz.0.15961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1103.327065][ T29] audit: type=1400 audit(2000000518.343:349320): avc: denied { create } for pid=19280 comm="syz.5.15972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1103.353230][ T29] audit: type=1400 audit(2000000518.354:349321): avc: denied { watch } for pid=19275 comm="syz.0.15961" path="/3283/file0" dev="tmpfs" ino=17803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1103.376411][ T29] audit: type=1400 audit(2000000518.354:349322): avc: denied { create } for pid=19283 comm="syz.3.15962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1103.396342][ T29] audit: type=1400 audit(2000000518.354:349323): avc: denied { mac_admin } for pid=19275 comm="syz.0.15961" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1103.418167][ T29] audit: type=1400 audit(2000000518.354:349324): avc: denied { relabelto } for pid=19275 comm="syz.0.15961" name="file0" dev="tmpfs" ino=17803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1103.445192][ T29] audit: type=1400 audit(2000000518.354:349325): avc: denied { associate } for pid=19275 comm="syz.0.15961" name="file0" dev="tmpfs" ino=17803 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1103.473481][ T29] audit: type=1400 audit(2000000518.385:349326): avc: denied { setopt } for pid=19283 comm="syz.3.15962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1103.493382][ T29] audit: type=1400 audit(2000000518.385:349327): avc: denied { bind } for pid=19283 comm="syz.3.15962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1104.118126][T19309] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.321134][T19309] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.328646][T19309] lo speed is unknown, defaulting to 1000 [ 1104.334967][T19309] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.380998][T19314] siw: device registration error -23 [ 1104.404839][T19304] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.632863][T19304] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.654549][T19304] lo speed is unknown, defaulting to 1000 [ 1104.667012][T19304] Q6\bY4 speed is unknown, defaulting to 1000 [ 1104.674312][T19326] vlan1: entered allmulticast mode [ 1105.140677][T19334] wg2: left promiscuous mode [ 1105.145565][T19334] wg2: left allmulticast mode [ 1105.336052][T19334] wg2: entered promiscuous mode [ 1105.340991][T19334] wg2: entered allmulticast mode [ 1105.342680][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15985'. [ 1105.710931][T19360] netlink: 'syz.5.15992': attribute type 12 has an invalid length. [ 1105.966930][T19367] Q6\bY4 speed is unknown, defaulting to 1000 [ 1106.142443][T19368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15991'. [ 1106.150367][T19367] Q6\bY4 speed is unknown, defaulting to 1000 [ 1106.170316][T19367] lo speed is unknown, defaulting to 1000 [ 1106.185574][T19367] Q6\bY4 speed is unknown, defaulting to 1000 [ 1106.667495][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16008'. [ 1107.799813][T19442] netlink: 'syz.3.16021': attribute type 39 has an invalid length. [ 1108.012015][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 1108.012031][ T29] audit: type=1400 audit(2000000523.318:350159): avc: denied { bpf } for pid=19448 comm="syz.4.16023" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1108.039286][ T29] audit: type=1400 audit(2000000523.318:350160): avc: denied { perfmon } for pid=19448 comm="syz.4.16023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1108.122458][ T29] audit: type=1400 audit(2000000523.318:350161): avc: denied { prog_run } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1108.141941][ T29] audit: type=1400 audit(2000000523.371:350162): avc: denied { listen } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.162030][ T29] audit: type=1400 audit(2000000523.371:350163): avc: denied { create } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.182073][ T29] audit: type=1400 audit(2000000523.382:350164): avc: denied { connect } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.202533][ T29] audit: type=1400 audit(2000000523.382:350165): avc: denied { accept } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.222617][ T29] audit: type=1400 audit(2000000523.382:350166): avc: denied { write } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.242682][ T29] audit: type=1400 audit(2000000523.382:350167): avc: denied { read } for pid=19448 comm="syz.4.16023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.262524][ T29] audit: type=1400 audit(2000000523.403:350168): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1108.485160][T19480] netlink: 'syz.5.16034': attribute type 9 has an invalid length. [ 1108.830958][T19492] bridge0: port 3(gretap0) entered blocking state [ 1108.837687][T19492] bridge0: port 3(gretap0) entered disabled state [ 1108.846395][T19492] gretap0: entered allmulticast mode [ 1108.853179][T19492] gretap0: entered promiscuous mode [ 1108.859040][T19492] bridge0: port 3(gretap0) entered blocking state [ 1108.865583][T19492] bridge0: port 3(gretap0) entered forwarding state [ 1109.578311][T19519] Q6\bY4 speed is unknown, defaulting to 1000 [ 1109.659125][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16051'. [ 1109.735344][T19519] Q6\bY4 speed is unknown, defaulting to 1000 [ 1109.773414][T19519] lo speed is unknown, defaulting to 1000 [ 1109.776039][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16051'. [ 1109.779969][T19519] Q6\bY4 speed is unknown, defaulting to 1000 [ 1109.869028][T19525] netlink: 'syz.5.16052': attribute type 4 has an invalid length. [ 1109.949785][T19527] netlink: 'syz.5.16052': attribute type 4 has an invalid length. [ 1110.045626][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16054'. [ 1110.883787][T23921] page_pool_release_retry() stalled pool shutdown: id 402, 47 inflight 545 sec [ 1111.375522][T19575] netlink: 'syz.9.16069': attribute type 9 has an invalid length. [ 1111.674021][T19580] Q6\bY4 speed is unknown, defaulting to 1000 [ 1111.886339][T19536] Set syz1 is full, maxelem 65536 reached [ 1111.891627][T19580] Q6\bY4 speed is unknown, defaulting to 1000 [ 1111.909515][T19580] lo speed is unknown, defaulting to 1000 [ 1111.915642][T19580] Q6\bY4 speed is unknown, defaulting to 1000 [ 1111.919135][T19587] bridge0: port 1(gretap0) entered blocking state [ 1111.929152][T19587] bridge0: port 1(gretap0) entered disabled state [ 1112.038293][T19587] gretap0: entered promiscuous mode [ 1112.044150][T19587] bridge0: port 1(gretap0) entered blocking state [ 1112.050695][T19587] bridge0: port 1(gretap0) entered forwarding state [ 1112.868996][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 1112.869015][ T29] audit: type=1400 audit(2000000528.439:350662): avc: denied { map_create } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.905770][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16080'. [ 1112.915144][T19596] Process accounting resumed [ 1112.924656][ T29] audit: type=1400 audit(2000000528.471:350663): avc: denied { map_read map_write } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.945282][ T29] audit: type=1400 audit(2000000528.471:350664): avc: denied { prog_load } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.964845][ T29] audit: type=1400 audit(2000000528.471:350665): avc: denied { bpf } for pid=19605 comm="syz.4.16080" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1112.985942][ T29] audit: type=1400 audit(2000000528.471:350666): avc: denied { perfmon } for pid=19605 comm="syz.4.16080" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1113.007286][ T29] audit: type=1400 audit(2000000528.471:350667): avc: denied { prog_run } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1113.027154][ T29] audit: type=1400 audit(2000000528.471:350668): avc: denied { create } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1113.047807][ T29] audit: type=1400 audit(2000000528.471:350669): avc: denied { write } for pid=19605 comm="syz.4.16080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1113.083303][T19610] netlink: 196 bytes leftover after parsing attributes in process `syz.3.16082'. [ 1113.095099][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16083'. [ 1113.112421][T19612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16083'. [ 1113.116958][ T29] audit: type=1400 audit(2000000528.566:350670): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1113.130684][T19613] netlink: 'syz.0.16081': attribute type 9 has an invalid length. [ 1113.146044][ T29] audit: type=1400 audit(2000000528.566:350671): avc: denied { open } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1113.411634][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16089'. [ 1113.470104][T19637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16092'. [ 1113.677728][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16102'. [ 1113.681953][T19652] bridge0: port 1(gretap0) entered blocking state [ 1113.693471][T19652] bridge0: port 1(gretap0) entered disabled state [ 1113.702273][T19652] gretap0: entered allmulticast mode [ 1113.708722][T19652] gretap0: entered promiscuous mode [ 1113.714794][T19652] bridge0: port 1(gretap0) entered blocking state [ 1113.721271][T19652] bridge0: port 1(gretap0) entered forwarding state [ 1113.776317][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16102'. [ 1113.790655][T19659] netlink: 'syz.9.16104': attribute type 10 has an invalid length. [ 1113.879491][T19665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16106'. [ 1114.048982][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16110'. [ 1114.145627][T19691] bridge0: port 1(gretap0) entered blocking state [ 1114.152352][T19691] bridge0: port 1(gretap0) entered disabled state [ 1114.178153][T19691] gretap0: entered allmulticast mode [ 1114.185472][T19691] gretap0: entered promiscuous mode [ 1114.224221][T19689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1114.274696][T19697] veth1_macvtap: left promiscuous mode [ 1114.286933][T19697] macsec0: entered allmulticast mode [ 1114.322605][T19689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1114.339087][T19689] lo speed is unknown, defaulting to 1000 [ 1114.362135][T19689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1115.111654][T19748] futex_wake_op: syz.3.16137 tries to shift op by -1; fix this program [ 1115.963711][T19777] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.973572][T19777] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.991151][T19778] netlink: 'syz.0.16146': attribute type 4 has an invalid length. [ 1116.048348][T19781] netlink: 'syz.0.16146': attribute type 4 has an invalid length. [ 1116.220769][T14794] Q6\bY4 speed is unknown, defaulting to 1000 [ 1116.314454][T19777] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.324324][T19777] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.389618][T14795] Q6\bY4 speed is unknown, defaulting to 1000 [ 1116.428578][T19770] Set syz1 is full, maxelem 65536 reached [ 1116.441257][T19777] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.451199][T19777] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.503830][T19786] sock: sock_set_timeout: `syz.0.16149' (pid 19786) tries to set negative timeout [ 1116.534265][T19777] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.544164][T19777] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.618846][ T1213] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.627190][ T1213] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.667677][ T1213] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.676063][ T1213] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.741396][ T1213] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.749874][ T1213] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.778390][ T1213] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.786766][ T1213] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.921713][ T29] kauditd_printk_skb: 887 callbacks suppressed [ 1117.921866][ T29] audit: type=1400 audit(2000000533.759:351559): avc: denied { open } for pid=19815 comm="syz.0.16159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1117.947887][ T29] audit: type=1400 audit(2000000533.759:351560): avc: denied { perfmon } for pid=19815 comm="syz.0.16159" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1117.969289][ T29] audit: type=1400 audit(2000000533.759:351561): avc: denied { kernel } for pid=19815 comm="syz.0.16159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1118.007824][T19818] __nla_validate_parse: 5 callbacks suppressed [ 1118.007846][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16160'. [ 1118.036058][ T29] audit: type=1400 audit(2000000533.875:351562): avc: denied { create } for pid=19817 comm="syz.3.16160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.041922][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16160'. [ 1118.086282][ T29] audit: type=1400 audit(2000000533.875:351563): avc: denied { setopt } for pid=19817 comm="syz.3.16160" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.107699][ T29] audit: type=1400 audit(2000000533.875:351564): avc: denied { create } for pid=19817 comm="syz.3.16160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.127761][ T29] audit: type=1400 audit(2000000533.875:351565): avc: denied { setopt } for pid=19817 comm="syz.3.16160" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.149680][ T29] audit: type=1400 audit(2000000533.981:351566): avc: denied { map_create } for pid=19819 comm="syz.0.16161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1118.169457][ T29] audit: type=1400 audit(2000000533.981:351567): avc: denied { perfmon } for pid=19819 comm="syz.0.16161" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1118.190856][ T29] audit: type=1400 audit(2000000533.981:351568): avc: denied { map_read map_write } for pid=19819 comm="syz.0.16161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1118.949372][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16174'. [ 1119.223149][T19857] netlink: 'syz.9.16177': attribute type 2 has an invalid length. [ 1120.604309][ T4174] page_pool_release_retry() stalled pool shutdown: id 428, 30 inflight 483 sec [ 1120.917654][T20803] page_pool_release_retry() stalled pool shutdown: id 404, 51 inflight 544 sec [ 1120.994867][T19918] tipc: New replicast peer: 255.255.255.83 [ 1121.000775][T19918] tipc: Enabled bearer , priority 10 [ 1121.145042][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16201'. [ 1121.351768][T19936] tipc: Bearer : already 2 bearers with priority 10 [ 1121.359415][T19936] tipc: Bearer : trying with adjusted priority [ 1121.375107][T19936] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1121.383466][T19936] tipc: Enabled bearer , priority 9 [ 1121.940132][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16214'. [ 1122.024701][T19964] netlink: 'syz.4.16215': attribute type 12 has an invalid length. [ 1122.682333][ T29] kauditd_printk_skb: 926 callbacks suppressed [ 1122.682353][ T29] audit: type=1400 audit(2000000538.772:352495): avc: denied { prog_load } for pid=19984 comm="syz.0.16222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1122.708032][ T29] audit: type=1400 audit(2000000538.772:352496): avc: denied { bpf } for pid=19984 comm="syz.0.16222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1123.227647][ T29] audit: type=1400 audit(2000000538.836:352497): avc: denied { perfmon } for pid=19984 comm="syz.0.16222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1123.249363][ T29] audit: type=1400 audit(2000000538.836:352498): avc: denied { perfmon } for pid=19984 comm="syz.0.16222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1123.270722][ T29] audit: type=1400 audit(2000000538.836:352499): avc: denied { bpf } for pid=19984 comm="syz.0.16222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1123.291824][ T29] audit: type=1400 audit(2000000538.836:352500): avc: denied { prog_run } for pid=19984 comm="syz.0.16222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1123.311298][ T29] audit: type=1400 audit(2000000538.857:352501): avc: denied { module_request } for pid=19984 comm="syz.0.16222" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1123.334059][ T29] audit: type=1326 audit(2000000538.878:352502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.3.16220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb7663ceec9 code=0x7ffc0000 [ 1123.357888][ T29] audit: type=1326 audit(2000000538.878:352503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.3.16220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7663ceec9 code=0x7ffc0000 [ 1123.381671][ T29] audit: type=1326 audit(2000000538.878:352504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.3.16220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7663ceec9 code=0x7ffc0000 [ 1123.840845][T20011] siw: device registration error -23 [ 1123.911326][T20013] netlink: 'syz.3.16230': attribute type 3 has an invalid length. [ 1124.034952][T20022] batadv0: left allmulticast mode [ 1124.040173][T20022] batadv0: left promiscuous mode [ 1124.045412][T20022] bridge0: port 1(batadv0) entered disabled state [ 1124.251291][T14795] page_pool_release_retry() stalled pool shutdown: id 407, 51 inflight 543 sec [ 1124.794604][T20059] siw: device registration error -23 [ 1125.301045][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1125.317759][T20068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1125.805423][T20083] tipc: Bearer : already 2 bearers with priority 10 [ 1125.812989][T20083] tipc: Bearer : trying with adjusted priority [ 1125.820098][T20083] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1125.961170][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1125.972141][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1125.972173][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1125.972189][ T3304] Call Trace: [ 1125.972196][ T3304] [ 1125.972205][ T3304] __dump_stack+0x1d/0x30 [ 1125.972229][ T3304] dump_stack_lvl+0xe8/0x140 [ 1125.972254][ T3304] dump_stack+0x15/0x1b [ 1125.972283][ T3304] dump_header+0x81/0x220 [ 1125.972328][ T3304] oom_kill_process+0x342/0x400 [ 1125.972369][ T3304] out_of_memory+0x979/0xb80 [ 1125.972420][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 1125.972522][ T3304] charge_memcg+0x51/0xc0 [ 1125.972549][ T3304] __mem_cgroup_charge+0x28/0xb0 [ 1125.972577][ T3304] filemap_add_folio+0x4e/0x1b0 [ 1125.972642][ T3304] __filemap_get_folio+0x31e/0x6b0 [ 1125.972693][ T3304] filemap_fault+0x41f/0xb40 [ 1125.972729][ T3304] __do_fault+0xbc/0x200 [ 1125.972786][ T3304] handle_mm_fault+0xf78/0x2c20 [ 1125.972824][ T3304] do_user_addr_fault+0x636/0x1090 [ 1125.972875][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1125.973057][ T3304] exc_page_fault+0x62/0xa0 [ 1125.973138][ T3304] asm_exc_page_fault+0x26/0x30 [ 1125.973166][ T3304] RIP: 0033:0x7fb7662a5db4 [ 1125.973188][ T3304] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 1125.973212][ T3304] RSP: 002b:00007ffed1d1f4d0 EFLAGS: 00010206 [ 1125.973230][ T3304] RAX: 0000001b32c24000 RBX: 000000000000248d RCX: 000000000011fd78 [ 1125.973243][ T3304] RDX: 000000000948e3ae RSI: 00007ffed1d1f560 RDI: 0000000000000001 [ 1125.973273][ T3304] RBP: 00007ffed1d1f50c R08: 00000000236b1d0a R09: 7fffffffffffffff [ 1125.973289][ T3304] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1125.973311][ T3304] R13: 00000000000927c0 R14: 000000000011fc8c R15: 00007ffed1d1f560 [ 1125.973353][ T3304] [ 1125.973362][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 443 [ 1126.165337][ T3304] memory+swap: usage 350932kB, limit 9007199254740988kB, failcnt 0 [ 1126.173308][ T3304] kmem: usage 276652kB, limit 9007199254740988kB, failcnt 0 [ 1126.180657][ T3304] Memory cgroup stats for /syz3: [ 1126.181099][ T3304] cache 27701248 [ 1126.189582][ T3304] rss 2469888 [ 1126.192895][ T3304] shmem 27701248 [ 1126.196464][ T3304] mapped_file 0 [ 1126.199931][ T3304] dirty 0 [ 1126.202902][ T3304] writeback 0 [ 1126.206193][ T3304] workingset_refault_anon 121 [ 1126.210901][ T3304] workingset_refault_file 32124 [ 1126.215761][ T3304] swap 44781568 [ 1126.219260][ T3304] swapcached 1101824 [ 1126.223160][ T3304] pgpgin 1432538 [ 1126.226887][ T3304] pgpgout 1424901 [ 1126.230656][ T3304] pgfault 1241349 [ 1126.234300][ T3304] pgmajfault 38 [ 1126.237771][ T3304] inactive_anon 15593472 [ 1126.242037][ T3304] active_anon 15663104 [ 1126.246113][ T3304] inactive_file 0 [ 1126.249801][ T3304] active_file 8192 [ 1126.253577][ T3304] unevictable 16384 [ 1126.257497][ T3304] hierarchical_memory_limit 314572800 [ 1126.262927][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 1126.269116][ T3304] total_cache 27701248 [ 1126.273207][ T3304] total_rss 2469888 [ 1126.277048][ T3304] total_shmem 27701248 [ 1126.281125][ T3304] total_mapped_file 0 [ 1126.285108][ T3304] total_dirty 0 [ 1126.288597][ T3304] total_writeback 0 [ 1126.292413][ T3304] total_workingset_refault_anon 121 [ 1126.297644][ T3304] total_workingset_refault_file 32124 [ 1126.303157][ T3304] total_swap 44781568 [ 1126.307158][ T3304] total_swapcached 1101824 [ 1126.310505][T20089] Q6\bY4 speed is unknown, defaulting to 1000 [ 1126.311580][ T3304] total_pgpgin 1432538 [ 1126.322536][ T3304] total_pgpgout 1424901 [ 1126.326805][ T3304] total_pgfault 1241349 [ 1126.330967][ T3304] total_pgmajfault 38 [ 1126.335079][ T3304] total_inactive_anon 15593472 [ 1126.339842][ T3304] total_active_anon 15663104 [ 1126.344456][ T3304] total_inactive_file 0 [ 1126.348623][ T3304] total_active_file 8192 [ 1126.352889][ T3304] total_unevictable 16384 [ 1126.357306][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2013,pid=11623,uid=0 [ 1126.372314][ T3304] Memory cgroup out of memory: Killed process 11623 (syz.3.2013) total-vm:96136kB, anon-rss:1320kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1126.393214][T20089] Q6\bY4 speed is unknown, defaulting to 1000 [ 1126.426597][T20089] lo speed is unknown, defaulting to 1000 [ 1126.451007][T20089] Q6\bY4 speed is unknown, defaulting to 1000 [ 1126.488505][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1126.499602][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1126.499635][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1126.499695][ T3304] Call Trace: [ 1126.499704][ T3304] [ 1126.499713][ T3304] __dump_stack+0x1d/0x30 [ 1126.499740][ T3304] dump_stack_lvl+0xe8/0x140 [ 1126.499768][ T3304] dump_stack+0x15/0x1b [ 1126.499805][ T3304] dump_header+0x81/0x220 [ 1126.499839][ T3304] oom_kill_process+0x342/0x400 [ 1126.499880][ T3304] out_of_memory+0x979/0xb80 [ 1126.499928][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 1126.500004][ T3304] charge_memcg+0x51/0xc0 [ 1126.500044][ T3304] __mem_cgroup_charge+0x28/0xb0 [ 1126.500076][ T3304] filemap_add_folio+0x4e/0x1b0 [ 1126.500122][ T3304] __filemap_get_folio+0x31e/0x6b0 [ 1126.500208][ T3304] filemap_fault+0x41f/0xb40 [ 1126.500245][ T3304] __do_fault+0xbc/0x200 [ 1126.500280][ T3304] handle_mm_fault+0xf78/0x2c20 [ 1126.500333][ T3304] do_user_addr_fault+0x636/0x1090 [ 1126.500390][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1126.500427][ T3304] exc_page_fault+0x62/0xa0 [ 1126.500459][ T3304] asm_exc_page_fault+0x26/0x30 [ 1126.500600][ T3304] RIP: 0033:0x7fb7662a5db4 [ 1126.500621][ T3304] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 1126.500662][ T3304] RSP: 002b:00007ffed1d1f4d0 EFLAGS: 00010206 [ 1126.500683][ T3304] RAX: 0000001b32c24000 RBX: 000000000000248d RCX: 000000000011fd78 [ 1126.500699][ T3304] RDX: 000000000948e3ae RSI: 00007ffed1d1f560 RDI: 0000000000000001 [ 1126.500711][ T3304] RBP: 00007ffed1d1f50c R08: 00000000236b1d0a R09: 7fffffffffffffff [ 1126.500724][ T3304] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1126.500737][ T3304] R13: 00000000000927c0 R14: 000000000011fc8c R15: 00007ffed1d1f560 [ 1126.500763][ T3304] [ 1126.500772][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 615 [ 1126.693583][ T3304] memory+swap: usage 350932kB, limit 9007199254740988kB, failcnt 0 [ 1126.701552][ T3304] kmem: usage 276828kB, limit 9007199254740988kB, failcnt 0 [ 1126.709318][ T3304] Memory cgroup stats for /syz3: [ 1126.739641][ T3304] cache 27701248 [ 1126.748359][ T3304] rss 2289664 [ 1126.751675][ T3304] shmem 27701248 [ 1126.755384][ T3304] mapped_file 0 [ 1126.758861][ T3304] dirty 0 [ 1126.761824][ T3304] writeback 0 [ 1126.765384][ T3304] workingset_refault_anon 121 [ 1126.770077][ T3304] workingset_refault_file 32174 [ 1126.775093][ T3304] swap 44781568 [ 1126.778561][ T3304] swapcached 1101824 [ 1126.782572][ T3304] pgpgin 1432588 [ 1126.786136][ T3304] pgpgout 1424995 [ 1126.790070][ T3304] pgfault 1241356 [ 1126.793870][ T3304] pgmajfault 44 [ 1126.797334][ T3304] inactive_anon 15593472 [ 1126.801670][ T3304] active_anon 15482880 [ 1126.805745][ T3304] inactive_file 0 [ 1126.809390][ T3304] active_file 8192 [ 1126.813270][ T3304] unevictable 16384 [ 1126.817122][ T3304] hierarchical_memory_limit 314572800 [ 1126.822659][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 1126.828975][ T3304] total_cache 27701248 [ 1126.833062][ T3304] total_rss 2289664 [ 1126.836885][ T3304] total_shmem 27701248 [ 1126.841307][ T3304] total_mapped_file 0 [ 1126.845309][ T3304] total_dirty 0 [ 1126.848872][ T3304] total_writeback 0 [ 1126.852690][ T3304] total_workingset_refault_anon 121 [ 1126.857926][ T3304] total_workingset_refault_file 32174 [ 1126.863313][ T3304] total_swap 44781568 [ 1126.867341][ T3304] total_swapcached 1101824 [ 1126.871925][ T3304] total_pgpgin 1432588 [ 1126.876035][ T3304] total_pgpgout 1424995 [ 1126.880292][ T3304] total_pgfault 1241356 [ 1126.884561][ T3304] total_pgmajfault 44 [ 1126.888662][ T3304] total_inactive_anon 15593472 [ 1126.893484][ T3304] total_active_anon 15482880 [ 1126.898148][ T3304] total_inactive_file 0 [ 1126.902326][ T3304] total_active_file 8192 [ 1126.906777][ T3304] total_unevictable 16384 [ 1126.911194][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.663,pid=6418,uid=0 [ 1126.926117][ T3304] Memory cgroup out of memory: Killed process 6418 (syz.3.663) total-vm:96136kB, anon-rss:1320kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1126.962703][T20064] syz.3.16247 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1126.973583][T20064] CPU: 1 UID: 0 PID: 20064 Comm: syz.3.16247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1126.973612][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1126.973626][T20064] Call Trace: [ 1126.973635][T20064] [ 1126.973647][T20064] __dump_stack+0x1d/0x30 [ 1126.973675][T20064] dump_stack_lvl+0xe8/0x140 [ 1126.973702][T20064] dump_stack+0x15/0x1b [ 1126.973730][T20064] dump_header+0x81/0x220 [ 1126.973772][T20064] oom_kill_process+0x342/0x400 [ 1126.973820][T20064] out_of_memory+0x979/0xb80 [ 1126.973914][T20064] try_charge_memcg+0x5e6/0x9e0 [ 1126.973949][T20064] charge_memcg+0x51/0xc0 [ 1126.973975][T20064] __mem_cgroup_charge+0x28/0xb0 [ 1126.974000][T20064] filemap_add_folio+0x4e/0x1b0 [ 1126.974060][T20064] __filemap_get_folio+0x31e/0x6b0 [ 1126.974113][T20064] filemap_fault+0x41f/0xb40 [ 1126.974135][T20064] ? css_rstat_updated+0xb7/0x240 [ 1126.974209][T20064] __do_fault+0xbc/0x200 [ 1126.974255][T20064] handle_mm_fault+0xf78/0x2c20 [ 1126.974305][T20064] do_user_addr_fault+0x636/0x1090 [ 1126.974357][T20064] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 1126.974481][T20064] exc_page_fault+0x62/0xa0 [ 1126.974523][T20064] asm_exc_page_fault+0x26/0x30 [ 1126.974553][T20064] RIP: 0033:0x7fb7662a893a [ 1126.974570][T20064] Code: 00 00 4d 39 f7 0f 83 dd 00 00 00 41 0f b7 c3 4c 8b 43 20 4d 89 fa 48 89 44 24 18 41 8b 02 4c 89 c7 48 29 c7 49 89 c5 4c 01 ff <66> 44 3b 1f 0f 85 a4 00 00 00 48 8b 54 24 18 48 89 ee 4c 89 44 24 [ 1126.974591][T20064] RSP: 002b:00007ffed1d1f1e0 EFLAGS: 00010202 [ 1126.974654][T20064] RAX: 0000000000001208 RBX: 00007fb767155720 RCX: 0000000000012b24 [ 1126.974667][T20064] RDX: 0000001b332114e6 RSI: 0000001b32c24240 RDI: 0000001b33222df8 [ 1126.974679][T20064] RBP: 0000001b332114dc R08: 00000000005ffde8 R09: 000000000000e724 [ 1126.974753][T20064] R10: 0000001b32c24218 R11: 000000000000000c R12: 0000000000012b18 [ 1126.974766][T20064] R13: 0000000000001208 R14: 0000001b32c24220 R15: 0000001b32c24218 [ 1126.974788][T20064] [ 1126.974795][T20064] memory: usage 307200kB, limit 307200kB, failcnt 728 [ 1127.172562][T20064] memory+swap: usage 350932kB, limit 9007199254740988kB, failcnt 0 [ 1127.180468][T20064] kmem: usage 276892kB, limit 9007199254740988kB, failcnt 0 [ 1127.187839][T20064] Memory cgroup stats for /syz3: [ 1127.188249][T20064] cache 27701248 [ 1127.196759][T20064] rss 2121728 [ 1127.200049][T20064] shmem 27701248 [ 1127.203675][T20064] mapped_file 0 [ 1127.207145][T20064] dirty 0 [ 1127.210214][T20064] writeback 0 [ 1127.213497][T20064] workingset_refault_anon 121 [ 1127.218266][T20064] workingset_refault_file 32174 [ 1127.223197][T20064] swap 44781568 [ 1127.226657][T20064] swapcached 1101824 [ 1127.230675][T20064] pgpgin 1432588 [ 1127.234238][T20064] pgpgout 1425036 [ 1127.237928][T20064] pgfault 1241356 [ 1127.241596][T20064] pgmajfault 44 [ 1127.245066][T20064] inactive_anon 15593472 [ 1127.249351][T20064] active_anon 15314944 [ 1127.253507][T20064] inactive_file 0 [ 1127.257221][T20064] active_file 8192 [ 1127.260970][T20064] unevictable 16384 [ 1127.264788][T20064] hierarchical_memory_limit 314572800 [ 1127.270390][T20064] hierarchical_memsw_limit 9223372036854771712 [ 1127.276572][T20064] total_cache 27701248 [ 1127.280648][T20064] total_rss 2121728 [ 1127.284471][T20064] total_shmem 27701248 [ 1127.288613][T20064] total_mapped_file 0 [ 1127.292605][T20064] total_dirty 0 [ 1127.296098][T20064] total_writeback 0 [ 1127.299987][T20064] total_workingset_refault_anon 121 [ 1127.305221][T20064] total_workingset_refault_file 32174 [ 1127.310605][T20064] total_swap 44781568 [ 1127.314717][T20064] total_swapcached 1101824 [ 1127.319140][T20064] total_pgpgin 1432588 [ 1127.323217][T20064] total_pgpgout 1425036 [ 1127.327415][T20064] total_pgfault 1241356 [ 1127.331631][T20064] total_pgmajfault 44 [ 1127.335669][T20064] total_inactive_anon 15593472 [ 1127.340440][T20064] total_active_anon 15314944 [ 1127.345053][T20064] total_inactive_file 0 [ 1127.349281][T20064] total_active_file 8192 [ 1127.353549][T20064] total_unevictable 16384 [ 1127.357883][T20064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.594,pid=6109,uid=0 [ 1127.372813][T20064] Memory cgroup out of memory: Killed process 6109 (syz.3.594) total-vm:95872kB, anon-rss:1308kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 1127.406078][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1127.417064][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1127.417105][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1127.417123][ T3304] Call Trace: [ 1127.417144][ T3304] [ 1127.417155][ T3304] __dump_stack+0x1d/0x30 [ 1127.417183][ T3304] dump_stack_lvl+0xe8/0x140 [ 1127.417204][ T3304] dump_stack+0x15/0x1b [ 1127.417287][ T3304] dump_header+0x81/0x220 [ 1127.417327][ T3304] oom_kill_process+0x342/0x400 [ 1127.417367][ T3304] out_of_memory+0x979/0xb80 [ 1127.417404][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 1127.417503][ T3304] charge_memcg+0x51/0xc0 [ 1127.417530][ T3304] __mem_cgroup_charge+0x28/0xb0 [ 1127.417559][ T3304] filemap_add_folio+0x4e/0x1b0 [ 1127.417617][ T3304] __filemap_get_folio+0x31e/0x6b0 [ 1127.417665][ T3304] filemap_fault+0x41f/0xb40 [ 1127.417702][ T3304] __do_fault+0xbc/0x200 [ 1127.417765][ T3304] handle_mm_fault+0xf78/0x2c20 [ 1127.417889][ T3304] do_user_addr_fault+0x636/0x1090 [ 1127.418022][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1127.418056][ T3304] exc_page_fault+0x62/0xa0 [ 1127.418149][ T3304] asm_exc_page_fault+0x26/0x30 [ 1127.418177][ T3304] RIP: 0033:0x7fb7662a5db4 [ 1127.418198][ T3304] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 1127.418223][ T3304] RSP: 002b:00007ffed1d1f4d0 EFLAGS: 00010206 [ 1127.418247][ T3304] RAX: 0000001b32c24000 RBX: 000000000000248d RCX: 000000000011fd78 [ 1127.418292][ T3304] RDX: 000000000948e3ae RSI: 00007ffed1d1f560 RDI: 0000000000000001 [ 1127.418310][ T3304] RBP: 00007ffed1d1f50c R08: 00000000236b1d0a R09: 7fffffffffffffff [ 1127.418327][ T3304] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1127.418345][ T3304] R13: 00000000000927c0 R14: 000000000011fc8c R15: 00007ffed1d1f560 [ 1127.418369][ T3304] [ 1127.418378][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 822 [ 1127.611032][ T3304] memory+swap: usage 350932kB, limit 9007199254740988kB, failcnt 0 [ 1127.618955][ T3304] kmem: usage 277144kB, limit 9007199254740988kB, failcnt 0 [ 1127.626344][ T3304] Memory cgroup stats for /syz3: [ 1127.626809][ T3304] cache 27701248 [ 1127.635373][ T3304] rss 1966080 [ 1127.638876][ T3304] shmem 27701248 [ 1127.642457][ T3304] mapped_file 0 [ 1127.645921][ T3304] dirty 0 [ 1127.648918][ T3304] writeback 0 [ 1127.652210][ T3304] workingset_refault_anon 121 [ 1127.656900][ T3304] workingset_refault_file 32174 [ 1127.661821][ T3304] swap 44781568 [ 1127.665290][ T3304] swapcached 1101824 [ 1127.669221][ T3304] pgpgin 1432588 [ 1127.672773][ T3304] pgpgout 1425074 [ 1127.676416][ T3304] pgfault 1241356 [ 1127.680090][ T3304] pgmajfault 44 [ 1127.683564][ T3304] inactive_anon 15593472 [ 1127.688044][ T3304] active_anon 15159296 [ 1127.692119][ T3304] inactive_file 0 [ 1127.695833][ T3304] active_file 8192 [ 1127.699647][ T3304] unevictable 16384 [ 1127.703461][ T3304] hierarchical_memory_limit 314572800 [ 1127.708890][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 1127.715089][ T3304] total_cache 27701248 [ 1127.719178][ T3304] total_rss 1966080 [ 1127.723014][ T3304] total_shmem 27701248 [ 1127.727143][ T3304] total_mapped_file 0 [ 1127.731217][ T3304] total_dirty 0 [ 1127.734721][ T3304] total_writeback 0 [ 1127.738536][ T3304] total_workingset_refault_anon 121 [ 1127.743766][ T3304] total_workingset_refault_file 32174 [ 1127.749139][ T3304] total_swap 44781568 [ 1127.753349][ T3304] total_swapcached 1101824 [ 1127.757760][ T3304] total_pgpgin 1432588 [ 1127.761835][ T3304] total_pgpgout 1425074 [ 1127.766169][ T3304] total_pgfault 1241356 [ 1127.770377][ T3304] total_pgmajfault 44 [ 1127.774389][ T3304] total_inactive_anon 15593472 [ 1127.779171][ T3304] total_active_anon 15159296 [ 1127.783819][ T3304] total_inactive_file 0 [ 1127.787969][ T3304] total_active_file 8192 [ 1127.792247][ T3304] total_unevictable 16384 [ 1127.796571][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.593,pid=6106,uid=0 [ 1127.811405][ T3304] Memory cgroup out of memory: Killed process 6106 (syz.3.593) total-vm:95872kB, anon-rss:1304kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 1127.911827][T20064] syz.3.16247 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1127.922759][T20064] CPU: 1 UID: 0 PID: 20064 Comm: syz.3.16247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1127.922794][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1127.922811][T20064] Call Trace: [ 1127.922821][T20064] [ 1127.922830][T20064] __dump_stack+0x1d/0x30 [ 1127.922857][T20064] dump_stack_lvl+0xe8/0x140 [ 1127.922925][T20064] dump_stack+0x15/0x1b [ 1127.922947][T20064] dump_header+0x81/0x220 [ 1127.922991][T20064] oom_kill_process+0x342/0x400 [ 1127.923034][T20064] out_of_memory+0x979/0xb80 [ 1127.923270][T20064] try_charge_memcg+0x5e6/0x9e0 [ 1127.923314][T20064] charge_memcg+0x51/0xc0 [ 1127.923345][T20064] __mem_cgroup_charge+0x28/0xb0 [ 1127.923419][T20064] filemap_add_folio+0x4e/0x1b0 [ 1127.923469][T20064] __filemap_get_folio+0x31e/0x6b0 [ 1127.923562][T20064] filemap_fault+0x41f/0xb40 [ 1127.923591][T20064] ? css_rstat_updated+0xb7/0x240 [ 1127.923634][T20064] __do_fault+0xbc/0x200 [ 1127.923710][T20064] handle_mm_fault+0xf78/0x2c20 [ 1127.923828][T20064] do_user_addr_fault+0x636/0x1090 [ 1127.923887][T20064] exc_page_fault+0x62/0xa0 [ 1127.923933][T20064] asm_exc_page_fault+0x26/0x30 [ 1127.923957][T20064] RIP: 0033:0x7fb766395958 [ 1127.923977][T20064] Code: fe 6f 66 60 c5 dd 74 67 60 c5 ed db e9 c5 dd db f3 c5 cd db fd c5 fd d7 cf ff c1 75 78 eb 11 0f 1f 00 f3 0f bc c0 0f b6 0c 06 <0f> b6 04 07 29 c8 0f 01 d6 75 04 c5 f8 77 c3 c5 fc 77 c3 0f 1f 44 [ 1127.923999][T20064] RSP: 002b:00007ffed1d1f1d8 EFLAGS: 00010202 [ 1127.924087][T20064] RAX: 0000000000000002 RBX: 00007fb767155720 RCX: 0000000000000014 [ 1127.924154][T20064] RDX: 0000000000000fac RSI: 0000001b332114dc RDI: 0000001b33222df8 [ 1127.924171][T20064] RBP: 0000001b332114dc R08: 00000000005ffde8 R09: 000000000000e724 [ 1127.924188][T20064] R10: 0000001b32c24218 R11: 000000000000000c R12: 0000000000012b18 [ 1127.924203][T20064] R13: 0000000000001208 R14: 0000001b32c24220 R15: 0000001b32c24218 [ 1127.924292][T20064] [ 1128.107785][T20064] memory: usage 307200kB, limit 307200kB, failcnt 1001 [ 1128.114649][T20064] memory+swap: usage 337672kB, limit 9007199254740988kB, failcnt 0 [ 1128.122577][T20064] kmem: usage 251960kB, limit 9007199254740988kB, failcnt 0 [ 1128.129887][T20064] Memory cgroup stats for /syz3: [ 1128.130353][T20064] cache 27705344 [ 1128.138908][T20064] rss 1802240 [ 1128.142206][T20064] shmem 27701248 [ 1128.145785][T20064] mapped_file 4096 [ 1128.149628][T20064] dirty 0 [ 1128.152579][T20064] writeback 0 [ 1128.155908][T20064] workingset_refault_anon 121 [ 1128.160597][T20064] workingset_refault_file 32183 [ 1128.165563][T20064] swap 44781568 [ 1128.169070][T20064] swapcached 1101824 [ 1128.173013][T20064] pgpgin 1432597 [ 1128.176574][T20064] pgpgout 1425122 [ 1128.180304][T20064] pgfault 1241363 [ 1128.183975][T20064] pgmajfault 50 [ 1128.187444][T20064] inactive_anon 15499264 [ 1128.191715][T20064] active_anon 15089664 [ 1128.195850][T20064] inactive_file 0 [ 1128.199568][T20064] active_file 12288 [ 1128.203406][T20064] unevictable 16384 [ 1128.207222][T20064] hierarchical_memory_limit 314572800 [ 1128.212642][T20064] hierarchical_memsw_limit 9223372036854771712 [ 1128.218803][T20064] total_cache 27705344 [ 1128.223005][T20064] total_rss 1802240 [ 1128.226887][T20064] total_shmem 27701248 [ 1128.231002][T20064] total_mapped_file 4096 [ 1128.231027][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 1128.231039][ T29] audit: type=1400 audit(2000001057.610:353049): avc: denied { create } for pid=20116 comm="syz.4.16263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1128.235284][T20064] total_dirty 0 [ 1128.235296][T20064] total_writeback 0 [ 1128.248110][ T29] audit: type=1400 audit(2000001057.620:353050): avc: denied { listen } for pid=20116 comm="syz.4.16263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1128.261273][T20064] total_workingset_refault_anon 121 [ 1128.261286][T20064] total_workingset_refault_file 32183 [ 1128.261298][T20064] total_swap 44781568 [ 1128.261307][T20064] total_swapcached 1101824 [ 1128.261317][T20064] total_pgpgin 1432597 [ 1128.261331][T20064] total_pgpgout 1425122 [ 1128.261341][T20064] total_pgfault 1241363 [ 1128.261350][T20064] total_pgmajfault 50 [ 1128.261357][T20064] total_inactive_anon 15499264 [ 1128.261365][T20064] total_active_anon 15089664 [ 1128.261374][T20064] total_inactive_file 0 [ 1128.272462][ T29] audit: type=1400 audit(2000001057.652:353051): avc: denied { accept } for pid=20116 comm="syz.4.16263" lport=50321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1128.288556][T20064] total_active_file 12288 [ 1128.288569][T20064] total_unevictable 16384 [ 1128.288580][T20064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.660,pid=6397,uid=0 [ 1128.288663][T20064] Memory cgroup out of memory: Killed process 6397 (syz.3.660) total-vm:95872kB, anon-rss:1308kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 1128.427464][ T29] audit: type=1400 audit(2000001057.715:353052): avc: denied { prog_load } for pid=20116 comm="syz.4.16263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1128.447039][ T29] audit: type=1400 audit(2000001057.715:353053): avc: denied { bpf } for pid=20116 comm="syz.4.16263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1128.468007][ T29] audit: type=1400 audit(2000001057.715:353054): avc: denied { perfmon } for pid=20116 comm="syz.4.16263" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1128.489453][ T29] audit: type=1400 audit(2000001057.715:353055): avc: denied { bpf } for pid=20116 comm="syz.4.16263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1128.510378][ T29] audit: type=1400 audit(2000001057.746:353056): avc: denied { create } for pid=20116 comm="syz.4.16263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1128.531386][ T29] audit: type=1400 audit(2000001057.746:353057): avc: denied { map_create } for pid=20116 comm="syz.4.16263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1128.550941][ T29] audit: type=1400 audit(2000001057.746:353058): avc: denied { bpf } for pid=20116 comm="syz.4.16263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1128.682403][T20122] siw: device registration error -23 [ 1129.288012][T14794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=14794 comm=kworker/0:9 [ 1129.303948][T20136] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1129.342647][T20063] Set syz1 is full, maxelem 65536 reached [ 1129.737178][T20145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.768084][T20147] netlink: 60 bytes leftover after parsing attributes in process `syz.9.16273'. [ 1129.908630][T20153] netlink: '+}[@': attribute type 2 has an invalid length. [ 1129.915970][T20153] netlink: '+}[@': attribute type 1 has an invalid length. [ 1129.923866][T20153] netlink: 179948 bytes leftover after parsing attributes in process `+}[@'. [ 1130.098596][T20168] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16283'. [ 1130.125677][T20157] bond_slave_1: mtu less than device minimum [ 1130.136749][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16283'. [ 1130.196486][T20173] netlink: 'syz.4.16285': attribute type 30 has an invalid length. [ 1130.356858][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16286'. [ 1130.707964][T20193] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1130.993114][T20204] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.080826][T20204] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.237399][T20204] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.338462][T20209] Q6\bY4 speed is unknown, defaulting to 1000 [ 1131.410096][T20209] Q6\bY4 speed is unknown, defaulting to 1000 [ 1131.418220][T20209] lo speed is unknown, defaulting to 1000 [ 1131.424827][T20209] Q6\bY4 speed is unknown, defaulting to 1000 [ 1131.755595][T20204] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.080538][ T4579] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.111780][ T4579] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.152715][ T4579] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.161000][ T4579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.548123][T20226] tipc: Enabling of bearer rejected, already enabled [ 1133.016742][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 1133.016758][ T29] audit: type=1400 audit(2000001062.617:353688): avc: denied { prog_load } for pid=20237 comm="syz.0.16311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1133.033247][T20241] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16312'. [ 1133.042492][ T29] audit: type=1400 audit(2000001062.628:353689): avc: denied { map_create } for pid=20240 comm="syz.4.16312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1133.071174][ T29] audit: type=1400 audit(2000001062.628:353690): avc: denied { bpf } for pid=20240 comm="syz.4.16312" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1133.092162][ T29] audit: type=1400 audit(2000001062.628:353692): avc: denied { map_read map_write } for pid=20240 comm="syz.4.16312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1133.112457][ T29] audit: type=1400 audit(2000001062.628:353691): avc: denied { bpf } for pid=20237 comm="syz.0.16311" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1133.133428][ T29] audit: type=1400 audit(2000001062.628:353693): avc: denied { perfmon } for pid=20237 comm="syz.0.16311" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1133.154781][ T29] audit: type=1400 audit(2000001062.628:353694): avc: denied { prog_load } for pid=20240 comm="syz.4.16312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1133.174244][ T29] audit: type=1400 audit(2000001062.628:353695): avc: denied { allowed } for pid=20240 comm="syz.4.16312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1133.281744][ T29] audit: type=1400 audit(2000001062.628:353696): avc: denied { create } for pid=20240 comm="syz.4.16312" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1133.303643][ T29] audit: type=1400 audit(2000001062.628:353697): avc: denied { map } for pid=20240 comm="syz.4.16312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=175809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1133.520332][T20260] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16319'. [ 1134.440604][T20283] macsec0: entered promiscuous mode [ 1134.445860][T20283] bridge0: entered promiscuous mode [ 1134.451623][T20283] bridge0: port 2(macsec0) entered blocking state [ 1134.458076][T20283] bridge0: port 2(macsec0) entered disabled state [ 1134.464770][T20283] macsec0: entered allmulticast mode [ 1134.470170][T20283] bridge0: entered allmulticast mode [ 1134.477690][T20283] macsec0: left allmulticast mode [ 1134.482779][T20283] bridge0: left allmulticast mode [ 1134.489226][T20283] bridge0: left promiscuous mode [ 1135.179500][T20292] netlink: 'syz.9.16330': attribute type 1 has an invalid length. [ 1135.204785][T20292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1135.227276][T20292] vlan1: entered allmulticast mode [ 1135.232612][T20292] bond3: entered allmulticast mode [ 1135.252773][T20292] bond3: (slave gretap1): making interface the new active one [ 1135.260418][T20292] gretap1: entered allmulticast mode [ 1135.276219][T20292] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1135.565289][T20295] Q6\bY4 speed is unknown, defaulting to 1000 [ 1135.606941][T20295] Q6\bY4 speed is unknown, defaulting to 1000 [ 1135.616314][T20295] lo speed is unknown, defaulting to 1000 [ 1135.624263][T20295] Q6\bY4 speed is unknown, defaulting to 1000 [ 1135.883249][T20308] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16335'. [ 1135.930767][T14792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=14792 comm=kworker/0:6 [ 1135.944836][T20310] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1136.921651][T20337] bridge0: port 1(gretap0) entered disabled state [ 1136.958605][T20337] : left promiscuous mode [ 1136.963529][T20337] : left allmulticast mode [ 1136.986281][T20337] bond1: left promiscuous mode [ 1136.997593][T20337] vlan0: left allmulticast mode [ 1137.033506][T20803] Q6\bY4 speed is unknown, defaulting to 1000 [ 1137.040475][T20803] syz: Port: 1 Link DOWN [ 1137.309111][T20352] siw: device registration error -23 [ 1137.415219][T20358] netlink: 'syz.4.16351': attribute type 1 has an invalid length. [ 1137.452644][T20358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1137.477822][T20362] vlan1: entered allmulticast mode [ 1137.483069][T20362] bond2: entered allmulticast mode [ 1137.540823][T20358] bond2: (slave gretap1): making interface the new active one [ 1137.548373][T20358] gretap1: entered allmulticast mode [ 1137.554817][T20358] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1137.617144][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16350'. [ 1137.639529][T20367] netlink: 'syz.4.16354': attribute type 1 has an invalid length. [ 1137.639881][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16350'. [ 1137.671327][T20367] bond3: (slave gretap2): making interface the new active one [ 1137.679586][T20367] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1137.796107][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 1137.796125][ T29] audit: type=1400 audit(2000001067.646:354257): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.827127][ T29] audit: type=1400 audit(2000001067.646:354258): avc: denied { open } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.896865][ T29] audit: type=1400 audit(2000001067.709:354259): avc: denied { ioctl } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1137.922794][ T29] audit: type=1400 audit(2000001067.740:354260): avc: denied { prog_load } for pid=20377 comm="syz.5.16358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1137.942441][ T29] audit: type=1400 audit(2000001067.751:354261): avc: denied { bpf } for pid=20377 comm="syz.5.16358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1137.960907][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16358'. [ 1137.963475][ T29] audit: type=1400 audit(2000001067.751:354262): avc: denied { perfmon } for pid=20377 comm="syz.5.16358" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1137.986181][T20382] IPVS: Unknown mcast interface: vcan0 [ 1137.993596][ T29] audit: type=1400 audit(2000001067.751:354263): avc: denied { bpf } for pid=20377 comm="syz.5.16358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1138.019904][ T29] audit: type=1400 audit(2000001067.751:354264): avc: denied { prog_load } for pid=20377 comm="syz.5.16358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1138.042316][ T29] audit: type=1400 audit(2000001067.772:354265): avc: denied { prog_load } for pid=20379 comm="syz.4.16359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1138.061832][ T29] audit: type=1400 audit(2000001067.772:354266): avc: denied { bpf } for pid=20379 comm="syz.4.16359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1138.428369][T20396] netlink: 'syz.5.16365': attribute type 1 has an invalid length. [ 1139.612129][T20396] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1139.657015][T20409] syzkaller0: entered promiscuous mode [ 1139.671222][T20409] syzkaller0: entered allmulticast mode [ 1139.708589][T20411] tipc: Resetting bearer [ 1140.080225][T20422] Q6\bY4 speed is unknown, defaulting to 1000 [ 1140.111317][T20424] random: crng reseeded on system resumption [ 1140.172110][T20422] Q6\bY4 speed is unknown, defaulting to 1000 [ 1140.221956][T20422] lo speed is unknown, defaulting to 1000 [ 1140.228627][T20422] Q6\bY4 speed is unknown, defaulting to 1000 [ 1140.539347][T20403] Set syz1 is full, maxelem 65536 reached [ 1140.671125][T20430] Q6\bY4 speed is unknown, defaulting to 1000 [ 1140.771413][T20430] Q6\bY4 speed is unknown, defaulting to 1000 [ 1140.781045][T20430] lo speed is unknown, defaulting to 1000 [ 1140.787636][T20430] Q6\bY4 speed is unknown, defaulting to 1000 [ 1141.337899][T20445] netlink: 'syz.9.16379': attribute type 4 has an invalid length. [ 1141.381805][T20445] netlink: 'syz.9.16379': attribute type 4 has an invalid length. [ 1141.465702][T20449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20449 comm=syz.5.16382 [ 1141.532384][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16385'. [ 1141.543897][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16385'. [ 1141.685174][T20803] IPVS: starting estimator thread 0... [ 1141.771573][T20471] loop5: detected capacity change from 0 to 2048 [ 1141.771901][T20473] veth0: entered promiscuous mode [ 1141.790401][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16389'. [ 1141.799621][T20466] IPVS: using max 2160 ests per chain, 108000 per kthread [ 1141.805489][T20471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.819936][T20471] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.895693][T20480] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.16391: bg 0: block 345: padding at end of block bitmap is not set [ 1141.916143][T20480] EXT4-fs (loop5): Remounting filesystem read-only [ 1141.925252][ T1192] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1141.982964][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.029115][T20485] loop5: detected capacity change from 0 to 2048 [ 1142.044549][T20485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.086991][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.209579][T20492] loop5: detected capacity change from 0 to 512 [ 1142.234662][T20492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.248876][T20492] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.331910][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.371276][T20497] netlink: 'syz.5.16397': attribute type 7 has an invalid length. [ 1142.379215][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16397'. [ 1142.532547][T20503] Q6\bY4 speed is unknown, defaulting to 1000 [ 1142.566144][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 1142.566226][ T29] audit: type=1400 audit(2000001072.653:354860): avc: denied { read write } for pid=20499 comm="syz.5.16398" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.597048][ T29] audit: type=1400 audit(2000001072.653:354861): avc: denied { open } for pid=20499 comm="syz.5.16398" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.620699][T20504] loop5: detected capacity change from 0 to 1024 [ 1142.631204][T20504] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1142.641039][T20504] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1142.653949][T20504] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1142.664358][T20504] EXT4-fs error (device loop5): ext4_get_journal_inode:5806: inode #32: comm syz.5.16398: iget: special inode unallocated [ 1142.682062][T20505] Q6\bY4 speed is unknown, defaulting to 1000 [ 1142.689508][T20503] Q6\bY4 speed is unknown, defaulting to 1000 [ 1142.705074][T20504] EXT4-fs (loop5): no journal found [ 1142.710468][T20504] EXT4-fs (loop5): can't get journal size [ 1142.725824][T20503] lo speed is unknown, defaulting to 1000 [ 1142.728160][T20504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1142.748274][T20503] Q6\bY4 speed is unknown, defaulting to 1000 [ 1142.759315][T20510] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1142.774682][ T29] audit: type=1400 audit(2000001072.695:354862): avc: denied { ioctl } for pid=20499 comm="syz.5.16398" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1142.786714][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16403'. [ 1142.800553][ T29] audit: type=1400 audit(2000001072.716:354863): avc: denied { mounton } for pid=20499 comm="syz.5.16398" path="/209/file0" dev="tmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1142.832577][ T29] audit: type=1400 audit(2000001072.748:354864): avc: denied { open } for pid=20498 comm="syz.3.16399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1142.852443][ T29] audit: type=1400 audit(2000001072.748:354865): avc: denied { perfmon } for pid=20498 comm="syz.3.16399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1142.873776][ T29] audit: type=1400 audit(2000001072.748:354866): avc: denied { kernel } for pid=20498 comm="syz.3.16399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1142.893989][ T29] audit: type=1400 audit(2000001072.748:354867): avc: denied { unmount } for pid=20502 comm="syz.0.16400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1142.914199][ T29] audit: type=1400 audit(2000001072.821:354868): avc: denied { prog_load } for pid=20507 comm="syz.9.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1142.933723][ T29] audit: type=1400 audit(2000001072.821:354869): avc: denied { bpf } for pid=20507 comm="syz.9.16401" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1142.958974][T20505] Q6\bY4 speed is unknown, defaulting to 1000 [ 1142.967220][T20505] lo speed is unknown, defaulting to 1000 [ 1142.973446][T20505] Q6\bY4 speed is unknown, defaulting to 1000 [ 1143.000936][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16403'. [ 1143.016816][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.170923][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16404'. [ 1143.232754][T20528] netlink: 96 bytes leftover after parsing attributes in process `syz.9.16415'. [ 1143.247794][T20529] loop5: detected capacity change from 0 to 128 [ 1143.359378][T20533] netlink: '+}[@': attribute type 10 has an invalid length. [ 1144.025107][T20552] siw: device registration error -23 [ 1144.027689][T20554] netlink: 28 bytes leftover after parsing attributes in process `wޡ'. [ 1144.198090][T20564] netlink: 'syz.5.16429': attribute type 13 has an invalid length. [ 1144.261650][T20564] gretap0: refused to change device tx_queue_len [ 1144.269289][T20564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1144.302182][T20568] vlan2: entered allmulticast mode [ 1144.586727][T20573] loop5: detected capacity change from 0 to 512 [ 1144.617914][T20573] EXT4-fs warning (device loop5): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1144.652751][T20573] EXT4-fs (loop5): mount failed [ 1145.235909][T20584] Q6\bY4 speed is unknown, defaulting to 1000 [ 1145.478767][T20586] syzkaller0: entered promiscuous mode [ 1145.485262][T20586] syzkaller0: entered allmulticast mode [ 1145.502680][T20584] Q6\bY4 speed is unknown, defaulting to 1000 [ 1145.511637][T20584] lo speed is unknown, defaulting to 1000 [ 1145.517922][T20584] Q6\bY4 speed is unknown, defaulting to 1000 [ 1145.904982][T20604] netlink: 'syz.9.16435': attribute type 13 has an invalid length. [ 1145.927174][T20604] gretap0: refused to change device tx_queue_len [ 1145.935802][T20604] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1145.983632][T20604] vlan2: entered allmulticast mode [ 1145.988874][T20604] bridge_slave_0: entered allmulticast mode [ 1146.333425][T20616] bridge0: entered promiscuous mode [ 1146.338753][T20616] macsec1: entered promiscuous mode [ 1146.345418][T20616] bridge0: port 2(macsec1) entered blocking state [ 1146.351991][T20616] bridge0: port 2(macsec1) entered disabled state [ 1146.358663][T20616] macsec1: entered allmulticast mode [ 1146.363976][T20616] bridge0: entered allmulticast mode [ 1146.432917][T20616] macsec1: left allmulticast mode [ 1146.438031][T20616] bridge0: left allmulticast mode [ 1146.450598][T20616] bridge0: left promiscuous mode [ 1147.338221][ T29] kauditd_printk_skb: 817 callbacks suppressed [ 1147.338236][ T29] audit: type=1400 audit(2000001077.671:355686): avc: denied { map_create } for pid=20620 comm="syz.4.16439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1147.404902][ T29] audit: type=1400 audit(2000001077.671:355687): avc: denied { open } for pid=20630 comm="syz.3.16443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1147.424661][ T29] audit: type=1400 audit(2000001077.671:355688): avc: denied { perfmon } for pid=20630 comm="syz.3.16443" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1147.446004][ T29] audit: type=1400 audit(2000001077.671:355689): avc: denied { kernel } for pid=20630 comm="syz.3.16443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1147.465940][ T29] audit: type=1400 audit(2000001077.671:355690): avc: denied { tracepoint } for pid=20630 comm="syz.3.16443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1147.486218][ T29] audit: type=1400 audit(2000001077.703:355691): avc: denied { map_read map_write } for pid=20620 comm="syz.4.16439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1147.506602][ T29] audit: type=1400 audit(2000001077.713:355692): avc: denied { prog_load } for pid=20620 comm="syz.4.16439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1147.526143][ T29] audit: type=1400 audit(2000001077.713:355693): avc: denied { bpf } for pid=20620 comm="syz.4.16439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1147.547097][ T29] audit: type=1400 audit(2000001077.713:355694): avc: denied { perfmon } for pid=20620 comm="syz.4.16439" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1147.568758][ T29] audit: type=1400 audit(2000001077.713:355695): avc: denied { prog_run } for pid=20620 comm="syz.4.16439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.524079][T20661] macsec0: entered promiscuous mode [ 1148.529364][T20661] bridge0: entered promiscuous mode [ 1148.534979][T20661] bridge0: port 2(macsec0) entered blocking state [ 1148.541461][T20661] bridge0: port 2(macsec0) entered disabled state [ 1148.548111][T20661] macsec0: entered allmulticast mode [ 1148.553418][T20661] bridge0: entered allmulticast mode [ 1148.560214][T20661] macsec0: left allmulticast mode [ 1148.565272][T20661] bridge0: left allmulticast mode [ 1148.571551][T20661] bridge0: left promiscuous mode [ 1148.586071][T20659] siw: device registration error -23 [ 1149.465231][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16454'. [ 1149.512457][T20673] hsr_slave_0: left promiscuous mode [ 1149.522406][T20673] hsr_slave_1: left promiscuous mode [ 1149.721619][T20682] Q6\bY4 speed is unknown, defaulting to 1000 [ 1149.801545][T20682] Q6\bY4 speed is unknown, defaulting to 1000 [ 1149.809458][T20682] lo speed is unknown, defaulting to 1000 [ 1149.816140][T20682] Q6\bY4 speed is unknown, defaulting to 1000 [ 1151.640329][T20715] siw: device registration error -23 [ 1151.854881][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16472'. [ 1152.026595][T20707] siw: device registration error -23 [ 1152.277732][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 1152.277748][ T29] audit: type=1400 audit(2000001082.847:356203): avc: denied { create } for pid=20706 comm="syz.9.16469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.551821][ T29] audit: type=1400 audit(2000001082.878:356204): avc: denied { prog_load } for pid=20711 comm="syz.0.16471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1152.571390][ T29] audit: type=1400 audit(2000001082.878:356205): avc: denied { bpf } for pid=20711 comm="syz.0.16471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1152.592392][ T29] audit: type=1400 audit(2000001082.878:356206): avc: denied { write } for pid=20711 comm="syz.0.16471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1152.613334][ T29] audit: type=1400 audit(2000001082.889:356207): avc: denied { create } for pid=20726 comm="syz.4.16473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.634195][ T29] audit: type=1400 audit(2000001082.889:356208): avc: denied { write } for pid=20726 comm="syz.4.16473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.655000][ T29] audit: type=1400 audit(2000001082.889:356209): avc: denied { read } for pid=20726 comm="syz.4.16473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.675733][ T29] audit: type=1400 audit(2000001082.889:356210): avc: denied { create } for pid=20726 comm="syz.4.16473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1152.696768][ T29] audit: type=1400 audit(2000001082.889:356211): avc: denied { write } for pid=20711 comm="syz.0.16471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1152.717741][ T29] audit: type=1400 audit(2000001082.889:356212): avc: denied { module_request } for pid=20711 comm="syz.0.16471" kmod="netdev-wg2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1152.886011][T20739] bridge0: port 3(gretap0) entered disabled state [ 1152.913328][T20739] ip6tnl0: left promiscuous mode [ 1152.918365][T20739] ip6tnl0: left allmulticast mode [ 1152.933923][T20739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.941288][T20739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.008751][T20739] wg2: left promiscuous mode [ 1153.013788][T20739] wg2: left allmulticast mode [ 1153.067216][T20739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.087897][T20739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.146924][T20739] macsec0: left promiscuous mode [ 1153.179987][ T1213] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.199622][ T1213] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.218091][ T1213] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.262629][ T1213] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.472294][T20769] netlink: 'syz.3.16487': attribute type 4 has an invalid length. [ 1153.615136][T20772] Q6\bY4 speed is unknown, defaulting to 1000 [ 1153.689974][T20772] Q6\bY4 speed is unknown, defaulting to 1000 [ 1153.698042][T20772] lo speed is unknown, defaulting to 1000 [ 1153.709294][T20772] Q6\bY4 speed is unknown, defaulting to 1000 [ 1155.338523][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16500'. [ 1155.350588][T20812] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.360474][T20812] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.406139][T20815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16501'. [ 1155.416833][T20815] IPVS: Unknown mcast interface: [ 1155.427568][T20812] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.437477][T20812] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.494142][T20812] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.504015][T20812] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.569366][T20812] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.579254][T20812] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.659110][ T1187] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.667402][ T1187] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.712369][ T1187] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.720676][ T1187] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.736570][ T1187] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.744942][ T1187] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.784994][ T1187] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.793285][ T1187] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.239661][T20838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16510'. [ 1156.256459][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16510'. [ 1156.768692][T20854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1157.071126][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 1157.071142][ T29] audit: type=1400 audit(2000001087.876:356816): avc: denied { prog_load } for pid=20867 comm="syz.4.16520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.125436][ T29] audit: type=1400 audit(2000001087.876:356817): avc: denied { bpf } for pid=20867 comm="syz.4.16520" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1157.239785][ T29] audit: type=1400 audit(2000001088.023:356818): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1157.264322][ T29] audit: type=1400 audit(2000001088.023:356819): avc: denied { open } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1157.288755][ T29] audit: type=1400 audit(2000001088.023:356820): avc: denied { ioctl } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1158.143937][T20876] Q6\bY4 speed is unknown, defaulting to 1000 [ 1158.181146][T20876] Q6\bY4 speed is unknown, defaulting to 1000 [ 1158.188602][T20876] lo speed is unknown, defaulting to 1000 [ 1158.195025][T20876] Q6\bY4 speed is unknown, defaulting to 1000 [ 1158.301584][ T29] audit: type=1400 audit(2000001088.054:356821): avc: denied { open } for pid=20870 comm="syz.5.16522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1158.321319][ T29] audit: type=1400 audit(2000001088.054:356822): avc: denied { perfmon } for pid=20870 comm="syz.5.16522" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1158.342628][ T29] audit: type=1400 audit(2000001088.054:356823): avc: denied { kernel } for pid=20870 comm="syz.5.16522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1158.362422][ T29] audit: type=1400 audit(2000001088.138:356824): avc: denied { execmem } for pid=20871 comm="syz.9.16521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1158.382147][ T29] audit: type=1400 audit(2000001088.243:356825): avc: denied { prog_load } for pid=20871 comm="syz.9.16521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1159.162690][T20895] siw: device registration error -23 [ 1161.360801][T20931] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1161.701495][T20944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16543'. [ 1161.789940][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16543'. [ 1161.799435][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16545'. [ 1161.852671][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 1161.852689][ T29] audit: type=1400 audit(2000001092.894:357219): avc: denied { prog_load } for pid=20953 comm="syz.5.16546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1161.878422][ T29] audit: type=1400 audit(2000001092.894:357220): avc: denied { bpf } for pid=20953 comm="syz.5.16546" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1161.900463][ T29] audit: type=1400 audit(2000001092.936:357221): avc: denied { create } for pid=20956 comm="syz.0.16547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1161.920578][ T29] audit: type=1400 audit(2000001092.936:357222): avc: denied { setopt } for pid=20956 comm="syz.0.16547" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1161.941679][ T29] audit: type=1400 audit(2000001092.936:357223): avc: denied { map_create } for pid=20956 comm="syz.0.16547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1161.961333][ T29] audit: type=1400 audit(2000001092.936:357224): avc: denied { map_read map_write } for pid=20956 comm="syz.0.16547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1161.981659][ T29] audit: type=1400 audit(2000001092.936:357225): avc: denied { prog_load } for pid=20956 comm="syz.0.16547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1161.998046][T20955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16546'. [ 1162.001260][ T29] audit: type=1400 audit(2000001092.946:357226): avc: denied { bpf } for pid=20956 comm="syz.0.16547" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1162.031175][ T29] audit: type=1400 audit(2000001092.946:357227): avc: denied { perfmon } for pid=20956 comm="syz.0.16547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1162.052469][ T29] audit: type=1400 audit(2000001092.946:357228): avc: denied { mounton } for pid=20956 comm="syz.0.16547" path="/3399" dev="tmpfs" ino=18413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1162.846694][T20986] bond4: entered promiscuous mode [ 1162.851789][T20986] bond4: entered allmulticast mode [ 1162.875270][T20986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1162.894402][T20986] bond4 (unregistering): Released all slaves [ 1163.249912][T21003] Q6\bY4 speed is unknown, defaulting to 1000 [ 1163.397493][T21003] Q6\bY4 speed is unknown, defaulting to 1000 [ 1163.430044][T21003] lo speed is unknown, defaulting to 1000 [ 1163.720305][T21017] Q6\bY4 speed is unknown, defaulting to 1000 [ 1163.839222][T21017] Q6\bY4 speed is unknown, defaulting to 1000 [ 1164.126994][T21003] Q6\bY4 speed is unknown, defaulting to 1000 [ 1164.161503][T21017] lo speed is unknown, defaulting to 1000 [ 1164.171203][T21017] Q6\bY4 speed is unknown, defaulting to 1000 [ 1164.277119][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16571'. [ 1164.292058][T21021] loop5: detected capacity change from 0 to 256 [ 1164.341436][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16571'. [ 1164.345088][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16572'. [ 1164.362625][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16572'. [ 1164.567622][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16574'. [ 1164.596721][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16574'. [ 1164.700560][T21036] Q6\bY4 speed is unknown, defaulting to 1000 [ 1164.784392][T21036] Q6\bY4 speed is unknown, defaulting to 1000 [ 1164.792724][T21036] lo speed is unknown, defaulting to 1000 [ 1164.800266][T21036] Q6\bY4 speed is unknown, defaulting to 1000 [ 1165.726975][T21044] netlink: 'syz.9.16578': attribute type 1 has an invalid length. [ 1165.801682][T21052] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1165.814345][T21052] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1165.824739][T21052] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1166.280656][T21075] siw: device registration error -23 [ 1166.304731][T21082] geneve2: entered promiscuous mode [ 1166.310003][T21082] geneve2: entered allmulticast mode [ 1166.620070][ T29] kauditd_printk_skb: 993 callbacks suppressed [ 1166.620089][ T29] audit: type=1400 audit(2000001097.912:358222): avc: denied { read } for pid=21102 comm="syz.5.16595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.651988][T21105] tipc: Enabled bearer , priority 0 [ 1166.667147][T21105] syzkaller0: entered promiscuous mode [ 1166.672687][T21105] syzkaller0: entered allmulticast mode [ 1166.684151][ T29] audit: type=1400 audit(2000001097.943:358223): avc: denied { read } for pid=21102 comm="syz.5.16595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.704956][ T29] audit: type=1400 audit(2000001097.943:358224): avc: denied { write } for pid=21102 comm="syz.5.16595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.725777][ T29] audit: type=1400 audit(2000001097.954:358225): avc: denied { ioctl } for pid=21102 comm="syz.5.16595" path="socket:[178651]" dev="sockfs" ino=178651 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.752031][ T29] audit: type=1400 audit(2000001097.975:358226): avc: denied { module_request } for pid=21070 comm="syz.3.16588" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1166.777987][T21111] tipc: Resetting bearer [ 1166.784968][T21102] tipc: Resetting bearer [ 1166.792000][T21102] tipc: Disabling bearer [ 1166.962237][ T29] audit: type=1400 audit(2000001098.017:358227): avc: denied { module_request } for pid=21070 comm="syz.3.16588" kmod="crypto-ecb(cipher_null)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1166.985950][ T29] audit: type=1400 audit(2000001098.164:358228): avc: denied { map_create } for pid=21116 comm="syz.9.16597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1167.005578][ T29] audit: type=1400 audit(2000001098.164:358229): avc: denied { create } for pid=21116 comm="syz.9.16597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.026567][ T29] audit: type=1400 audit(2000001098.164:358230): avc: denied { prog_load } for pid=21116 comm="syz.9.16597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1167.046123][ T29] audit: type=1400 audit(2000001098.164:358231): avc: denied { bpf } for pid=21116 comm="syz.9.16597" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1167.501925][T21164] __nla_validate_parse: 2 callbacks suppressed [ 1167.501939][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16602'. [ 1167.568681][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16602'. [ 1167.615464][T21177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16605'. [ 1167.643683][T21164] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16602'. [ 1167.657792][T21164] netlink: 6 bytes leftover after parsing attributes in process `syz.5.16602'. [ 1167.763023][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16611'. [ 1167.808829][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16611'. [ 1167.970675][T21200] loop5: detected capacity change from 0 to 512 [ 1167.998557][T21200] EXT4-fs: Ignoring removed mblk_io_submit option [ 1168.021014][T21200] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1168.531656][ T7880] page_pool_release_retry() stalled pool shutdown: id 402, 47 inflight 605 sec [ 1169.753177][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16631'. [ 1169.764806][T21241] netlink: 'syz.0.16628': attribute type 3 has an invalid length. [ 1169.794106][T21241] netlink: 'syz.0.16628': attribute type 3 has an invalid length. [ 1169.853170][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16631'. [ 1169.978636][T21251] tipc: Enabling of bearer rejected, already enabled [ 1170.133920][T21261] bond0: (slave bond3): Releasing backup interface [ 1170.153891][T21265] syzkaller0: entered allmulticast mode [ 1170.196112][T21259] syzkaller0: entered promiscuous mode [ 1170.201852][T21261] netlink: 'syz.3.16639': attribute type 10 has an invalid length. [ 1170.209967][T21261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16639'. [ 1170.353877][T21259] syzkaller0 (unregistering): left allmulticast mode [ 1170.364026][T21259] syzkaller0 (unregistering): left promiscuous mode [ 1170.478595][T21274] IPv6: NLM_F_CREATE should be specified when creating new route [ 1171.456433][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 1171.456451][ T29] audit: type=1400 audit(2000001102.982:359374): avc: denied { prog_load } for pid=21297 comm="syz.3.16652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.482443][ T29] audit: type=1400 audit(2000001102.982:359375): avc: denied { bpf } for pid=21297 comm="syz.3.16652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.503664][ T29] audit: type=1400 audit(2000001102.993:359376): avc: denied { perfmon } for pid=21297 comm="syz.3.16652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.552210][ T29] audit: type=1400 audit(2000001103.056:359377): avc: denied { module_request } for pid=21309 comm="syz.0.16658" kmod="crypto-xcbc(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1171.591639][ T29] audit: type=1400 audit(2000001103.129:359378): avc: denied { module_request } for pid=21309 comm="syz.0.16658" kmod="crypto-xcbc(aes)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1171.619198][ T29] audit: type=1400 audit(2000001103.150:359379): avc: denied { map_create } for pid=21328 comm="syz.3.16660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.638809][ T29] audit: type=1400 audit(2000001103.150:359380): avc: denied { bpf } for pid=21328 comm="syz.3.16660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1171.660037][ T29] audit: type=1400 audit(2000001103.161:359381): avc: denied { map_read map_write } for pid=21328 comm="syz.3.16660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1171.702434][ T29] audit: type=1400 audit(2000001103.203:359382): avc: denied { create } for pid=21328 comm="syz.3.16660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1171.723643][ T29] audit: type=1400 audit(2000001103.203:359383): avc: denied { mounton } for pid=21328 comm="syz.3.16660" path="/3670/file0" dev="tmpfs" ino=19663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1172.162732][T21356] rdma_rxe: rxe_newlink: failed to add lo [ 1172.323179][T21384] __nla_validate_parse: 6 callbacks suppressed [ 1172.323197][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16664'. [ 1172.346645][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16664'. [ 1172.413078][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16667'. [ 1172.436141][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16667'. [ 1173.770685][T21420] Q6\bY4 speed is unknown, defaulting to 1000 [ 1173.819506][T21422] tipc: New replicast peer: 255.255.255.255 [ 1173.825679][T21422] tipc: Enabled bearer , priority 10 [ 1173.960043][T21420] Q6\bY4 speed is unknown, defaulting to 1000 [ 1174.030945][T21420] lo speed is unknown, defaulting to 1000 [ 1174.089337][T21420] Q6\bY4 speed is unknown, defaulting to 1000 [ 1174.962090][T21431] netlink: 'syz.0.16679': attribute type 1 has an invalid length. [ 1174.969984][T21431] netlink: 'syz.0.16679': attribute type 2 has an invalid length. [ 1174.999032][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16679'. [ 1175.030833][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16680'. [ 1175.117345][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16680'. [ 1175.423084][T21414] loop5: detected capacity change from 0 to 512 [ 1175.462624][T21414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1175.494368][T21414] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1175.540486][T21414] EXT4-fs (loop5): 1 truncate cleaned up [ 1175.563114][T21414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.784062][T21472] Q6\bY4 speed is unknown, defaulting to 1000 [ 1175.824378][T21473] tipc: Bearer : already 2 bearers with priority 10 [ 1175.831732][T21473] tipc: Bearer : trying with adjusted priority [ 1175.838764][T21473] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1175.846972][T21472] Q6\bY4 speed is unknown, defaulting to 1000 [ 1175.858628][T21472] lo speed is unknown, defaulting to 1000 [ 1175.868797][T21472] Q6\bY4 speed is unknown, defaulting to 1000 [ 1176.311746][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 1176.311764][ T29] audit: type=1400 audit(2000001108.074:359913): avc: denied { map_create } for pid=21479 comm="syz.3.16694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.337738][ T29] audit: type=1400 audit(2000001108.074:359914): avc: denied { bpf } for pid=21479 comm="syz.3.16694" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1176.363378][ T29] audit: type=1400 audit(2000001108.105:359915): avc: denied { execmem } for pid=21480 comm="syz.0.16693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1176.383061][ T29] audit: type=1400 audit(2000001108.116:359916): avc: denied { map_read map_write } for pid=21479 comm="syz.3.16694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.403270][ T29] audit: type=1400 audit(2000001108.126:359917): avc: denied { create } for pid=21483 comm="syz.4.16704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1176.424229][ T29] audit: type=1400 audit(2000001108.137:359918): avc: denied { prog_load } for pid=21479 comm="syz.3.16694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.460915][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16695'. [ 1176.471502][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16695'. [ 1176.514542][ T29] audit: type=1400 audit(2000001108.137:359919): avc: denied { bpf } for pid=21479 comm="syz.3.16694" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1176.535686][ T29] audit: type=1400 audit(2000001108.210:359920): avc: denied { map } for pid=21483 comm="syz.4.16704" path="socket:[179075]" dev="sockfs" ino=179075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1176.560514][ T29] audit: type=1400 audit(2000001108.210:359921): avc: denied { read } for pid=21483 comm="syz.4.16704" path="socket:[179075]" dev="sockfs" ino=179075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1176.585362][ T29] audit: type=1400 audit(2000001108.210:359922): avc: denied { prog_load } for pid=21479 comm="syz.3.16694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.620078][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.695851][T21494] netlink: 'syz.4.16697': attribute type 1 has an invalid length. [ 1176.786421][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16697'. [ 1177.034842][T21510] syzkaller0: entered promiscuous mode [ 1177.040392][T21510] syzkaller0: entered allmulticast mode [ 1177.187067][T21514] __nla_validate_parse: 2 callbacks suppressed [ 1177.187085][T21514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16703'. [ 1177.313838][T21516] Q6\bY4 speed is unknown, defaulting to 1000 [ 1177.353184][T21519] tipc: New replicast peer: 255.255.255.255 [ 1177.359314][T21519] tipc: Enabled bearer , priority 10 [ 1177.400496][T21516] Q6\bY4 speed is unknown, defaulting to 1000 [ 1177.419831][T21516] lo speed is unknown, defaulting to 1000 [ 1177.430396][T21516] Q6\bY4 speed is unknown, defaulting to 1000 [ 1177.640035][T21524] netlink: 'syz.9.16708': attribute type 10 has an invalid length. [ 1177.805529][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16710'. [ 1177.835569][T21529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16710'. [ 1178.657584][T14794] page_pool_release_retry() stalled pool shutdown: id 428, 30 inflight 544 sec [ 1178.965185][ T7880] page_pool_release_retry() stalled pool shutdown: id 404, 51 inflight 605 sec [ 1179.062878][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16715'. [ 1179.103268][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16715'. [ 1179.799558][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16724'. [ 1180.556821][T21556] Set syz1 is full, maxelem 65536 reached [ 1180.688095][T21598] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 1180.848466][T21602] netlink: 'syz.4.16731': attribute type 10 has an invalid length. [ 1180.894603][T21604] rdma_rxe: rxe_newlink: failed to add lo [ 1181.077716][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 1181.077732][ T29] audit: type=1400 audit(2000001113.092:360672): avc: denied { create } for pid=21614 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1181.132681][ T29] audit: type=1400 audit(2000001113.092:360673): avc: denied { bind } for pid=21614 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1181.153450][ T29] audit: type=1400 audit(2000001113.092:360674): avc: denied { setopt } for pid=21614 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1181.174359][ T29] audit: type=1400 audit(2000001113.092:360675): avc: denied { write } for pid=21614 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1181.195196][ T29] audit: type=1400 audit(2000001113.092:360676): avc: denied { read } for pid=21614 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1181.291791][ T29] audit: type=1400 audit(2000001113.134:360677): avc: denied { open } for pid=21616 comm="syz.4.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1181.311582][ T29] audit: type=1400 audit(2000001113.134:360678): avc: denied { perfmon } for pid=21616 comm="syz.4.16738" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.332874][ T29] audit: type=1400 audit(2000001113.134:360679): avc: denied { kernel } for pid=21616 comm="syz.4.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1181.352685][ T29] audit: type=1400 audit(2000001113.207:360680): avc: denied { prog_load } for pid=21616 comm="syz.4.16738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.372163][ T29] audit: type=1400 audit(2000001113.207:360681): avc: denied { bpf } for pid=21616 comm="syz.4.16738" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.624376][T21619] bridge0: port 3(gretap0) entered blocking state [ 1181.630916][T21619] bridge0: port 3(gretap0) entered forwarding state [ 1181.637981][T14795] page_pool_release_retry() stalled pool shutdown: id 407, 51 inflight 604 sec [ 1181.666403][T21619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.684119][T21619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.695444][T21619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1181.867723][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16745'. [ 1181.888612][T21639] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16745'. [ 1181.907414][T21639] 1XD: renamed from 30XD [ 1181.916093][T21639] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 1182.088464][T21646] netlink: 'syz.5.16747': attribute type 10 has an invalid length. [ 1182.117351][T21646] bond0: (slave dummy0): Releasing backup interface [ 1182.137696][T21646] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1182.167044][T21646] team0: Failed to send options change via netlink (err -105) [ 1182.174762][T21646] team0: Port device dummy0 added [ 1183.524302][T21670] Q6\bY4 speed is unknown, defaulting to 1000 [ 1183.571472][T21670] Q6\bY4 speed is unknown, defaulting to 1000 [ 1183.584212][T21670] lo speed is unknown, defaulting to 1000 [ 1183.591391][T21670] Q6\bY4 speed is unknown, defaulting to 1000 [ 1183.645658][ T7880] IPVS: starting estimator thread 0... [ 1183.659229][T21677] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1183.744266][T21678] IPVS: using max 1968 ests per chain, 98400 per kthread [ 1184.245540][T21689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1184.316892][T21689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1184.324713][T21689] lo speed is unknown, defaulting to 1000 [ 1184.332006][T21689] Q6\bY4 speed is unknown, defaulting to 1000 [ 1184.634792][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16759'. [ 1185.459290][T21699] siw: device registration error -23 [ 1185.922291][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 1185.922310][ T29] audit: type=1400 audit(2000001118.173:361048): avc: denied { execute } for pid=21708 comm="syz.5.16764" dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1185.957435][ T29] audit: type=1400 audit(2000001118.173:361049): avc: denied { execute_no_trans } for pid=21708 comm="syz.5.16764" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1185.987583][ T29] audit: type=1400 audit(2000001118.173:361050): avc: denied { execute } for pid=21708 comm="syz.5.16764" name="file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.010361][ T29] audit: type=1400 audit(2000001118.183:361051): avc: denied { execute_no_trans } for pid=21708 comm="syz.5.16764" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.046024][ T29] audit: type=1400 audit(2000001118.204:361052): avc: denied { execute } for pid=21708 comm="syz.5.16764" dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.067662][ T29] audit: type=1400 audit(2000001118.204:361053): avc: denied { execute_no_trans } for pid=21708 comm="syz.5.16764" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.097705][ T29] audit: type=1400 audit(2000001118.204:361054): avc: denied { execute } for pid=21708 comm="syz.5.16764" name="file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.122683][ T29] audit: type=1400 audit(2000001118.299:361055): avc: denied { execute_no_trans } for pid=21708 comm="syz.5.16764" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.152698][ T29] audit: type=1400 audit(2000001118.299:361056): avc: denied { execute } for pid=21708 comm="syz.5.16764" name="file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.175482][ T29] audit: type=1400 audit(2000001118.362:361057): avc: denied { execute_no_trans } for pid=21708 comm="syz.5.16764" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.611719][T21728] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.621639][T21728] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.711714][T21728] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.721593][T21728] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.836004][T21728] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.845889][T21728] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.988395][T21728] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.998256][T21728] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.067901][T21738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21738 comm=syz.5.16777 [ 1187.104893][ T1160] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.113195][ T1160] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.130411][ T1160] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.138863][ T1160] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.164236][ T1160] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.172528][ T1160] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.224044][ T1160] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.232613][ T1160] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.311705][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16784'. [ 1187.361293][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16784'. [ 1187.385250][T21753] loop5: detected capacity change from 0 to 512 [ 1187.434906][T21753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.481885][T21753] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.590450][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.704064][T21770] Q6\bY4 speed is unknown, defaulting to 1000 [ 1187.746212][T21770] Q6\bY4 speed is unknown, defaulting to 1000 [ 1187.753926][T21770] lo speed is unknown, defaulting to 1000 [ 1187.760327][T21770] Q6\bY4 speed is unknown, defaulting to 1000 [ 1187.987159][T21763] Process accounting resumed [ 1188.984672][T21778] Q6\bY4 speed is unknown, defaulting to 1000 [ 1189.023030][T21778] Q6\bY4 speed is unknown, defaulting to 1000 [ 1189.030352][T21778] lo speed is unknown, defaulting to 1000 [ 1189.036590][T21778] Q6\bY4 speed is unknown, defaulting to 1000 [ 1189.312590][T21788] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 1189.568775][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16797'. [ 1189.590218][T21787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21787 comm=syz.4.16794 [ 1189.637190][T21798] loop5: detected capacity change from 0 to 1024 [ 1189.669139][T21798] EXT4-fs: Ignoring removed bh option [ 1189.677979][T21798] EXT4-fs: Ignoring removed orlov option [ 1189.683799][T21798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.703827][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16798'. [ 1189.863124][T21798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.710125][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 1190.710143][ T29] audit: type=1400 audit(2000001123.201:361607): avc: denied { sys_module } for pid=21812 comm="syz.0.16802" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1190.737833][ T29] audit: type=1400 audit(2000001123.201:361608): avc: denied { module_request } for pid=21812 comm="syz.0.16802" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1190.817474][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.868597][ T29] audit: type=1400 audit(2000001123.296:361609): avc: denied { unmount } for pid=17228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1190.888859][ T29] audit: type=1400 audit(2000001123.338:361610): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.913423][ T29] audit: type=1400 audit(2000001123.338:361611): avc: denied { open } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.937921][ T29] audit: type=1400 audit(2000001123.338:361612): avc: denied { ioctl } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.963886][ T29] audit: type=1400 audit(2000001123.359:361613): avc: denied { create } for pid=21818 comm="syz.4.16804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1190.989290][ T29] audit: type=1400 audit(2000001123.380:361614): avc: denied { create } for pid=21819 comm="syz.5.16803" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1191.010550][ T29] audit: type=1400 audit(2000001123.390:361615): avc: denied { map_create } for pid=21819 comm="syz.5.16803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1191.030113][ T29] audit: type=1400 audit(2000001123.390:361616): avc: denied { perfmon } for pid=21819 comm="syz.5.16803" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1191.295808][T21843] tipc: Enabling of bearer rejected, failed to enable media [ 1192.467005][T21865] Q6\bY4 speed is unknown, defaulting to 1000 [ 1192.541484][T21865] Q6\bY4 speed is unknown, defaulting to 1000 [ 1192.555069][T21871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1192.567783][T21865] lo speed is unknown, defaulting to 1000 [ 1192.574171][T21865] Q6\bY4 speed is unknown, defaulting to 1000 [ 1192.629842][T21873] geneve2: entered promiscuous mode [ 1192.635367][T21873] geneve2: entered allmulticast mode [ 1192.857346][T21884] tipc: Enabled bearer , priority 0 [ 1192.871817][T21884] syzkaller0: entered promiscuous mode [ 1192.877355][T21884] syzkaller0: entered allmulticast mode [ 1192.906427][T21884] tipc: Resetting bearer [ 1192.919886][T21883] tipc: Resetting bearer [ 1192.939729][T21883] tipc: Disabling bearer [ 1192.966131][T21889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16826'. [ 1192.975880][T21889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16826'. [ 1193.023333][T21893] veth0: entered promiscuous mode [ 1193.039077][T21893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16825'. [ 1193.062699][T21893] veth0 (unregistering): left promiscuous mode [ 1193.062755][T21896] loop5: detected capacity change from 0 to 1024 [ 1193.092469][T21896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1193.147127][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.209532][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16833'. [ 1193.417435][T21910] netlink: 'syz.3.16835': attribute type 1 has an invalid length. [ 1193.767439][T21921] Q6\bY4 speed is unknown, defaulting to 1000 [ 1193.810041][T21921] Q6\bY4 speed is unknown, defaulting to 1000 [ 1193.817718][T21921] lo speed is unknown, defaulting to 1000 [ 1193.825432][T21921] Q6\bY4 speed is unknown, defaulting to 1000 [ 1195.600999][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 1195.601020][ T29] audit: type=1400 audit(2000001127.883:362149): avc: denied { create } for pid=21938 comm="syz.0.16840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1195.627458][ T29] audit: type=1400 audit(2000001127.883:362150): avc: denied { module_request } for pid=21928 comm="syz.5.16838" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1195.642884][T21935] Q6\bY4 speed is unknown, defaulting to 1000 [ 1195.702806][ T29] audit: type=1400 audit(2000001128.345:362151): avc: denied { bind } for pid=21929 comm="syz.3.16848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.722720][ T29] audit: type=1400 audit(2000001128.408:362152): avc: denied { read write } for pid=17228 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.738693][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16840'. [ 1195.747592][ T29] audit: type=1400 audit(2000001128.408:362153): avc: denied { open } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.780510][ T29] audit: type=1400 audit(2000001128.408:362154): avc: denied { ioctl } for pid=17228 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.782658][T21931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.806365][ T29] audit: type=1400 audit(2000001128.429:362155): avc: denied { listen } for pid=21929 comm="syz.3.16848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.806407][ T29] audit: type=1400 audit(2000001128.429:362156): avc: denied { create } for pid=21929 comm="syz.3.16848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.814618][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16840'. [ 1195.832915][T21931] audit: audit_lost=1820 audit_rate_limit=0 audit_backlog_limit=64 [ 1195.902895][T21935] Q6\bY4 speed is unknown, defaulting to 1000 [ 1195.910303][T21935] lo speed is unknown, defaulting to 1000 [ 1195.916594][T21935] Q6\bY4 speed is unknown, defaulting to 1000 [ 1196.587914][T21971] Q6\bY4 speed is unknown, defaulting to 1000 [ 1196.658662][T21971] Q6\bY4 speed is unknown, defaulting to 1000 [ 1196.666626][T21971] lo speed is unknown, defaulting to 1000 [ 1196.673600][T21971] Q6\bY4 speed is unknown, defaulting to 1000 [ 1197.416479][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16851'. [ 1197.564968][T21984] netlink: 204 bytes leftover after parsing attributes in process `syz.0.16854'. [ 1197.579371][T21976] Q6\bY4 speed is unknown, defaulting to 1000 [ 1197.595203][T21979] tipc: Enabled bearer , priority 0 [ 1197.616712][T21979] syzkaller0: entered promiscuous mode [ 1197.619017][T21983] netlink: 56 bytes leftover after parsing attributes in process `syz.9.16855'. [ 1197.622296][T21979] syzkaller0: entered allmulticast mode [ 1197.688019][T21986] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1197.714408][T21983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.721952][T21983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.772236][T21983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.779721][T21983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.840887][T21976] Q6\bY4 speed is unknown, defaulting to 1000 [ 1197.853892][T21986] tipc: Resetting bearer [ 1197.873981][T21976] lo speed is unknown, defaulting to 1000 [ 1197.893014][T21978] tipc: Resetting bearer [ 1197.912271][T21978] tipc: Disabling bearer [ 1197.934700][T21976] Q6\bY4 speed is unknown, defaulting to 1000 [ 1198.108786][T21997] loop5: detected capacity change from 0 to 512 [ 1198.146888][T21997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1198.193647][T21999] : renamed from bond_slave_1 [ 1198.235529][T21997] EXT4-fs (loop5): 1 truncate cleaned up [ 1198.280764][T21997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.295242][T22002] tipc: Enabling of bearer rejected, failed to enable media [ 1198.542664][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.653943][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16862'. [ 1198.738181][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16862'. [ 1198.747351][T22010] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16863'. [ 1198.955301][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16866'. [ 1199.114264][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16867'. [ 1199.325312][T22026] tipc: Enabled bearer , priority 0 [ 1199.355534][T22026] syzkaller0: entered promiscuous mode [ 1199.361163][T22026] syzkaller0: entered allmulticast mode [ 1199.453774][T22026] tipc: Resetting bearer [ 1199.460368][T22025] tipc: Resetting bearer [ 1199.478616][T22025] tipc: Disabling bearer [ 1199.875083][T22043] sd 0:0:1:0: device reset [ 1200.398098][ T29] kauditd_printk_skb: 1631 callbacks suppressed [ 1200.398117][ T29] audit: type=1400 audit(2000001133.353:363784): avc: denied { map_create } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1200.424029][ T29] audit: type=1400 audit(2000001133.363:363785): avc: denied { bpf } for pid=22059 comm="syz.9.16881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1200.444980][ T29] audit: type=1400 audit(2000001133.363:363786): avc: denied { map_read map_write } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1200.465195][ T29] audit: type=1400 audit(2000001133.363:363787): avc: denied { prog_load } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1200.484693][ T29] audit: type=1400 audit(2000001133.363:363788): avc: denied { perfmon } for pid=22059 comm="syz.9.16881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1200.506103][ T29] audit: type=1400 audit(2000001133.363:363789): avc: denied { prog_run } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1200.525435][ T29] audit: type=1400 audit(2000001133.363:363790): avc: denied { create } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1200.546876][ T29] audit: type=1400 audit(2000001133.363:363791): avc: denied { write } for pid=22059 comm="syz.9.16881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1200.598498][ T29] audit: type=1326 audit(2000001133.584:363792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.3.16852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76636af79 code=0x7ffc0000 [ 1200.622965][ T29] audit: type=1326 audit(2000001133.584:363793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.3.16852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76636af79 code=0x7ffc0000 [ 1201.645172][T22087] Q6\bY4 speed is unknown, defaulting to 1000 [ 1201.724614][T22087] Q6\bY4 speed is unknown, defaulting to 1000 [ 1201.732782][T22087] lo speed is unknown, defaulting to 1000 [ 1201.740238][T22087] Q6\bY4 speed is unknown, defaulting to 1000 [ 1202.857570][T22099] loop5: detected capacity change from 0 to 512 [ 1202.880594][T22096] __nla_validate_parse: 1 callbacks suppressed [ 1202.880613][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16903'. [ 1202.896248][T22099] EXT4-fs: Ignoring removed mblk_io_submit option [ 1202.904359][T22099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1202.907945][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16903'. [ 1202.924889][T22099] EXT4-fs (loop5): 1 truncate cleaned up [ 1202.940261][T22099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.139329][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16897'. [ 1203.423023][T22123] sit0: entered promiscuous mode [ 1203.457298][T22123] netlink: 'syz.4.16901': attribute type 1 has an invalid length. [ 1203.465267][T22123] netlink: 1 bytes leftover after parsing attributes in process `syz.4.16901'. [ 1203.474491][T22125] tipc: Enabling of bearer rejected, failed to enable media [ 1203.558272][T22132] tipc: Enabling of bearer rejected, failed to enable media [ 1203.727616][T22136] netlink: 'syz.4.16907': attribute type 10 has an invalid length. [ 1203.879458][T22141] siw: device registration error -23 [ 1203.933372][T17228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.942073][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16909'. [ 1204.001435][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16912'. [ 1204.089410][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16909'. [ 1204.328124][T22159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16923'. [ 1204.999697][T22169] ================================================================== [ 1205.007953][T22169] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 1205.015710][T22169] [ 1205.018039][T22169] write to 0xffff88812f9d218c of 4 bytes by task 22179 on cpu 1: [ 1205.025770][T22169] __bpf_get_stackid+0x77a/0x800 [ 1205.030760][T22169] bpf_get_stackid+0xee/0x120 [ 1205.035475][T22169] bpf_get_stackid_raw_tp+0xf6/0x120 [ 1205.040801][T22169] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 1205.046284][T22169] bpf_trace_run2+0x107/0x1c0 [ 1205.050991][T22169] __traceiter_kfree+0x2e/0x50 [ 1205.055786][T22169] kfree+0x27b/0x320 [ 1205.058745][T22175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22175 comm=syz.3.16919 [ 1205.059705][T22169] security_context_to_sid_core+0x375/0x3b0 [ 1205.059733][T22169] security_context_to_sid+0x2e/0x40 [ 1205.059755][T22169] selinux_inode_setxattr+0x4af/0x6e0 [ 1205.059774][T22169] security_inode_setxattr+0x13a/0x1b0 [ 1205.094335][T22169] __vfs_setxattr_locked+0x83/0x1d0 [ 1205.099554][T22169] vfs_setxattr+0x132/0x270 [ 1205.104067][T22169] filename_setxattr+0x1ad/0x400 [ 1205.109019][T22169] path_setxattrat+0x2c9/0x310 [ 1205.113803][T22169] __x64_sys_lsetxattr+0x71/0x90 [ 1205.118751][T22169] x64_sys_call+0x2877/0x2ff0 [ 1205.123439][T22169] do_syscall_64+0xd2/0x200 [ 1205.127948][T22169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.133853][T22169] [ 1205.136182][T22169] read to 0xffff88812f9d218c of 4 bytes by task 22169 on cpu 0: [ 1205.143813][T22169] __bpf_get_stackid+0x33a/0x800 [ 1205.148772][T22169] bpf_get_stackid+0xee/0x120 [ 1205.153491][T22169] bpf_get_stackid_raw_tp+0xf6/0x120 [ 1205.158788][T22169] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 1205.164255][T22169] bpf_trace_run2+0x107/0x1c0 [ 1205.168943][T22169] __traceiter_kfree+0x2e/0x50 [ 1205.173714][T22169] kfree+0x27b/0x320 [ 1205.177629][T22169] ___sys_recvmsg+0x135/0x370 [ 1205.182328][T22169] do_recvmmsg+0x1ef/0x540 [ 1205.186768][T22169] __x64_sys_recvmmsg+0xe5/0x170 [ 1205.191727][T22169] x64_sys_call+0x27a6/0x2ff0 [ 1205.196414][T22169] do_syscall_64+0xd2/0x200 [ 1205.200924][T22169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.206825][T22169] [ 1205.209149][T22169] value changed: 0x0000000b -> 0x00000011 [ 1205.214866][T22169] [ 1205.217188][T22169] Reported by Kernel Concurrency Sanitizer on: [ 1205.223344][T22169] CPU: 0 UID: 0 PID: 22169 Comm: syz.5.16917 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1205.233248][T22169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1205.243313][T22169] ================================================================== [ 1205.272004][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 1205.272024][ T29] audit: type=1400 audit(2000001138.465:364744): avc: denied { create } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.298125][ T29] audit: type=1400 audit(2000001138.465:364745): avc: denied { read } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.400019][ T29] audit: type=1400 audit(2000001138.539:364746): avc: denied { prog_load } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1205.419639][ T29] audit: type=1400 audit(2000001138.539:364747): avc: denied { bpf } for pid=22174 comm="syz.3.16919" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1205.440573][ T29] audit: type=1400 audit(2000001138.539:364748): avc: denied { perfmon } for pid=22174 comm="syz.3.16919" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1205.461825][ T29] audit: type=1400 audit(2000001138.549:364749): avc: denied { read } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.481872][ T29] audit: type=1400 audit(2000001138.560:364750): avc: denied { read } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.501641][ T29] audit: type=1400 audit(2000001138.570:364751): avc: denied { read } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.521328][ T29] audit: type=1400 audit(2000001138.581:364752): avc: denied { read } for pid=22174 comm="syz.3.16919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.540943][ T29] audit: type=1400 audit(2000001138.581:364753): avc: denied { prog_load } for pid=22187 comm="syz.4.16921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1