last executing test programs: 1.344658201s ago: executing program 4 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", "10009915"}, 0xffffffffffffff28) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) 1.321132191s ago: executing program 4 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="86ce0e44222e", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @multicast1}, {0x11, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 1.287664732s ago: executing program 1 (id=611): syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) 1.272151711s ago: executing program 4 (id=612): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r0, &(0x7f0000000b80)=[{&(0x7f0000002b00)="f8", 0x1}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.256999702s ago: executing program 2 (id=613): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x5a) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0xee01, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000004c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcfh\a\xa5\x97nZ\xf8\xc6\x1f\xd3K\xb4tK\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff$\x9b\xc7\xe3\xe2*\x12\xda\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\\\xa6\x99\xbe\x06C\xbf\xbf\x15\xc0$\xe6\x18f\x02\xc0\xa3\xa3\x7fM\xf8\x02\x06\xc0\x10\x9d\xd0@\x81\xf25\xda\x92\x9d\xb5\xfe\x88\x16\xcb5\x0fd\x9aB\xaa', &(0x7f00000000c0)='dE\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)={0x188, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe89}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd02b0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x457}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x93e5, @private1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc9e3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x51}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) unshare(0x20000400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 1.239149052s ago: executing program 1 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60028be5d2dc71ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/210], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1200000004000000040000000000000000003d00", @ANYRES16=r0, @ANYBLOB="00080004000000000000656e9fd92ea04811000000000020006cf9e87ba99836e563076341abd3eb23e6a08c7c0cd69907b937a00e12628cc736", @ANYBLOB="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", @ANYBLOB="ad69ac78381cde8ccbbd6c3ffebfb5ee26af0517824a59a5e6b7a73988166a64e17eaf193f4e3f9e724c0b23e8e3cf72ff39e6a209bc2b3974a7b9aa81eced227104524841f6d4bca68271869a9ab4c6b4198299fab8b9db9c3bc7f83d1198a3180118110dd8ce9b1e682abf38dcfc474a333aca4f87898dbbde55f6c04efb014c42337aefa84bfd05f33c2bfbe02070d48bb495705901508c7c106c4f3ce2fc58a849a8f9b5b7400249cb46079505e08025a3da220cb61bc97127e75c94251c8193e5b53ed07bf43f8e4d7d05103210892905c591425f510ab51ec2922e8496afb9c446d5223fa9e40dc537e9e315", @ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x6c020000) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.204903432s ago: executing program 2 (id=617): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8c00defa000086dd6000318e00383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000e2", @ANYBLOB="00072cbd7000ffdbdf250400000020000580070001006962000004000280080001007564700007000100696200000c00018008000300100000003c000280080002000500000008000100530000000400040008000200040000001c000380080001000000000008000100070000000800010000000080140003"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f30000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() 1.188978382s ago: executing program 4 (id=619): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000d80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0xac7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@noauto_da_alloc}, {@bsdgroups}, {@mblk_io_submit}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040005"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.031140133s ago: executing program 2 (id=621): r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r5}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) 991.610723ms ago: executing program 0 (id=622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 852.187324ms ago: executing program 2 (id=624): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x12, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@alu={0x4, 0x1, 0x3, 0x0, 0xb, 0x1, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x5, 0x5, 0x5, 0x3}, {0x4, 0x4, 0xc, 0x4}, {0x0, 0x4, 0x1ff, 0x4}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0x36, 0x0, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0}, 0x40) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c000000000001000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) (fail_nth: 4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@ifindex=r4, r0, 0x36, 0x2000, r1, @value, @void, @void, @void, r2}, 0x20) 637.828525ms ago: executing program 3 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="084318934a8b10b3a4420818000000000000000000000000000000c967bd30", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0xfffffffffffffffe, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x5, 0x0, 'queue0\x00', 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PBURST={0x8, 0x7, 0x55f}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="912fd0d0f8b4f45e2a013e60a3db1ac4576a2e7d215e45102428e1ca2fd7a9dcc63735750bc8a82af3d16b4ca36178fa2aa896e260127b", @ANYRESDEC], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000040)={0x20, r11, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40089}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x7eda}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 635.669856ms ago: executing program 2 (id=626): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchmodat(r3, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r5, @ANYRES32=r6, @ANYBLOB="060005004e22000008000700", @ANYRES16, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r5, 0x8, 0x20}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001140)) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) statx(0xffffffffffffff9c, 0x0, 0x3800, 0xce0, &(0x7f00000001c0)) 467.791177ms ago: executing program 0 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="084318934a8b10b3a4420818000000000000000000000000000000c967bd30", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0xfffffffffffffffe, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x5, 0x0, 'queue0\x00', 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PBURST={0x8, 0x7, 0x55f}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="912fd0d0f8b4f45e2a013e60a3db1ac4576a2e7d215e45102428e1ca2fd7a9dcc63735750bc8a82af3d16b4ca36178fa2aa896e260127b", @ANYRESDEC], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000040)={0x14, r11, 0x501, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x7eda}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 467.189827ms ago: executing program 2 (id=628): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x98, 0x4) ioctl$FIOCLEX(r1, 0x5451) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000840)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000008c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000640), r3}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x2, 0x80805, 0x0) unshare(0x28040600) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffeeffa) sendmmsg$inet_sctp(r8, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB="200000000000000084000000020000000300020009000000d90f0000", @ANYRES16=r4, @ANYRES32=r7], 0x38, 0x40010}], 0x1, 0x240000c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) syz_clone(0x20080, &(0x7f00000004c0)="d668e0381f3419db06d8f2fbb4eedaca2530f1b8291f0b859def1991c8b57cd2986a6c5f1686d1f88c5a6d3a56585f64058b101a98c740dbfe10263bf0e224ba6ab1a6d65effa8aa09016a2c12e532c0ab8e", 0x52, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="866e139fd5644d8659c4e1afb47f07d48535d1acf35d4a3865324800ba5e4d632ce29598dfef3dfd65a86dbc5bc89a0f2ede6eda90ef64328d05fbfe305bc6f7993710d011041b9fb3") 453.467717ms ago: executing program 3 (id=629): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r0, &(0x7f0000000b80)=[{&(0x7f0000002b00)="f8", 0x1}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 423.672787ms ago: executing program 3 (id=630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x71}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) 356.752988ms ago: executing program 3 (id=631): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r0, &(0x7f0000000b80)=[{&(0x7f0000002b00)="f8", 0x1}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 334.931828ms ago: executing program 0 (id=632): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syncfs(r1) 322.474898ms ago: executing program 1 (id=633): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000740)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x9, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffff2, 0x2, @perf_config_ext={0x0, 0x8}, 0x4092, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xfe\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xf24\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2\xafO\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x179) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 305.131288ms ago: executing program 0 (id=634): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="86ce0e44222e", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @multicast1}, {0x11, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) 273.486438ms ago: executing program 1 (id=635): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8c00defa000086dd6000318e00383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000e2", @ANYBLOB="00072cbd7000ffdbdf250400000020000580070001006962000004000280080001007564700007000100696200000c00018008000300100000003c000280080002000500000008000100530000000400040008000200040000001c000380080001000000000008000100070000000800010000000080140003"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f30000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() 268.914728ms ago: executing program 4 (id=636): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 254.274648ms ago: executing program 3 (id=637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 192.293618ms ago: executing program 4 (id=638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x20000000f}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x11, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 181.403429ms ago: executing program 0 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="084318934a8b10b3a4420818000000000000000000000000000000c967bd30", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0xfffffffffffffffe, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x5, 0x0, 'queue0\x00', 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PBURST={0x8, 0x7, 0x55f}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="912fd0d0f8b4f45e2a013e60a3db1ac4576a2e7d215e45102428e1ca2fd7a9dcc63735750bc8a82af3d16b4ca36178fa2aa896e260127b", @ANYRESDEC], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000040)={0x20, r11, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40089}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x7eda}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 151.403659ms ago: executing program 1 (id=640): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x2200000, &(0x7f0000000880)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@errors_continue}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@fowner_eq}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r1, r0, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x4388, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x2}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="1dfbca0d09565b5d06764d1d744dd4957cf6aecf448a1deaddfafc5d33081238d9b2022ff03fce", 0x27}, {&(0x7f0000000440)="3d22ceedc9e01c871ead295680c94d1df65114eaa1a51c85bde03574846df50daff7d714298641cb2fa4b3c190b3806a10740372e6fd2d4affb13d60ba5200dab1919dfa8ef9b257f1ccaf7f39bccc7eebb08238377f9ac59cce256f913e6520f327b24d01836fcff40fe0ac57bb9cc270fa3ec5e50ee694c0233198c365a0f556404a162b4a9e3265df172e8ef71efc5d37a54ceba29a4ad66386c7f67ab53a68389de33dca93ed4c871fc186b30d25de94a209fadecb38623e0d163cdda680ca681eebb919ba8a77909f23d2fc1ad80cc60198373d", 0xd6}], 0x2, 0x0, 0x0, 0x8000}, 0x800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x111, 0x2}}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) poll(&(0x7f0000000540)=[{0xffffffffffffffff, 0xa508}, {0xffffffffffffffff, 0x680}, {r5, 0x10}, {r6}], 0x4, 0x3) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x6000, 0x80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r9, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x300) (async) r10 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, 0x0) 148.507399ms ago: executing program 3 (id=641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x53, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x53, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000636c77fbac141416ac141416830807034d2f87e5940c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000636c77fbac141416ac141416830807034d2f87e5940c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000040000180000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000040000180000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = syz_io_uring_complete(0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @remote}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0xb, 0x4, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x80, 0x8b, &(0x7f0000000140)=""/139, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x1, 0xcfb, 0x9}, 0x10, r1, r0, 0x4, &(0x7f00000006c0)=[r2, r4, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x5, 0x4}, {0x2, 0x5, 0x6, 0x7}, {0x2, 0x4, 0x2, 0xb}, {0x2, 0x3, 0xa, 0x7}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0xb, 0x4, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x80, 0x8b, &(0x7f0000000140)=""/139, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x1, 0xcfb, 0x9}, 0x10, r1, r0, 0x4, &(0x7f00000006c0)=[r2, r4, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x5, 0x4}, {0x2, 0x5, 0x6, 0x7}, {0x2, 0x4, 0x2, 0xb}, {0x2, 0x3, 0xa, 0x7}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f80)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) 88.373919ms ago: executing program 0 (id=642): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x3, 0x0, 0xea, 0x0, 0x7ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0x1}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20004001}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 1 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r10, 0xc0404806, &(0x7f0000000440)) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000007c0)=""/191}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 28.146084][ T29] audit: type=1400 audit(1762629638.751:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.169111][ T29] audit: type=1400 audit(1762629638.771:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.170115][ T3300] cgroup: Unknown subsys name 'net' [ 28.196896][ T29] audit: type=1400 audit(1762629638.801:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.295670][ T3300] cgroup: Unknown subsys name 'cpuset' [ 28.301950][ T3300] cgroup: Unknown subsys name 'rlimit' [ 28.422551][ T29] audit: type=1400 audit(1762629639.021:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.445824][ T29] audit: type=1400 audit(1762629639.021:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.466290][ T29] audit: type=1400 audit(1762629639.021:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.486660][ T29] audit: type=1400 audit(1762629639.021:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.507135][ T29] audit: type=1400 audit(1762629639.061:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.522580][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.531973][ T29] audit: type=1400 audit(1762629639.061:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.563741][ T29] audit: type=1400 audit(1762629639.151:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.572009][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.586048][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.617677][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.651104][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 30.669624][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 30.743348][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.750482][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.757782][ T3313] bridge_slave_0: entered allmulticast mode [ 30.764133][ T3313] bridge_slave_0: entered promiscuous mode [ 30.770970][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.779835][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.787000][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.794234][ T3313] bridge_slave_1: entered allmulticast mode [ 30.800761][ T3313] bridge_slave_1: entered promiscuous mode [ 30.829185][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.836276][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.843407][ T3312] bridge_slave_0: entered allmulticast mode [ 30.849945][ T3312] bridge_slave_0: entered promiscuous mode [ 30.877097][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.884327][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.891716][ T3312] bridge_slave_1: entered allmulticast mode [ 30.898091][ T3312] bridge_slave_1: entered promiscuous mode [ 30.914252][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921436][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.928567][ T3318] bridge_slave_0: entered allmulticast mode [ 30.935058][ T3318] bridge_slave_0: entered promiscuous mode [ 30.942577][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.951690][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.958864][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.966028][ T3325] bridge_slave_0: entered allmulticast mode [ 30.972490][ T3325] bridge_slave_0: entered promiscuous mode [ 30.987100][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.996273][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.003353][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.010488][ T3318] bridge_slave_1: entered allmulticast mode [ 31.016825][ T3318] bridge_slave_1: entered promiscuous mode [ 31.027592][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.034700][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.041796][ T3325] bridge_slave_1: entered allmulticast mode [ 31.048318][ T3325] bridge_slave_1: entered promiscuous mode [ 31.082670][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.095146][ T3313] team0: Port device team_slave_0 added [ 31.107548][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.122246][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.132146][ T3313] team0: Port device team_slave_1 added [ 31.143743][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.154038][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.177331][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.184524][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.191889][ T3314] bridge_slave_0: entered allmulticast mode [ 31.198396][ T3314] bridge_slave_0: entered promiscuous mode [ 31.205213][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.212252][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.219499][ T3314] bridge_slave_1: entered allmulticast mode [ 31.226001][ T3314] bridge_slave_1: entered promiscuous mode [ 31.237595][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.256804][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.263773][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.289757][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.316316][ T3312] team0: Port device team_slave_0 added [ 31.322751][ T3325] team0: Port device team_slave_0 added [ 31.328966][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.336121][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.362101][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.378471][ T3318] team0: Port device team_slave_0 added [ 31.385424][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.395197][ T3312] team0: Port device team_slave_1 added [ 31.401782][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.411471][ T3325] team0: Port device team_slave_1 added [ 31.420501][ T3318] team0: Port device team_slave_1 added [ 31.462364][ T3314] team0: Port device team_slave_0 added [ 31.468359][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.475410][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.501357][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.517518][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.524505][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.550472][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.566808][ T3314] team0: Port device team_slave_1 added [ 31.572884][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.579838][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.605847][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.616883][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.623823][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.649781][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.660768][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.667731][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.693856][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.718165][ T3313] hsr_slave_0: entered promiscuous mode [ 31.724205][ T3313] hsr_slave_1: entered promiscuous mode [ 31.743054][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.750051][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.775970][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.805885][ T3325] hsr_slave_0: entered promiscuous mode [ 31.811929][ T3325] hsr_slave_1: entered promiscuous mode [ 31.817935][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 31.823659][ T3325] Cannot create hsr debugfs directory [ 31.829323][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.836372][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.862287][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.874175][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.881164][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.907127][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.970066][ T3318] hsr_slave_0: entered promiscuous mode [ 31.976137][ T3318] hsr_slave_1: entered promiscuous mode [ 31.982014][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 31.987770][ T3318] Cannot create hsr debugfs directory [ 32.000057][ T3312] hsr_slave_0: entered promiscuous mode [ 32.006162][ T3312] hsr_slave_1: entered promiscuous mode [ 32.011988][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 32.017765][ T3312] Cannot create hsr debugfs directory [ 32.051254][ T3314] hsr_slave_0: entered promiscuous mode [ 32.057401][ T3314] hsr_slave_1: entered promiscuous mode [ 32.063250][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.069039][ T3314] Cannot create hsr debugfs directory [ 32.241292][ T3325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.253055][ T3325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.261758][ T3325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.273009][ T3325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.294032][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.302967][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.311783][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.321981][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.359573][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.368591][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.377681][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.388574][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.419446][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.429979][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.438831][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.448559][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.482061][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.503995][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.512798][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.521784][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.531149][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.561994][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.579257][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.596870][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.603947][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.620836][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.630776][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.638022][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.651674][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.660788][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.667862][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.689863][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.696949][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.710758][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.721162][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.747863][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.758181][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.778602][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.788994][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.806906][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.814008][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.839889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.847017][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.866171][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.889204][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.898047][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.905125][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.931556][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.939766][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.946978][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.963706][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.972883][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.990400][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.000911][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.013964][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.021079][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.055920][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.063032][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.097145][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.107714][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.146381][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.196540][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.217248][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.238755][ T3314] veth0_vlan: entered promiscuous mode [ 33.263223][ T3314] veth1_vlan: entered promiscuous mode [ 33.285504][ T3325] veth0_vlan: entered promiscuous mode [ 33.312302][ T3314] veth0_macvtap: entered promiscuous mode [ 33.320830][ T3325] veth1_vlan: entered promiscuous mode [ 33.335781][ T3314] veth1_macvtap: entered promiscuous mode [ 33.351352][ T3313] veth0_vlan: entered promiscuous mode [ 33.360783][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.371806][ T3325] veth0_macvtap: entered promiscuous mode [ 33.383578][ T3313] veth1_vlan: entered promiscuous mode [ 33.393777][ T3325] veth1_macvtap: entered promiscuous mode [ 33.409043][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.420210][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.431405][ T3313] veth0_macvtap: entered promiscuous mode [ 33.450534][ T3318] veth0_vlan: entered promiscuous mode [ 33.457044][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.469089][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.480614][ T3313] veth1_macvtap: entered promiscuous mode [ 33.491258][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.501437][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.512470][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.527335][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.536525][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545516][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.554798][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.569849][ T3318] veth1_vlan: entered promiscuous mode [ 33.579386][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.579398][ T29] audit: type=1400 audit(1762629644.181:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.LljhhB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.585520][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.587102][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.629515][ T3312] veth0_vlan: entered promiscuous mode [ 33.638304][ T3312] veth1_vlan: entered promiscuous mode [ 33.643951][ T29] audit: type=1400 audit(1762629644.231:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.653473][ T3318] veth0_macvtap: entered promiscuous mode [ 33.665995][ T29] audit: type=1400 audit(1762629644.231:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.LljhhB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.684599][ T3318] veth1_macvtap: entered promiscuous mode [ 33.696811][ T29] audit: type=1400 audit(1762629644.231:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.721223][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.724330][ T29] audit: type=1400 audit(1762629644.231:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.LljhhB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.757977][ T29] audit: type=1400 audit(1762629644.231:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.LljhhB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.785350][ T29] audit: type=1400 audit(1762629644.231:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.807219][ T29] audit: type=1400 audit(1762629644.241:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.830160][ T29] audit: type=1400 audit(1762629644.241:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.853936][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.860658][ T3312] veth0_macvtap: entered promiscuous mode [ 33.882243][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.894040][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902870][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916044][ T3312] veth1_macvtap: entered promiscuous mode [ 33.921903][ T29] audit: type=1400 audit(1762629644.521:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.951340][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.961219][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.971413][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.986366][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.995359][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004085][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.020500][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.030794][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.051575][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.079534][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117844][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.131809][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.177557][ T3486] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.189863][ T3494] veth0: entered promiscuous mode [ 34.196169][ T3493] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 34.205240][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.274365][ T3486] infiniband syû: set active [ 34.279085][ T3486] infiniband syû: added bond_slave_0 [ 34.311921][ T3486] RDS/IB: syû: added [ 34.316347][ T3486] smc: adding ib device syû with port count 1 [ 34.333061][ T3486] smc: ib device syû port 1 has no pnetid [ 34.669441][ T3509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.750954][ T3512] process 'syz.0.10' launched '/dev/fd/12' with NULL argv: empty string added [ 35.069303][ T3519] syz.2.13 (3519) used greatest stack depth: 9104 bytes left [ 35.161257][ T3527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.202675][ T3527] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 35.333593][ T3533] IPv6: Can't replace route, no match found [ 35.414731][ T3530] lo speed is unknown, defaulting to 1000 [ 35.498017][ T3536] IPv6: Can't replace route, no match found [ 35.521094][ T3530] lo speed is unknown, defaulting to 1000 [ 35.532733][ T3530] lo speed is unknown, defaulting to 1000 [ 35.547181][ T3530] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 35.606438][ T3530] lo speed is unknown, defaulting to 1000 [ 35.684394][ T3530] lo speed is unknown, defaulting to 1000 [ 35.701256][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.727762][ T3530] lo speed is unknown, defaulting to 1000 [ 35.775246][ T3547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.778722][ T3530] lo speed is unknown, defaulting to 1000 [ 35.824973][ T3530] lo speed is unknown, defaulting to 1000 [ 35.941050][ T3553] mmap: syz.0.21 (3553) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.957372][ T3543] infiniband syz0: set active [ 35.962179][ T3543] infiniband syz0: added bond_slave_0 [ 36.050323][ T3552] netlink: 'syz.4.24': attribute type 39 has an invalid length. [ 36.089024][ T3552] tipc: Started in network mode [ 36.093928][ T3552] tipc: Node identity ac14140f, cluster identity 4711 [ 36.115893][ T3552] tipc: New replicast peer: 255.255.255.255 [ 36.122052][ T3552] tipc: Enabled bearer , priority 10 [ 36.147444][ T3543] RDS/IB: syz0: added [ 36.151487][ T3543] smc: adding ib device syz0 with port count 1 [ 36.158073][ T3543] smc: ib device syz0 port 1 has no pnetid [ 36.298766][ T3561] loop0: detected capacity change from 0 to 512 [ 36.340361][ T3561] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.26: error while reading EA inode 32 err=-116 [ 36.355524][ T3561] EXT4-fs (loop0): Remounting filesystem read-only [ 36.362965][ T3561] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.376029][ T3561] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 36.391079][ T3561] EXT4-fs (loop0): 1 orphan inode deleted [ 36.397801][ T3561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.516026][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.749820][ C1] hrtimer: interrupt took 27407 ns [ 36.860235][ T3605] veth0: entered promiscuous mode [ 36.871521][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 36.886455][ T3610] loop1: detected capacity change from 0 to 512 [ 36.910579][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.937296][ T3594] lo speed is unknown, defaulting to 1000 [ 37.239148][ T3420] tipc: Node number set to 2886997007 [ 37.623703][ T3626] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 38.157340][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.263290][ T3640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.46'. [ 38.288329][ T3640] IPVS: Error connecting to the multicast addr [ 38.296300][ T3634] lo speed is unknown, defaulting to 1000 [ 38.306430][ T3640] wg2: entered promiscuous mode [ 38.311337][ T3640] wg2: entered allmulticast mode [ 38.315519][ T3644] IPv6: Can't replace route, no match found [ 38.443708][ T3656] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 38.475991][ T3658] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 38.519872][ T3663] loop2: detected capacity change from 0 to 512 [ 38.520169][ T3658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.527344][ T3663] EXT4-fs: dax option not supported [ 38.565010][ T3667] loop0: detected capacity change from 0 to 512 [ 38.585459][ T3658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.593298][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 38.593313][ T29] audit: type=1326 audit(1762629649.191:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.637151][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 38.649722][ T29] audit: type=1400 audit(1762629649.231:697): avc: denied { cpu } for pid=3650 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.668807][ T29] audit: type=1326 audit(1762629649.231:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.692069][ T29] audit: type=1326 audit(1762629649.231:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.715586][ T29] audit: type=1326 audit(1762629649.231:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.738931][ T29] audit: type=1326 audit(1762629649.251:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.762398][ T29] audit: type=1326 audit(1762629649.251:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.785847][ T29] audit: type=1326 audit(1762629649.251:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.809030][ T29] audit: type=1326 audit(1762629649.251:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.832359][ T29] audit: type=1326 audit(1762629649.251:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 38.837280][ T3667] loop0: detected capacity change from 0 to 128 [ 38.891256][ T3668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 38.910032][ T3659] lo speed is unknown, defaulting to 1000 [ 39.120654][ T3679] IPv6: Can't replace route, no match found [ 39.263107][ T3690] IPv6: Can't replace route, no match found [ 39.458697][ T3694] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 39.489951][ T3696] IPv6: Can't replace route, no match found [ 39.542995][ T3701] loop1: detected capacity change from 0 to 512 [ 39.562251][ T3681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 39.598393][ T3701] EXT4-fs (loop1): too many log groups per flexible block group [ 39.621615][ T3701] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 39.650637][ T3701] EXT4-fs (loop1): mount failed [ 39.703528][ T3651] syz.4.53 (3651) used greatest stack depth: 7048 bytes left [ 39.734773][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 39.738240][ T3711] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 39.758483][ T3701] team0: Port device team_slave_1 removed [ 39.831714][ T3711] lo speed is unknown, defaulting to 1000 [ 40.126343][ T3729] veth0: entered promiscuous mode [ 40.132469][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 40.486814][ T3734] loop2: detected capacity change from 0 to 164 [ 40.508469][ T3734] tipc: Enabling of bearer rejected, failed to enable media [ 40.563455][ T3738] IPv6: Can't replace route, no match found [ 40.702997][ T3749] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 40.794603][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 40.836324][ T3758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'. [ 40.860977][ T3762] IPv6: Can't replace route, no match found [ 40.938540][ T3749] lo speed is unknown, defaulting to 1000 [ 41.019435][ T3755] siw: device registration error -23 [ 41.046762][ T3768] tipc: Enabling of bearer rejected, failed to enable media [ 41.098133][ T3750] lo speed is unknown, defaulting to 1000 [ 41.357491][ T3778] IPv6: Can't replace route, no match found [ 41.363495][ T3780] IPv6: Can't replace route, no match found [ 41.624024][ T3789] lo speed is unknown, defaulting to 1000 [ 41.807724][ T3803] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 41.864227][ T3806] IPv6: Can't replace route, no match found [ 41.889430][ T3803] lo speed is unknown, defaulting to 1000 [ 41.920661][ T3809] loop1: detected capacity change from 0 to 164 [ 41.994558][ T3809] tipc: Enabling of bearer rejected, failed to enable media [ 42.028225][ T3811] siw: device registration error -23 [ 42.236692][ T3830] loop0: detected capacity change from 0 to 512 [ 42.316904][ T3830] EXT4-fs (loop0): too many log groups per flexible block group [ 42.351352][ T3830] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 42.374136][ T3830] EXT4-fs (loop0): mount failed [ 42.437579][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 42.478181][ T3830] team0: Port device team_slave_1 removed [ 42.606700][ T3839] IPv6: Can't replace route, no match found [ 42.726316][ T3851] tipc: Enabling of bearer rejected, failed to enable media [ 42.798589][ T3859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 42.808359][ T3859] IPVS: Error connecting to the multicast addr [ 42.817236][ T3859] wg2: entered promiscuous mode [ 42.822188][ T3859] wg2: entered allmulticast mode [ 42.835951][ T3852] lo speed is unknown, defaulting to 1000 [ 43.241881][ T3879] IPv6: Can't replace route, no match found [ 43.352869][ T3885] tipc: Enabling of bearer rejected, failed to enable media [ 43.387381][ T3891] netlink: 'syz.4.138': attribute type 12 has an invalid length. [ 43.549251][ T3907] tipc: Started in network mode [ 43.554210][ T3907] tipc: Node identity ac14140f, cluster identity 4711 [ 43.562490][ T3907] tipc: New replicast peer: 255.255.255.255 [ 43.568785][ T3907] tipc: Enabled bearer , priority 10 [ 43.602338][ T3909] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 43.636467][ T29] kauditd_printk_skb: 1964 callbacks suppressed [ 43.636494][ T29] audit: type=1326 audit(1762629654.241:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ad4181f85 code=0x7ffc0000 [ 43.661056][ T3909] lo speed is unknown, defaulting to 1000 [ 43.685207][ T29] audit: type=1326 audit(1762629654.281:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 43.736646][ T29] audit: type=1326 audit(1762629654.341:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ad4181f85 code=0x7ffc0000 [ 43.766590][ T29] audit: type=1326 audit(1762629654.361:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 43.790083][ T29] audit: type=1326 audit(1762629654.361:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 43.836971][ T29] audit: type=1326 audit(1762629654.441:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ad4181f85 code=0x7ffc0000 [ 43.901273][ T3913] siw: device registration error -23 [ 43.930216][ T29] audit: type=1326 audit(1762629654.531:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 43.934120][ T3916] IPv6: Can't replace route, no match found [ 43.957000][ T3917] tipc: Enabling of bearer rejected, failed to enable media [ 43.972015][ T29] audit: type=1326 audit(1762629654.531:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 43.995598][ T29] audit: type=1326 audit(1762629654.531:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 44.018988][ T29] audit: type=1326 audit(1762629654.531:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff864af6c9 code=0x7ffc0000 [ 44.286162][ T3935] lo speed is unknown, defaulting to 1000 [ 44.297544][ T3940] netlink: 268 bytes leftover after parsing attributes in process `syz.1.157'. [ 44.306672][ T3940] unsupported nla_type 65024 [ 44.536421][ T3946] siw: device registration error -23 [ 44.585741][ T3949] tipc: Enabling of bearer rejected, failed to enable media [ 44.694453][ T3420] tipc: Node number set to 2886997007 [ 44.869472][ T3967] IPv6: Can't replace route, no match found [ 45.026858][ T3971] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 45.090933][ T3971] lo speed is unknown, defaulting to 1000 [ 45.128595][ T3975] siw: device registration error -23 [ 45.305261][ T3981] tipc: Enabling of bearer rejected, failed to enable media [ 45.376970][ T3979] lo speed is unknown, defaulting to 1000 [ 45.631850][ T3993] IPv6: Can't replace route, no match found [ 46.396516][ T4011] siw: device registration error -23 [ 46.437768][ T4016] tipc: Enabling of bearer rejected, failed to enable media [ 46.568626][ T4027] syzkaller0: entered allmulticast mode [ 46.586702][ T4027] syzkaller0 (unregistering): left allmulticast mode [ 46.631061][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 46.866342][ T4038] netlink: 'syz.4.197': attribute type 39 has an invalid length. [ 46.895929][ T4038] tipc: Enabling of bearer rejected, already enabled [ 46.945443][ T4028] lo speed is unknown, defaulting to 1000 [ 47.002596][ T4044] siw: device registration error -23 [ 48.295773][ T4074] syzkaller0: entered allmulticast mode [ 48.305329][ T4071] Zero length message leads to an empty skb [ 48.325858][ T4075] netlink: 'syz.2.210': attribute type 39 has an invalid length. [ 48.337158][ T4074] syzkaller0 (unregistering): left allmulticast mode [ 48.378008][ T4075] tipc: Started in network mode [ 48.382978][ T4075] tipc: Node identity ac14140f, cluster identity 4711 [ 48.390415][ T4075] tipc: New replicast peer: 255.255.255.255 [ 48.396574][ T4075] tipc: Enabled bearer , priority 10 [ 48.489103][ T4089] netlink: 268 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.513689][ T4077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.707546][ T29] kauditd_printk_skb: 666 callbacks suppressed [ 48.707563][ T29] audit: type=1326 audit(1762629659.311:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf435e1f85 code=0x7ffc0000 [ 48.807774][ T29] audit: type=1326 audit(1762629659.411:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf435e1f85 code=0x7ffc0000 [ 48.908053][ T29] audit: type=1326 audit(1762629659.511:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf435e1f85 code=0x7ffc0000 [ 48.965025][ T29] audit: type=1326 audit(1762629659.571:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.012609][ T29] audit: type=1326 audit(1762629659.571:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.036055][ T29] audit: type=1326 audit(1762629659.601:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.059461][ T29] audit: type=1326 audit(1762629659.601:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.083327][ T29] audit: type=1326 audit(1762629659.601:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.106972][ T29] audit: type=1326 audit(1762629659.601:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.130348][ T29] audit: type=1326 audit(1762629659.601:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad414f6c9 code=0x7ffc0000 [ 49.214146][ T4108] lo speed is unknown, defaulting to 1000 [ 49.305821][ T4110] netlink: 'syz.3.223': attribute type 39 has an invalid length. [ 49.315668][ T4110] tipc: Started in network mode [ 49.320620][ T4110] tipc: Node identity ac14140f, cluster identity 4711 [ 49.328019][ T4110] tipc: New replicast peer: 255.255.255.255 [ 49.334071][ T4110] tipc: Enabled bearer , priority 10 [ 49.427037][ T4132] IPv6: Can't replace route, no match found [ 49.457123][ T4134] syzkaller0: entered allmulticast mode [ 49.464218][ T4134] syzkaller0 (unregistering): left allmulticast mode [ 49.505424][ T4136] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 49.524588][ T36] tipc: Node number set to 2886997007 [ 49.643915][ T4138] lo speed is unknown, defaulting to 1000 [ 49.704456][ T4146] netlink: 268 bytes leftover after parsing attributes in process `syz.0.237'. [ 49.741478][ T4140] siw: device registration error -23 [ 49.976924][ T4136] lo speed is unknown, defaulting to 1000 [ 50.444491][ T36] tipc: Node number set to 2886997007 [ 50.725272][ T4178] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 50.733053][ T4178] netlink: 152 bytes leftover after parsing attributes in process `syz.3.248'. [ 50.749234][ T4178] .`: renamed from bond0 (while UP) [ 50.798120][ T4176] syzkaller0: entered allmulticast mode [ 50.824326][ T4176] syzkaller0 (unregistering): left allmulticast mode [ 50.893243][ T4192] tipc: Enabling of bearer rejected, failed to enable media [ 50.945381][ T4180] lo speed is unknown, defaulting to 1000 [ 50.968187][ T4168] xt_connbytes: Forcing CT accounting to be enabled [ 50.974854][ T4168] Cannot find set identified by id 0 to match [ 51.184581][ T4205] netlink: 268 bytes leftover after parsing attributes in process `syz.2.258'. [ 51.317315][ T4209] netlink: 'syz.0.261': attribute type 39 has an invalid length. [ 52.222569][ T4236] IPv6: Can't replace route, no match found [ 52.259573][ T4239] rdma_op ffff888120aa4d80 conn xmit_rdma 0000000000000000 [ 52.444958][ T4251] netlink: 'syz.3.275': attribute type 39 has an invalid length. [ 52.726440][ T4259] netlink: 268 bytes leftover after parsing attributes in process `syz.4.277'. [ 52.754359][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 52.841988][ T4249] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 53.028252][ T4271] siw: device registration error -23 [ 53.282658][ T4283] syzkaller0: entered allmulticast mode [ 53.304229][ T4283] syzkaller0 (unregistering): left allmulticast mode [ 53.346348][ T4287] netlink: 'syz.4.289': attribute type 39 has an invalid length. [ 53.444333][ T4296] siw: device registration error -23 [ 53.764463][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 53.764483][ T29] audit: type=1326 audit(1762629664.281:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 53.794839][ T29] audit: type=1326 audit(1762629664.281:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.058669][ T29] audit: type=1326 audit(1762629664.431:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.082009][ T29] audit: type=1326 audit(1762629664.431:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.105359][ T29] audit: type=1326 audit(1762629664.431:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.128887][ T29] audit: type=1326 audit(1762629664.431:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.152682][ T29] audit: type=1326 audit(1762629664.431:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.160503][ T4297] lo speed is unknown, defaulting to 1000 [ 54.177309][ T29] audit: type=1326 audit(1762629664.431:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.206055][ T29] audit: type=1326 audit(1762629664.431:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.229720][ T29] audit: type=1326 audit(1762629664.431:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 54.333142][ T4324] netlink: 268 bytes leftover after parsing attributes in process `syz.0.300'. [ 54.386991][ T4321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.495431][ T4321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.570456][ T4321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.656123][ T4321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.833104][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.858575][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.882049][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.905205][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.981530][ T4332] netlink: 'syz.4.304': attribute type 39 has an invalid length. [ 55.095984][ T4341] syzkaller0: entered allmulticast mode [ 55.135419][ T4341] syzkaller0 (unregistering): left allmulticast mode [ 55.377229][ T4354] lo speed is unknown, defaulting to 1000 [ 55.467258][ T4367] siw: device registration error -23 [ 55.577173][ T4381] netlink: 268 bytes leftover after parsing attributes in process `syz.3.323'. [ 55.718069][ T4386] syzkaller0: entered allmulticast mode [ 55.726449][ T4386] syzkaller0 (unregistering): left allmulticast mode [ 56.131750][ T4399] siw: device registration error -23 [ 56.151960][ T4396] 9pnet_fd: Insufficient options for proto=fd [ 56.335854][ T4414] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 56.483467][ T4414] lo speed is unknown, defaulting to 1000 [ 56.949145][ T4423] lo speed is unknown, defaulting to 1000 [ 57.300198][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 57.383576][ T4445] netlink: 'syz.3.352': attribute type 39 has an invalid length. [ 57.445139][ T4456] tipc: Enabling of bearer rejected, failed to enable media [ 58.171709][ T4487] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 58.180588][ T4488] syzkaller0: entered allmulticast mode [ 58.188734][ T4488] syzkaller0 (unregistering): left allmulticast mode [ 58.355900][ T4487] lo speed is unknown, defaulting to 1000 [ 58.371765][ T4491] netlink: 660 bytes leftover after parsing attributes in process `syz.1.365'. [ 58.450489][ T4494] tipc: Enabling of bearer rejected, failed to enable media [ 58.476987][ T4491] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 58.678173][ T4509] syzkaller0: entered allmulticast mode [ 58.690060][ T4509] syzkaller0 (unregistering): left allmulticast mode [ 58.728987][ T4511] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 58.745511][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 58.832447][ T4513] netlink: 'syz.2.374': attribute type 39 has an invalid length. [ 58.840290][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a319000: rx timeout, send abort [ 58.851994][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 58.852035][ T29] audit: type=1400 audit(1762629669.451:4971): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.880274][ T29] audit: type=1400 audit(1762629669.451:4972): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.901914][ T29] audit: type=1400 audit(1762629669.451:4973): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.923660][ T29] audit: type=1400 audit(1762629669.451:4974): avc: denied { add_name } for pid=2986 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.944476][ T29] audit: type=1400 audit(1762629669.451:4975): avc: denied { create } for pid=2986 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.965586][ T29] audit: type=1400 audit(1762629669.451:4976): avc: denied { append open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.988832][ T29] audit: type=1400 audit(1762629669.451:4977): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.125797][ T4519] syzkaller0: entered allmulticast mode [ 59.135079][ T4519] syzkaller0 (unregistering): left allmulticast mode [ 59.167525][ T29] audit: type=1326 audit(1762629669.771:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 59.177560][ T4525] IPv6: Can't replace route, no match found [ 59.191009][ T29] audit: type=1326 audit(1762629669.771:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 59.340359][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a319000: abort rx timeout. Force session deactivation [ 59.655866][ T29] audit: type=1326 audit(1762629669.771:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435af6c9 code=0x7ffc0000 [ 59.811191][ T4541] netlink: 268 bytes leftover after parsing attributes in process `syz.0.380'. [ 60.008177][ T4552] lo speed is unknown, defaulting to 1000 [ 60.101586][ T4560] syz0: rxe_newlink: already configured on bond_slave_0 [ 60.154780][ T4566] netlink: 'syz.2.393': attribute type 39 has an invalid length. [ 60.163461][ T4566] tipc: Enabling of bearer rejected, already enabled [ 60.210776][ T4571] syzkaller0: entered allmulticast mode [ 60.232217][ T4571] syzkaller0 (unregistering): left allmulticast mode [ 61.050203][ T4592] tipc: Enabling of bearer rejected, failed to enable media [ 61.117637][ T4594] syû: rxe_newlink: already configured on bond_slave_0 [ 61.187148][ T4598] tipc: Enabling of bearer rejected, already enabled [ 61.276970][ T4601] siw: device registration error -23 [ 61.494630][ T4619] tipc: Enabling of bearer rejected, failed to enable media [ 61.566843][ T4630] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 61.679189][ T4636] siw: device registration error -23 [ 61.693666][ T4641] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 61.821173][ T4641] lo speed is unknown, defaulting to 1000 [ 61.986387][ T4651] lo speed is unknown, defaulting to 1000 [ 62.270762][ T4656] tipc: Enabling of bearer rejected, failed to enable media [ 62.312307][ T4662] netlink: 'syz.4.432': attribute type 4 has an invalid length. [ 62.334831][ T4662] 9p: Unknown access argument : -22 [ 62.677825][ T4691] tipc: Enabling of bearer rejected, failed to enable media [ 62.832536][ T4702] tipc: Enabling of bearer rejected, already enabled [ 62.856944][ T4705] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 62.922328][ T4714] tipc: Enabling of bearer rejected, already enabled [ 62.929924][ T4709] netlink: 660 bytes leftover after parsing attributes in process `syz.1.450'. [ 62.955387][ T4709] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 63.017445][ T4719] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 63.029570][ T4721] IPv6: Can't replace route, no match found [ 63.149543][ T4719] lo speed is unknown, defaulting to 1000 [ 63.173026][ T4727] tipc: Enabling of bearer rejected, failed to enable media [ 63.388681][ T4728] lo speed is unknown, defaulting to 1000 [ 63.524458][ T4734] siw: device registration error -23 [ 63.678802][ T4743] tipc: Enabling of bearer rejected, already enabled [ 63.752885][ T4750] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 63.927307][ T4750] lo speed is unknown, defaulting to 1000 [ 64.551527][ T4762] syzkaller0: entered allmulticast mode [ 64.592644][ T4762] syzkaller0 (unregistering): left allmulticast mode [ 64.901474][ T4779] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 64.941560][ T29] kauditd_printk_skb: 714 callbacks suppressed [ 64.941577][ T29] audit: type=1326 audit(1762629675.541:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 64.971407][ T29] audit: type=1326 audit(1762629675.541:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 65.056461][ T29] audit: type=1326 audit(1762629675.611:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 65.081157][ T29] audit: type=1326 audit(1762629675.611:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 65.105301][ T29] audit: type=1326 audit(1762629675.611:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 65.175758][ T4779] lo speed is unknown, defaulting to 1000 [ 65.310977][ T4796] syzkaller0: entered allmulticast mode [ 65.443787][ T4796] syzkaller0 (unregistering): left allmulticast mode [ 66.027048][ T29] audit: type=1326 audit(1762629676.631:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 66.084725][ T29] audit: type=1326 audit(1762629676.631:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 66.108303][ T29] audit: type=1326 audit(1762629676.631:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 66.131900][ T29] audit: type=1326 audit(1762629676.631:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 66.155333][ T29] audit: type=1326 audit(1762629676.631:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c97af6c9 code=0x7ffc0000 [ 66.261067][ T4818] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 66.411112][ T4832] IPv6: Can't replace route, no match found [ 66.503848][ T4842] netlink: 660 bytes leftover after parsing attributes in process `syz.1.498'. [ 66.527750][ T4842] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 66.594382][ T4845] tipc: Enabling of bearer rejected, failed to enable media [ 66.694467][ T4859] veth0: entered promiscuous mode [ 66.700065][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 66.730550][ T4864] IPv6: Can't replace route, no match found [ 66.739676][ T4863] IPv6: Can't replace route, no match found [ 66.814809][ T4868] siw: device registration error -23 [ 66.956871][ T4883] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 67.065544][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 67.096385][ T4897] IPv6: Can't replace route, no match found [ 67.113967][ T4899] siw: device registration error -23 [ 67.150103][ T4903] IPv6: Can't replace route, no match found [ 67.420655][ T4938] netlink: 268 bytes leftover after parsing attributes in process `syz.3.538'. [ 68.024898][ T4950] IPv6: Can't replace route, no match found [ 68.227529][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 68.244755][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 68.264142][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 68.273157][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 68.282107][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 68.291021][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 68.319423][ T4974] siw: device registration error -23 [ 68.375295][ T4982] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 68.453008][ T4987] IPv6: Can't replace route, no match found [ 68.601384][ T4998] tipc: New replicast peer: 255.255.255.83 [ 68.607545][ T4998] tipc: Enabled bearer , priority 10 [ 68.619273][ T3400] IPVS: starting estimator thread 0... [ 68.714495][ T4999] IPVS: using max 2400 ests per chain, 120000 per kthread [ 68.861227][ T5023] IPv6: Can't replace route, no match found [ 69.001183][ T5027] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 69.279147][ T5049] IPv6: Can't replace route, no match found [ 69.410235][ T5055] netlink: 'syz.4.587': attribute type 39 has an invalid length. [ 69.420740][ T5055] tipc: Enabling of bearer rejected, already enabled [ 69.627576][ T5072] siw: device registration error -23 [ 70.169713][ T29] kauditd_printk_skb: 1628 callbacks suppressed [ 70.169732][ T29] audit: type=1326 audit(1762629680.461:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.199358][ T29] audit: type=1326 audit(1762629680.461:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.222783][ T29] audit: type=1326 audit(1762629680.461:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.246175][ T29] audit: type=1326 audit(1762629680.461:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.269640][ T29] audit: type=1326 audit(1762629680.461:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.292991][ T29] audit: type=1326 audit(1762629680.461:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.316462][ T29] audit: type=1326 audit(1762629680.461:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.339785][ T29] audit: type=1326 audit(1762629680.461:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.363192][ T29] audit: type=1326 audit(1762629680.461:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.386528][ T29] audit: type=1326 audit(1762629680.461:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5495fdf6c9 code=0x7ffc0000 [ 70.601502][ T5118] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 70.788008][ T5133] syz0: rxe_newlink: already configured on bond_slave_0 [ 71.341500][ T5147] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 71.358265][ T5149] siw: device registration error -23 [ 71.442659][ T5155] siw: device registration error -23 [ 71.620152][ T5171] __nla_validate_parse: 11 callbacks suppressed [ 71.620179][ T5171] netlink: 660 bytes leftover after parsing attributes in process `syz.1.635'. [ 71.641861][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 71.658890][ T5171] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 71.744749][ T5178] siw: device registration error -23 [ 71.837543][ T5183] ================================================================== [ 71.845683][ T5183] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 71.853093][ T5183] [ 71.855436][ T5183] write to 0xffff888154306000 of 4096 bytes by task 5182 on cpu 0: [ 71.863345][ T5183] _copy_from_iter+0x133/0xe80 [ 71.868159][ T5183] copy_page_from_iter+0x178/0x2a0 [ 71.873301][ T5183] process_vm_rw+0x659/0x960 [ 71.877927][ T5183] __x64_sys_process_vm_writev+0x78/0x90 [ 71.883591][ T5183] x64_sys_call+0x2a80/0x3000 [ 71.888298][ T5183] do_syscall_64+0xd2/0x200 [ 71.892822][ T5183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.898768][ T5183] [ 71.901101][ T5183] write to 0xffff888154306000 of 4096 bytes by task 5183 on cpu 1: [ 71.908995][ T5183] _copy_from_iter+0x133/0xe80 [ 71.913778][ T5183] copy_page_from_iter+0x178/0x2a0 [ 71.918905][ T5183] process_vm_rw+0x659/0x960 [ 71.923528][ T5183] __x64_sys_process_vm_writev+0x78/0x90 [ 71.929193][ T5183] x64_sys_call+0x2a80/0x3000 [ 71.933896][ T5183] do_syscall_64+0xd2/0x200 [ 71.938427][ T5183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.944348][ T5183] [ 71.946704][ T5183] Reported by Kernel Concurrency Sanitizer on: [ 71.952867][ T5183] CPU: 1 UID: 0 PID: 5183 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.962559][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.972631][ T5183] ==================================================================