last executing test programs: 2m43.05019852s ago: executing program 4 (id=392): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x36f0516f) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 2m41.870038833s ago: executing program 4 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.899263982s ago: executing program 4 (id=423): open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1801) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) setregid(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x1b, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.822580523s ago: executing program 4 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2m39.285559893s ago: executing program 4 (id=428): syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m39.217266025s ago: executing program 4 (id=431): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0xee00, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) fchdir(r1) memfd_create(0x0, 0x18) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) 2m23.820959976s ago: executing program 32 (id=431): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0xee00, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) fchdir(r1) memfd_create(0x0, 0x18) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) 2.814527335s ago: executing program 5 (id=3046): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r0 = socket(0x23, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX], 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x100b28, 0x6, 0x20, 0x1, 0x8, 0xd, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x1, 0x94ff, 0x8, r5, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xa}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r7, 0x0, 0x80000001}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.117319839s ago: executing program 1 (id=3054): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x27, "43720705000000004786b89e6fb2940acfbe5c3f9725f0f2bf8dbac78c2893c6a9798597b20133"}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x18, 0x2c, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r3, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4c843) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="c2bc45560c4ceb070700", @ANYRES16=r4, @ANYBLOB="100025bd7000fedbdf250e000000c00001802c0002800800030007000000080001001500000008000400cb0000000800010010000000080001000e00000044000400200001000a004e2200000400ff01000000000000000000000000000102000000200002000a004e2406bc6454fe8000000000000000000000000000bb400000000d0001007564703a73797a320000000024000280080002008000000008000400d92d272b080002000400000008000100140000000f00010069623a70696d7265673000000800030008000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x800) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.116785618s ago: executing program 1 (id=3055): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x4, 0xd5, 0x7}, &(0x7f0000000380)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000def4ca5d0000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000020000000700000041"], 0x2a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0xffffc06a, r5}, 0xfffffffffffffec8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) 2.04644069s ago: executing program 5 (id=3056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffff54}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000c16, &(0x7f00000005c0)={[{@nodelalloc}, {@noauto_da_alloc}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$@'}}, {@obj_role={'obj_role', 0x3d, '}\v'}}, {@seclabel}, {@fsname={'fsname', 0x3d, '\x00'}}]}, 0x1, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) get_robust_list(r3, &(0x7f0000000600)=&(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.710051316s ago: executing program 5 (id=3061): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x240c0040) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "5138dc07938076ff", "442f1eecb65fbc48d42a2ecc5cb5474a", "29b06cfb", "9db20548b0a3668d"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) 1.421079312s ago: executing program 0 (id=3064): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYRESHEX], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 1.337940874s ago: executing program 2 (id=3066): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, 0x0, &(0x7f00000000c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00'}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x62202, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x17, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000095000000000000000000040000000000e402cecb3bb84856f1f6151b0381774e79c54e671ebe9b1a1e9327d1a5852604b412063b88354ca7ca6b6139d5c6d0d10091bf62959c25d8614017fbd19cf81b3ccb297ca00d3a1d0a542d3e5e0c15107efec3adc894edfec34faa70"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x1, 0x8}]}) timerfd_create(0x8, 0x80800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4091, 0xffb}], 0x1) 1.337476654s ago: executing program 2 (id=3067): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad}, &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x400) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) capget(&(0x7f0000000040)={0x20080522}, 0x0) 1.186016157s ago: executing program 2 (id=3068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, 0x0, 0x5392f5b1) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @val={@void, {0x8100, 0x0, 0x0, 0x10}}, {@arp={0x806, @generic={0x30d, 0x205, 0x6, 0x2, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, "c657", @broadcast, "0ea9"}}}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000440)) close_range(r1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063017d0a0000000007000000000000009500000001000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0xcf8, 0x30, 0x12f, 0x0, 0x0, {}, [{0xce4, 0x1, [@m_police={0xce0, 0x1, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x4, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0xbae5, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0x6, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0x6, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7f, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x2401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x8000, 0x3ff, 0x6, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0x2f, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x5, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x1, 0x3, 0x7, 0xc, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x1ff}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0xcf8}}, 0xc0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.177733657s ago: executing program 2 (id=3078): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="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", 0x5ca}, {0x0}], 0x2}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x8}, &(0x7f00000005c0)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000700)={r6, 0x5}, &(0x7f00000007c0)=0x8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x95cc28, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01092abd7000ffdbdf2510000000050035000700000008000600", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc00000001090104000000000000000000000003b80002002c000180140003000000000000000000000000000000000014000400fe8800000000000000000000000000010c0002"], 0xcc}, 0x1, 0x0, 0x0, 0x20040080}, 0x90) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250400000008000a000300000014002000fe80000000000000000000000000002508001700", @ANYRES32=r12, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000050) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 1.176780187s ago: executing program 5 (id=3069): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x5, 0x8, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000a000000a375"]) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) fspick(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 922.450071ms ago: executing program 2 (id=3072): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280"], 0xfc}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000180500000ad672983c000000090a011b00000000000000000a00f949cfd7ca986ca784b9abb7ad4800040900010073797a31eaff0000080005400000002b0900020073797a310000000008000a40fffffffc14000000040044a7b4906021a6f7ed7b78bf4540bff95b2587540a09850403e646604f9e3c475cb77e213ec22089417706aa144fcc068283a2fcb9fe4a2006c746d7783f1ca8fdb1ef7619a6e10de85d689fea8a6aac2f11b96bd881ace45e1f55d191eb2023af010afdb9bde9929ff6a297a7838ec5a37970cb"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) unshare(0x22020600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 921.738762ms ago: executing program 5 (id=3073): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x161) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x1f86, 0x50, {0x0, 0x2710}, {}, {0x4}, 0x1, @canfd={{0x2}, 0xd, 0x0, 0x0, 0x0, "585799978cf3874b21df137af3eb6208f1769bb1d5f1017048dd22f0cb8c66493a112a11dd2189ddbdc6e7520f2bcf50de4fda144a2da95b8042931abfabab7c"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000540)='./cgroup.net/devices.allow\x00', &(0x7f0000000580), 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB=',defco']) socket$kcm(0x10, 0x2, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 760.157835ms ago: executing program 5 (id=3076): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="005e77da784000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x3, 0xe4fb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) dup(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) 714.553756ms ago: executing program 3 (id=3077): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, 0x0, 0x8, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x40050) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 714.149046ms ago: executing program 3 (id=3079): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7ff, 0x6, 0x4, 0xffffffffffffff57, 0x5, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 686.435356ms ago: executing program 3 (id=3080): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0xfffffffffffffdbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x6}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408000240e0cc"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r7 = fsmount(r2, 0x1, 0x4) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2b, 'cpuset'}]}, 0x8) 676.961157ms ago: executing program 1 (id=3081): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) munlockall() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioprio_get$uid(0x3, 0xee01) 590.333218ms ago: executing program 3 (id=3082): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0xffffffff, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1}}, 0x1c}}, 0x4004800) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000140)=0x10) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r9) dup3(r5, r0, 0x80000) 581.295929ms ago: executing program 3 (id=3083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000a00000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4}, &(0x7f0000000580)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIOCLEX(r0, 0x5451) ioctl$KDSIGACCEPT(r6, 0x5607, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_by_handle_at(r3, &(0x7f0000000000)=@xfs={0x1c, 0x81, {0x7, 0x8000, 0x4, 0x7}}, 0x400000) setfsgid(0xee01) 571.607599ms ago: executing program 0 (id=3084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796104000000000000007e0000001bfe03000a58525dfd7e5a894dee21871415c664e2196c3ae18086e0a044cdd4485b19e4500c2d252f2c0f181d90a40357a9b0704a0b63d30717271120ded4d096effe8f31cbd5371a063d43b3a631f02e05a74ff488677455e2aa918c826f847f98b32c27cdd31b644ca327a7c380478af13db3116363540e6d996ae7fa736502cc41f5a2294581d3dd76d52b18fbde8066bb3d8d4dbb3f65688dfd423d5a0cb26be766504bdc4e5bfd164d7ecf12cb23c3b2cacd", @ANYRES32=0x0, @ANYBLOB="000099000800000064000000"], 0x1c}}, 0x0) 531.545919ms ago: executing program 0 (id=3085): syz_clone(0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000c0af70465a63c10f00000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c798", 0x72}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692", 0x17}, {&(0x7f0000003180)="6d2657493131db30447fce55af67ac7d10106db6d5cacd06cd9a37b801ded29e208feef1fc2a5b2369394c4f45abb57650128aadd2d2c5d12923e59ced50429a6897824e0090dd75bbbc4869c58ec6ab845c5e0e2017cb9d1b31754ebe5caa1dd771d3520e696a2a4acd6032d5ee2fa4dff66e04c87dc5936a617cd9eec3fb68938a7659f8b149c3448d86d4f2f7147b1030bef843cf12730a68ead2567613e33d2ebd8a0e71d5a0aa644a49e6a5103910249b2ea2802be53c6a0021ca78c6d2f49f6fe8e7183fd3548d0010901b1f9fe635372f7f", 0xd5}, {&(0x7f0000003080)="a215c0f0d4", 0x5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000f80)="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"/1352, 0x548}], 0x1}}], 0x2, 0x4000040) ioctl$VT_ACTIVATE(r3, 0x4b4a, 0x10000000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f00000003c0)={0x2, 0x4e25, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2400c870) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 531.116599ms ago: executing program 3 (id=3086): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES64=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3, 0x0, 0x107}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x16, 0x4, 0x90c, 0x47, @mcast1, @local, 0x1, 0x8000, 0x3, 0x66}}) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r8, 0x0, 0xc, 0x2) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xa4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x647c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80000}, 0x20040855) write(r6, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') 497.15492ms ago: executing program 0 (id=3087): socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$loop(0x0, 0x81, 0x767ac3) syz_open_dev$loop(0x0, 0x5, 0x88000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f00000006c0)="$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") close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000340)='%d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 428.942072ms ago: executing program 0 (id=3088): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x161) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x1f86, 0x50, {0x0, 0x2710}, {}, {0x4}, 0x1, @canfd={{0x2}, 0xd, 0x0, 0x0, 0x0, "585799978cf3874b21df137af3eb6208f1769bb1d5f1017048dd22f0cb8c66493a112a11dd2189ddbdc6e7520f2bcf50de4fda144a2da95b8042931abfabab7c"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000540)='./cgroup.net/devices.allow\x00', &(0x7f0000000580), 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB=',defco']) socket$kcm(0x10, 0x2, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 408.835262ms ago: executing program 0 (id=3089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@orlov}, {@nogrpid}, {@grpid}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r1 = socket(0x400000000010, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) write$tun(r0, 0x0, 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@acl}], [{@subj_user={'subj_user', 0x3d, 'rootcontext'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt={'uid<', r2}}, {@measure}, {@euid_lt={'euid<', r2}}, {@audit}, {@subj_type}]}, 0x43, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x3) socket(0x17, 0x1, 0x7ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) getpid() pipe(&(0x7f0000000280)) semop(0x0, &(0x7f0000000180)=[{0x0, 0x1}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) close_range(r3, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 304.435904ms ago: executing program 1 (id=3090): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000094bfe2b6f7388b144818ba00b7080000078a62b09b8af8df00000000bfa200000000000007020059657300f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) setuid(0xee00) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge_slave_0\x00', &(0x7f0000000480)=@ethtool_eeprom={0xb, 0x0, 0xffff0000, 0x89, "06b4ed3711740054497bc4e2fa11bac37dc6f785379ce7d1d65026b171bb587511e1c5c968444197f95fddd520e94f10d5abbd457e28933de95d7abe315d3bf74e335d865bfd7101a6b04238286c99e29eea9e1157763348842af308431a25a0829c74f8827083814e13c45e21fb8d2d50c2edadca6f9a867437921a9f0c11454be5278b40f96a24be"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x124}, 0x1, 0x0, 0x0, 0x4c802}, 0x48801) ioctl$FITHAW(r0, 0xc0045878) 3.054909ms ago: executing program 1 (id=3091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.482699ms ago: executing program 2 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mq_notify(r5, &(0x7f0000000340)={0x0, 0xc, 0x4, @thr={0x0, &(0x7f00000004c0)="eada06da02c9d255146e253e81927eb960c7d8e90464fe865804b0621254e11a4ba52e515e273075f08d5fc3854824ec2e6dacf0288a4361d7f970bf031d5ac6142d7dfb73a347e49b5de47f3ff4be352f488b6bafc4908828430555ba8427e15547cc02145ac7be7272ac431baa07744bea0d16c4ad683ede792d2735ac8774bcca5c2e11a6"}}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x1ff, 0x12) 0s ago: executing program 1 (id=3093): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xfav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioprio_get$uid(0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000100002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3M9vFNcdAPDvrtc2LlC79Be/WralVa1Wxdj8PPQAqJW4VKrUqqLHrW0QxUCFXQksq5iqAqmHVvwF/XGrlL8gp+QSJVEOiXIF5RpFQpEvkByiiWZ3ZrPr3bXXZu2V8ecjzfJm5s3M+87Mw2/e29kAdq1y+lGI2BcRTyJitDbbnKFc++fFytL0ZytL04VIkt9+Wqjme76yNJ1nzbfbm82MFyOKfy/EkdbDDs/fW7xRmZubvZMtmFgoZqmblWuz12ZvTZ0/f/rUyLmzU2d6EmdapueH/3r76KHLf3j86+krj//4zmtpeZNsfWMcNWPVz6GujzDQsqQc5eZz2eDH3Rd9R9jfkC6U0s9i/wpD19K7tpTV3ScxGgPVuZrR+NXf+lo4YEslSZIMtyyt/y1bThoVCrUNkuRBArwCCtHvEgD9kf+hf76SPgEsTbc+B7/anl2M6hNQGveLbKqtKVWfYMtjEYNRm7bCtyLiyvLn/06naNsPAQDQW29cjHh0qdbuyKfammJ8pyHf17OxobGI+EZEHIiIb2btl29HVPN+NyIONmyzv4tRgPKq+db2zwcjWaKxudozafvvF9nYVnP7r17ysYFsbn81/sHC1etzsyezczIeg8Pp/GTrruvdam/+8sN/dTp+uaH9l07p8fO2YFaOT0qrOuhmKguVl4079+xB9cTeb42/EKVCnoo4FBGHN7H/9Jxd/+n/j3Za3xR/GmdL/P/svPPSJgq0SvLfiJ/Urv9yVOPP+z5rwQ9lqYmFm3+emL+3+PPrjeOTk+fOTp2Z2BNzsycn8rui1bvvP/xNlmx5jGi+/knScP3zqrGlA2np9f9a2/u/PnI5lqbq47XzGz/Gw6ePOj7TbPb+Hyr8rprOx2fvVhYW7kxGDBWWW5dPfbXt3cpIU/40/vHj7ev/gYgv/pNtdyQi0pv4exHx/Yg4lpX9BxHxw4g4vkb8b1/60Z86PUKuH//WSuOf2dD1v7c4ElmiviRNXHgvonlJnhi48dbrLQf+R7kl/sHodP1PV1Pj2ZKZysKe9eJqU8C2iZc+gQAAALADHIuIfVEonsg6mvZFsXjiRMTeeg/K/MLPrt7+y62Z2jsCYzFYzHu6Rhv6QyezvuF0Pt1qqmE+XX+q2m+cJEkyks6nz+9zB/sbOux6ezvU/9THra+0AK+aDY2jdXqjDdiRVtf/p11v2fsvZADbqwffowF2KPUfdq+u6/9WvQUH9E27+n8/4kUfigJss3b1//ctSy5sS1mA7dWu/hv7h91h8/1/vgwAO53+f9iVunpJfhOJA5fXyFModbefUtev8a+XKMbavwIwFvXfNMjbNGvv8KNiRG/O2EBPz/xI0zUtts2zJ3pxrCium6e0gR9i2N5EsTI3l7/g0vfyDEfEOndv/Wa7nycWt7pg1XPzv/79zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAbXwYAAP//363OhA==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50b, &(0x7f0000000700)="$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") r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\a\x00'/16], 0x10}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) getdents64(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): tdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.537347][ T5669] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.550988][ T5669] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.932777][ T7046] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 133.417980][ T7054] block device autoloading is deprecated and will be removed. [ 133.580755][ T5657] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 133.600431][ T5657] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 133.612956][ T5657] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.612956][ T5657] [ 133.622637][ T5657] EXT4-fs (loop3): Total free blocks count 0 [ 133.628617][ T5657] EXT4-fs (loop3): Free/Dirty block details [ 133.634564][ T5657] EXT4-fs (loop3): free_blocks=0 [ 133.639495][ T5657] EXT4-fs (loop3): dirty_blocks=12048 [ 133.644873][ T5657] EXT4-fs (loop3): Block reservation details [ 133.650883][ T5657] EXT4-fs (loop3): i_reserved_data_blocks=12048 [ 133.667587][ T5657] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 133.994952][ T7073] tipc: Enabled bearer , priority 0 [ 134.002369][ T7073] syzkaller0: entered promiscuous mode [ 134.007857][ T7073] syzkaller0: entered allmulticast mode [ 134.016757][ T7073] tipc: Resetting bearer [ 134.023918][ T7072] tipc: Resetting bearer [ 134.031104][ T7072] tipc: Disabling bearer [ 135.111591][ T7101] tipc: Enabling of bearer rejected, failed to enable media [ 135.167485][ T7104] program syz.0.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.176852][ T7104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 135.296127][ T7117] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.304947][ T29] kauditd_printk_skb: 1295 callbacks suppressed [ 135.304962][ T29] audit: type=1326 audit(1758843295.325:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 135.335974][ T29] audit: type=1326 audit(1758843295.325:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 135.359332][ T29] audit: type=1326 audit(1758843295.325:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 135.382792][ T29] audit: type=1326 audit(1758843295.325:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 135.406189][ T29] audit: type=1326 audit(1758843295.325:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 135.429534][ T29] audit: type=1326 audit(1758843295.325:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 135.452859][ T29] audit: type=1326 audit(1758843295.325:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 135.476160][ T29] audit: type=1326 audit(1758843295.325:10706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 135.499564][ T29] audit: type=1326 audit(1758843295.335:10707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 135.522921][ T29] audit: type=1326 audit(1758843295.335:10708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7114 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 135.691982][ T7120] lo speed is unknown, defaulting to 1000 [ 135.755640][ T7124] loop5: detected capacity change from 0 to 512 [ 135.765465][ T7124] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.776460][ T7124] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 135.777160][ T7117] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.801865][ T7124] netlink: 'syz.5.969': attribute type 1 has an invalid length. [ 135.840970][ T7117] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.883756][ T7117] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.947027][ T5657] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.962990][ T5657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.972417][ T7133] netlink: 'syz.5.972': attribute type 13 has an invalid length. [ 135.980198][ T7133] netlink: 'syz.5.972': attribute type 17 has an invalid length. [ 135.992212][ T5657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.040181][ T7133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.050333][ T7133] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.061513][ T7133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.077144][ T5657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.172181][ T7140] program syz.5.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.214963][ T7140] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 136.231668][ T7143] loop5: detected capacity change from 0 to 128 [ 136.298677][ T7146] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 136.311776][ T7143] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.332543][ T7143] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.489034][ T5712] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.553941][ T7157] __nla_validate_parse: 10 callbacks suppressed [ 136.553958][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.979'. [ 136.573304][ T7157] loop5: detected capacity change from 0 to 736 [ 136.620949][ T7157] rock: directory entry would overflow storage [ 136.627139][ T7157] rock: sig=0x3b10, size=4, remaining=3 [ 136.646738][ T7157] syz_tun: entered allmulticast mode [ 136.652579][ T7156] syz_tun: left allmulticast mode [ 136.692222][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 136.867243][ T7173] team0: left promiscuous mode [ 136.872103][ T7173] team_slave_0: left promiscuous mode [ 136.877639][ T7173] team_slave_1: left promiscuous mode [ 136.884857][ T7173] bond0: left promiscuous mode [ 136.889661][ T7173] bond_slave_0: left promiscuous mode [ 136.895420][ T7173] bond_slave_1: left promiscuous mode [ 136.900931][ T7173] batadv0: left promiscuous mode [ 137.091020][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 137.260372][ T7206] netlink: 256 bytes leftover after parsing attributes in process `syz.2.992'. [ 138.328664][ T7230] loop3: detected capacity change from 0 to 512 [ 138.356783][ T7230] EXT4-fs (loop3): too many log groups per flexible block group [ 138.364559][ T7230] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 138.387411][ T7230] EXT4-fs (loop3): mount failed [ 138.400682][ T7236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7236 comm=syz.1.1012 [ 138.544497][ T7243] loop3: detected capacity change from 0 to 512 [ 138.551396][ T7243] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.571295][ T7243] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1005: Failed to acquire dquot type 1 [ 138.627324][ T7243] EXT4-fs (loop3): 1 truncate cleaned up [ 138.659136][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.641569][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 139.671340][ T7259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.214988][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.424597][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 140.424612][ T29] audit: type=1400 audit(1758843300.445:11256): avc: denied { tracepoint } for pid=7266 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.493262][ T29] audit: type=1400 audit(1758843300.475:11257): avc: denied { create } for pid=7266 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.663605][ T7267] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 140.671403][ T7267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1013'. [ 140.787583][ T29] audit: type=1400 audit(1758843300.735:11258): avc: denied { mount } for pid=7269 comm="syz.1.1014" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.809445][ T29] audit: type=1400 audit(1758843300.735:11259): avc: denied { mounton } for pid=7269 comm="syz.1.1014" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 140.850905][ T7267] .`: renamed from $Hÿ [ 140.867927][ T29] audit: type=1400 audit(1758843300.865:11260): avc: denied { bind } for pid=7266 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.887264][ T29] audit: type=1400 audit(1758843300.885:11261): avc: denied { write } for pid=7266 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.963887][ T29] audit: type=1400 audit(1758843300.985:11262): avc: denied { cpu } for pid=7273 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 141.022494][ T7274] lo speed is unknown, defaulting to 1000 [ 141.199280][ T7279] loop3: detected capacity change from 0 to 1024 [ 141.207076][ T7279] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.218036][ T7279] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 141.229053][ T7279] JBD2: no valid journal superblock found [ 141.234921][ T7279] EXT4-fs (loop3): Could not load journal inode [ 141.311702][ T29] audit: type=1326 audit(1758843301.335:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 141.311737][ T29] audit: type=1326 audit(1758843301.335:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 141.311767][ T29] audit: type=1326 audit(1758843301.335:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 142.254396][ T7297] loop5: detected capacity change from 0 to 512 [ 142.294852][ T7297] EXT4-fs (loop5): too many log groups per flexible block group [ 142.302780][ T7297] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 142.541879][ T7297] EXT4-fs (loop5): mount failed [ 143.348284][ T7330] loop5: detected capacity change from 0 to 512 [ 143.403663][ T7330] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 143.424052][ T7330] System zones: 0-2, 18-18, 34-35 [ 143.430916][ T7330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.443606][ T7330] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.841393][ T7342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1032'. [ 143.914541][ T7346] loop3: detected capacity change from 0 to 512 [ 143.939945][ T7346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.962025][ T7346] EXT4-fs (loop3): 1 truncate cleaned up [ 143.974755][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.052359][ T7353] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 144.052359][ T7353] program syz.3.1033 not setting count and/or reply_len properly [ 144.061540][ T7349] lo speed is unknown, defaulting to 1000 [ 144.186267][ T5712] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.235600][ T7363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1035'. [ 144.802487][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.850574][ T7386] tipc: New replicast peer: 255.255.255.255 [ 144.856601][ T7386] tipc: Enabled bearer , priority 10 [ 144.913873][ T7388] loop3: detected capacity change from 0 to 512 [ 144.941606][ T7388] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 144.951156][ T7390] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1043'. [ 144.960258][ T7388] System zones: 0-2, 18-18, 34-35 [ 144.969384][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.017966][ T7388] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.116174][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.129284][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1047'. [ 145.172284][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 145.210550][ T7401] netlink: 'syz.0.1048': attribute type 13 has an invalid length. [ 145.241966][ T7404] SELinux: policydb string SE Li does not match my string SE Linux [ 145.254775][ T7404] SELinux: failed to load policy [ 145.266449][ T7401] team0: left promiscuous mode [ 145.593326][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 145.593344][ T29] audit: type=1326 audit(1758843305.615:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.660689][ T29] audit: type=1326 audit(1758843305.615:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.684322][ T29] audit: type=1326 audit(1758843305.615:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.708008][ T29] audit: type=1326 audit(1758843305.615:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.731536][ T29] audit: type=1326 audit(1758843305.615:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.755136][ T29] audit: type=1326 audit(1758843305.615:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7409 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 145.778726][ T29] audit: type=1326 audit(1758843305.615:11648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 145.802413][ T29] audit: type=1326 audit(1758843305.615:11649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 145.825941][ T29] audit: type=1326 audit(1758843305.615:11650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 145.849367][ T29] audit: type=1326 audit(1758843305.615:11651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 146.170093][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 146.447966][ T7422] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1058'. [ 146.590808][ T7436] loop5: detected capacity change from 0 to 128 [ 146.653177][ T7434] bio_check_eod: 58380 callbacks suppressed [ 146.653198][ T7434] syz.5.1061: attempt to access beyond end of device [ 146.653198][ T7434] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 147.858551][ T7488] syzkaller0: entered promiscuous mode [ 147.864200][ T7488] syzkaller0: entered allmulticast mode [ 147.888609][ T7495] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 147.894517][ T7495] pim6reg1: linktype set to 776 [ 148.445561][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 148.496106][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 148.505303][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1080'. [ 148.731657][ T7521] syz_tun: entered promiscuous mode [ 148.935044][ T7537] netlink: 'syz.1.1092': attribute type 13 has an invalid length. [ 149.065119][ T7537] team0: left promiscuous mode [ 149.072639][ T86] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.081495][ T86] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.090041][ T86] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.098564][ T86] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.149373][ T7540] __nla_validate_parse: 1 callbacks suppressed [ 149.149454][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'. [ 149.164581][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 149.325017][ T5972] IPVS: starting estimator thread 0... [ 149.429936][ T7554] IPVS: using max 2400 ests per chain, 120000 per kthread [ 149.618264][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'. [ 149.627338][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 149.654189][ T7567] syzkaller0: entered promiscuous mode [ 149.659687][ T7567] syzkaller0: entered allmulticast mode [ 149.938153][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 149.947236][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 150.233621][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 150.267270][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 150.276313][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 150.317034][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1132'. [ 150.517249][ T7634] lo speed is unknown, defaulting to 1000 [ 150.604101][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 150.604117][ T29] audit: type=1326 audit(1758843310.625:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 150.635223][ T29] audit: type=1326 audit(1758843310.625:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 150.658733][ T29] audit: type=1326 audit(1758843310.625:12519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 150.682228][ T29] audit: type=1326 audit(1758843310.655:12520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 150.705633][ T29] audit: type=1326 audit(1758843310.655:12521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 150.728998][ T29] audit: type=1326 audit(1758843310.655:12522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 150.752419][ T29] audit: type=1326 audit(1758843310.655:12523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 150.775859][ T29] audit: type=1326 audit(1758843310.655:12524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 150.780435][ T7640] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.799392][ T29] audit: type=1326 audit(1758843310.685:12525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.5.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 150.872300][ T7646] netlink: 'syz.1.1139': attribute type 13 has an invalid length. [ 150.880249][ T7646] netlink: 'syz.1.1139': attribute type 17 has an invalid length. [ 150.896641][ T7646] ip6tnl0: left promiscuous mode [ 150.901615][ T7646] ip6tnl0: left allmulticast mode [ 150.909192][ T7646] $Hÿ: left promiscuous mode [ 150.914677][ T7646] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 150.923062][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.932999][ T7646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.713905][ T7694] netlink: 'syz.2.1160': attribute type 39 has an invalid length. [ 151.728016][ T7689] lo speed is unknown, defaulting to 1000 [ 152.133181][ T7723] lo speed is unknown, defaulting to 1000 [ 152.270779][ T7743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.369550][ T7744] lo speed is unknown, defaulting to 1000 [ 152.438974][ T7755] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.092967][ T7789] bridge0: port 3(bond0) entered blocking state [ 153.099261][ T7789] bridge0: port 3(bond0) entered disabled state [ 153.111302][ T7789] bond0: entered allmulticast mode [ 153.116432][ T7789] bond_slave_0: entered allmulticast mode [ 153.122206][ T7789] bond_slave_1: entered allmulticast mode [ 153.127998][ T7789] batadv0: entered allmulticast mode [ 153.133922][ T7789] bond0: left allmulticast mode [ 153.138810][ T7789] bond_slave_0: left allmulticast mode [ 153.144319][ T7789] bond_slave_1: left allmulticast mode [ 153.149776][ T7789] batadv0: left allmulticast mode [ 153.391316][ T7810] netlink: 'syz.0.1209': attribute type 4 has an invalid length. [ 153.740398][ T7825] ALSA: seq fatal error: cannot create timer (-19) [ 153.886291][ T7827] lo speed is unknown, defaulting to 1000 [ 154.154094][ T7838] __nla_validate_parse: 25 callbacks suppressed [ 154.154106][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 154.169373][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 154.249700][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1222'. [ 154.299808][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.371201][ T7843] netlink: 'syz.5.1222': attribute type 10 has an invalid length. [ 154.379064][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1222'. [ 154.405277][ T7843] veth1_vlan: left promiscuous mode [ 154.418220][ T7843] batman_adv: batadv0: Adding interface: veth1_vlan [ 154.424876][ T7843] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.467365][ T7843] batman_adv: batadv0: Interface activated: veth1_vlan [ 154.570759][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1227'. [ 154.579921][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1227'. [ 154.594919][ T7857] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 154.602853][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1228'. [ 154.618896][ T7857] veth1_vlan: left promiscuous mode [ 154.624863][ T7857] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 154.719104][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 154.728033][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 154.784351][ T7870] netlink: 'wg1': attribute type 10 has an invalid length. [ 154.807861][ T7870] team0: Port device dummy0 added [ 154.823736][ T7870] netlink: 'wg1': attribute type 10 has an invalid length. [ 154.836903][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1231'. [ 154.845799][ T7868] netlink: 'syz.5.1231': attribute type 15 has an invalid length. [ 154.854059][ T7870] team0: Port device dummy0 removed [ 154.871730][ T7870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.899342][ T7868] vxlan0: entered promiscuous mode [ 154.916404][ T5666] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.916443][ T5666] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.916581][ T5666] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.916688][ T5666] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.964568][ T7879] macvtap1: entered promiscuous mode [ 154.970053][ T7879] syz_tun: entered promiscuous mode [ 154.975322][ T7879] macvtap1: entered allmulticast mode [ 154.980763][ T7879] syz_tun: entered allmulticast mode [ 154.987294][ T7879] syz_tun: left allmulticast mode [ 154.992427][ T7879] syz_tun: left promiscuous mode [ 155.066006][ T9] IPVS: starting estimator thread 0... [ 155.086067][ T7898] bond0: (slave dummy0): Releasing backup interface [ 155.160020][ T7896] IPVS: using max 2880 ests per chain, 144000 per kthread [ 155.187800][ T7912] netlink: 'syz.2.1254': attribute type 29 has an invalid length. [ 155.242795][ T7920] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 155.256802][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.269783][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.277100][ T7920] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.290808][ T7920] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 155.322458][ T7923] ip6erspan0: entered promiscuous mode [ 155.329754][ T7923] bond0: (slave ip6erspan0): making interface the new active one [ 155.350070][ T7923] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 155.369354][ T7920] capability: warning: `syz.2.1258' uses 32-bit capabilities (legacy support in use) [ 155.381926][ T7920] macvlan3: entered promiscuous mode [ 155.387727][ T7920] bond0: entered promiscuous mode [ 155.393302][ T7920] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 155.403266][ T7920] bond0: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 155.415313][ T7920] bond0: left promiscuous mode [ 155.492520][ T7926] bridge0: port 1($Hÿ) entered blocking state [ 155.498836][ T7926] bridge0: port 1($Hÿ) entered disabled state [ 155.505308][ T7926] $Hÿ: entered allmulticast mode [ 155.535914][ T7926] $Hÿ: left allmulticast mode [ 155.625777][ T29] kauditd_printk_skb: 3029 callbacks suppressed [ 155.625792][ T29] audit: type=1400 audit(1758843315.645:15553): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.688265][ T29] audit: type=1400 audit(1758843315.695:15554): avc: denied { map_create } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.689496][ T7930] lo speed is unknown, defaulting to 1000 [ 155.707535][ T29] audit: type=1400 audit(1758843315.705:15555): avc: denied { open } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 155.707561][ T29] audit: type=1400 audit(1758843315.705:15556): avc: denied { map_create } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.751784][ T29] audit: type=1400 audit(1758843315.705:15557): avc: denied { open } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 155.771118][ T29] audit: type=1400 audit(1758843315.705:15558): avc: denied { map_create } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.790509][ T29] audit: type=1400 audit(1758843315.705:15559): avc: denied { map_create } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.809822][ T29] audit: type=1400 audit(1758843315.705:15560): avc: denied { prog_load } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.829101][ T29] audit: type=1400 audit(1758843315.705:15561): avc: denied { prog_load } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 155.848484][ T29] audit: type=1400 audit(1758843315.705:15562): avc: denied { create } for pid=7932 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 155.900454][ T7938] netlink: 'syz.1.1264': attribute type 27 has an invalid length. [ 155.945759][ T7938] geneve2: left promiscuous mode [ 155.950836][ T7938] geneve2: left allmulticast mode [ 155.989448][ T7950] veth5: entered promiscuous mode [ 155.994655][ T7950] veth5: entered allmulticast mode [ 156.062579][ T7956] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 156.090646][ T7956] veth1_vlan: left promiscuous mode [ 156.110609][ T7956] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 156.625469][ T7990] lo speed is unknown, defaulting to 1000 [ 157.280527][ T8022] bond0: (slave ip6erspan0): Releasing active interface [ 157.323827][ T8028] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 157.330403][ T8028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.337936][ T8028] vhci_hcd vhci_hcd.0: Device attached [ 157.442525][ T8037] netlink: 'syz.5.1305': attribute type 10 has an invalid length. [ 157.458676][ T8037] team0: Device hsr_slave_0 failed to register rx_handler [ 157.513850][ T8049] serio: Serial port ptm0 [ 157.558369][ T8029] vhci_hcd: connection closed [ 157.558568][ T5657] vhci_hcd: stop threads [ 157.567609][ T5657] vhci_hcd: release socket [ 157.572065][ T5657] vhci_hcd: disconnect device [ 157.579980][ T5972] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 157.587331][ T5972] usb 5-1: enqueue for inactive port 0 [ 157.596612][ T5972] usb 5-1: enqueue for inactive port 0 [ 157.602205][ T5972] usb 5-1: enqueue for inactive port 0 [ 157.679995][ T5972] vhci_hcd: vhci_device speed not set [ 157.731791][ T8069] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.877858][ T8081] hsr_slave_0: left promiscuous mode [ 157.886294][ T8081] hsr_slave_1: left promiscuous mode [ 157.923080][ T8075] lo speed is unknown, defaulting to 1000 [ 158.090830][ T8087] vlan0: entered promiscuous mode [ 158.095921][ T8087] vlan0: entered allmulticast mode [ 158.101161][ T8087] hsr_slave_1: entered allmulticast mode [ 158.347991][ T8104] veth1_vlan: left promiscuous mode [ 158.360409][ T8104] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 158.688990][ T8152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8152 comm=syz.5.1353 [ 158.849342][ T8156] lo speed is unknown, defaulting to 1000 [ 159.386577][ T8187] __nla_validate_parse: 21 callbacks suppressed [ 159.386590][ T8187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1368'. [ 159.401908][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 159.440988][ T8190] validate_nla: 2 callbacks suppressed [ 159.441004][ T8190] netlink: 'syz.5.1369': attribute type 10 has an invalid length. [ 159.472422][ T8190] team0: Port device dummy0 added [ 159.486752][ T8190] netlink: 'syz.5.1369': attribute type 10 has an invalid length. [ 159.505066][ T8190] team0: Port device dummy0 removed [ 159.521797][ T8190] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.568846][ T8194] netlink: 'syz.5.1370': attribute type 27 has an invalid length. [ 159.580010][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 159.602030][ T8195] netem: change failed [ 159.612538][ T8194] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 159.619801][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 159.643783][ T8194] syz_tun: left promiscuous mode [ 159.676316][ T8194] vxlan0: left promiscuous mode [ 159.700576][ T5657] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.718071][ T5657] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.738304][ T5657] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.754888][ T5657] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.353067][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 160.362317][ T8247] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (40192) [ 160.389366][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 160.401621][ T8249] macvtap0: entered promiscuous mode [ 160.406936][ T8249] syz_tun: entered promiscuous mode [ 160.412347][ T8249] macvtap0: entered allmulticast mode [ 160.417757][ T8249] syz_tun: entered allmulticast mode [ 160.458971][ T8255] ip6erspan0: entered promiscuous mode [ 160.485855][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 160.494762][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 160.612499][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 160.631382][ T29] kauditd_printk_skb: 1764 callbacks suppressed [ 160.631394][ T29] audit: type=1400 audit(1758843320.655:17327): avc: denied { mount } for pid=8276 comm="syz.2.1407" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=0 [ 160.694805][ T29] audit: type=1400 audit(1758843320.655:17328): avc: denied { prog_load } for pid=8276 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.697116][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1410'. [ 160.713994][ T29] audit: type=1400 audit(1758843320.655:17329): avc: denied { create } for pid=8276 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 160.743031][ T29] audit: type=1400 audit(1758843320.655:17330): avc: denied { create } for pid=8276 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 160.763674][ T29] audit: type=1326 audit(1758843320.685:17331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 160.763705][ T29] audit: type=1326 audit(1758843320.685:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 160.804174][ T5712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.810482][ T29] audit: type=1326 audit(1758843320.685:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 160.816941][ T5712] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 160.840736][ T29] audit: type=1400 audit(1758843320.685:17334): avc: denied { prog_load } for pid=8278 comm="syz.1.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.920493][ T8299] bond0: (slave dummy0): Releasing backup interface [ 160.929201][ T8299] bond0: (slave batadv0): Releasing backup interface [ 160.936801][ T8299] bridge_slave_0: left allmulticast mode [ 160.942477][ T8299] bridge_slave_0: left promiscuous mode [ 160.948288][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.956427][ T8299] bridge_slave_1: left allmulticast mode [ 160.962128][ T8299] bridge_slave_1: left promiscuous mode [ 160.967798][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.980650][ T8299] bond0: (slave bond_slave_0): Releasing backup interface [ 161.011411][ T8299] bond0: (slave bond_slave_1): Releasing backup interface [ 161.020579][ T8299] team0: Port device team_slave_0 removed [ 161.027237][ T8299] team0: Port device team_slave_1 removed [ 161.034096][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.042140][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.050713][ T8299] batman_adv: batadv0: Removing interface: veth1_vlan [ 161.227914][ T8326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.241383][ T8326] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 161.245845][ T8329] netlink: 'syz.1.1425': attribute type 10 has an invalid length. [ 161.249339][ T8326] dummy0: entered promiscuous mode [ 161.263098][ T8326] bridge0: port 1(dummy0) entered blocking state [ 161.269479][ T8326] bridge0: port 1(dummy0) entered disabled state [ 161.276186][ T8326] dummy0: entered allmulticast mode [ 161.305028][ T8336] netlink: 'syz.1.1425': attribute type 10 has an invalid length. [ 161.331957][ T8329] team0: Port device dummy0 added [ 161.354475][ T8336] team0: Port device dummy0 removed [ 161.373160][ T8336] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 161.953557][ T8378] lo speed is unknown, defaulting to 1000 [ 162.461809][ T8399] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 162.471497][ T8399] $Hÿ (unregistering): Released all slaves [ 162.513097][ T8395] lo speed is unknown, defaulting to 1000 [ 162.546282][ T8401] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 162.588249][ T8401] veth1_vlan: left promiscuous mode [ 162.594727][ T8401] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 163.190386][ T8433] lo speed is unknown, defaulting to 1000 [ 164.144705][ T8495] serio: Serial port ttyS3 [ 164.600647][ T8516] netlink: 'syz.5.1507': attribute type 4 has an invalid length. [ 164.608403][ T8516] __nla_validate_parse: 4 callbacks suppressed [ 164.608417][ T8516] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1507'. [ 164.854240][ T8518] lo speed is unknown, defaulting to 1000 [ 165.380248][ T8539] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 165.667158][ T29] kauditd_printk_skb: 3064 callbacks suppressed [ 165.667198][ T29] audit: type=1400 audit(1758843325.685:20329): avc: denied { create } for pid=8547 comm="syz.1.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 165.694141][ T29] audit: type=1400 audit(1758843325.685:20330): avc: denied { prog_load } for pid=8547 comm="syz.1.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.714136][ T29] audit: type=1400 audit(1758843325.685:20331): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.738504][ T29] audit: type=1400 audit(1758843325.715:20332): avc: denied { create } for pid=8544 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 165.758278][ T29] audit: type=1400 audit(1758843325.715:20333): avc: denied { prog_load } for pid=8544 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.777616][ T29] audit: type=1400 audit(1758843325.725:20334): avc: denied { map_create } for pid=8550 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.796945][ T29] audit: type=1400 audit(1758843325.725:20335): avc: denied { prog_load } for pid=8550 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.816217][ T29] audit: type=1400 audit(1758843325.725:20336): avc: denied { prog_load } for pid=8550 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.835350][ T29] audit: type=1400 audit(1758843325.735:20337): avc: denied { prog_load } for pid=8550 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.854469][ T29] audit: type=1400 audit(1758843325.735:20338): avc: denied { prog_load } for pid=8550 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 165.942678][ T8559] serio: Serial port ptm0 [ 166.092397][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 166.105847][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 166.375129][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1534'. [ 166.645346][ T8589] wireguard0: entered promiscuous mode [ 166.650929][ T8589] wireguard0: entered allmulticast mode [ 166.778966][ T8599] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1543'. [ 166.816657][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 167.040362][ T8621] lo speed is unknown, defaulting to 1000 [ 167.095625][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 167.324387][ T8637] netlink: 'syz.2.1559': attribute type 12 has an invalid length. [ 167.473557][ T8654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8654 comm=syz.2.1567 [ 167.521112][ T8659] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1569'. [ 167.673174][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 167.691883][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.701903][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 167.711095][ T8666] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 167.719024][ T8666] dummy0: entered promiscuous mode [ 168.249727][ T8718] netlink: 'syz.1.1592': attribute type 4 has an invalid length. [ 168.404357][ T8725] lo speed is unknown, defaulting to 1000 [ 168.483563][ T8730] lo speed is unknown, defaulting to 1000 [ 168.828573][ T8748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.839611][ T8748] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 168.848203][ T8748] dummy0: entered promiscuous mode [ 168.854160][ T8748] bridge0: port 1(dummy0) entered blocking state [ 168.860580][ T8748] bridge0: port 1(dummy0) entered disabled state [ 168.867077][ T8748] dummy0: entered allmulticast mode [ 168.970571][ T8758] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 169.085934][ T8777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.095338][ T8777] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 169.103353][ T8777] bridge0: port 1(dummy0) entered blocking state [ 169.109694][ T8777] bridge0: port 1(dummy0) entered disabled state [ 169.116181][ T8777] dummy0: entered allmulticast mode [ 169.380596][ T8806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.390470][ T8806] netlink: 'syz.2.1626': attribute type 10 has an invalid length. [ 169.398333][ T8806] dummy0: entered promiscuous mode [ 169.404618][ T8806] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 169.504897][ T8812] lo speed is unknown, defaulting to 1000 [ 169.763509][ T8820] __nla_validate_parse: 7 callbacks suppressed [ 169.763546][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 169.785592][ T8820] macvtap1: entered promiscuous mode [ 169.791005][ T8820] macvtap1: entered allmulticast mode [ 169.798116][ T8820] macvtap1: left promiscuous mode [ 169.803486][ T8820] macvtap1: left allmulticast mode [ 169.963361][ T8837] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 170.061069][ T8848] macvlan1: entered promiscuous mode [ 170.068588][ T8847] binfmt_misc: register: failed to install interpreter file ./file2 [ 170.068651][ T8848] ipvlan0: entered promiscuous mode [ 170.082564][ T8848] ipvlan0: left promiscuous mode [ 170.087945][ T8848] macvlan1: left promiscuous mode [ 170.673996][ T29] kauditd_printk_skb: 3077 callbacks suppressed [ 170.674068][ T29] audit: type=1326 audit(1758843330.695:23416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 170.709902][ T29] audit: type=1326 audit(1758843330.695:23417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 170.733396][ T29] audit: type=1326 audit(1758843330.695:23418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 170.737248][ T8868] netlink: 'syz.2.1653': attribute type 12 has an invalid length. [ 170.756976][ T29] audit: type=1326 audit(1758843330.705:23419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 170.757008][ T29] audit: type=1326 audit(1758843330.705:23420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 170.811735][ T29] audit: type=1326 audit(1758843330.705:23421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 170.835505][ T29] audit: type=1326 audit(1758843330.715:23422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 170.859206][ T29] audit: type=1326 audit(1758843330.715:23423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 170.882624][ T29] audit: type=1326 audit(1758843330.715:23424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 170.892442][ T8872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.218794][ T8894] syzkaller0: entered promiscuous mode [ 171.218814][ T8894] syzkaller0: entered allmulticast mode [ 171.267970][ T8897] netlink: 'syz.5.1665': attribute type 13 has an invalid length. [ 172.108182][ T8928] veth0_to_team: entered promiscuous mode [ 172.350756][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1684'. [ 172.440948][ T8948] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1687'. [ 172.841212][ T8957] macvtap0: refused to change device tx_queue_len [ 172.871113][ T8961] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 173.018731][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 173.126575][ T8977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1698'. [ 173.335115][ T8993] ipvlan2: entered promiscuous mode [ 173.400189][ T8993] bridge0: port 2(ipvlan2) entered blocking state [ 173.406655][ T8993] bridge0: port 2(ipvlan2) entered disabled state [ 173.450303][ T8993] ipvlan2: entered allmulticast mode [ 173.455624][ T8993] bridge0: entered allmulticast mode [ 173.461379][ T8993] ipvlan2: left allmulticast mode [ 173.466450][ T8993] bridge0: left allmulticast mode [ 173.576615][ T8997] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 173.688545][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 173.741870][ T9006] lo speed is unknown, defaulting to 1000 [ 173.784911][ T9018] netlink: 'syz.5.1716': attribute type 6 has an invalid length. [ 173.814674][ T9018] netlink: 'syz.5.1716': attribute type 6 has an invalid length. [ 174.357500][ T9053] netlink: 'syz.3.1730': attribute type 30 has an invalid length. [ 174.556177][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 174.833749][ T9082] geneve3: entered promiscuous mode [ 174.839461][ T5669] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.857499][ T5669] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.870218][ T5669] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.878593][ T5669] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.998882][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 175.088145][ T9093] bond3: entered promiscuous mode [ 175.089824][ T9091] ALSA: seq fatal error: cannot create timer (-19) [ 175.093328][ T9093] bond3: entered allmulticast mode [ 175.093812][ T9093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.117811][ T9093] bond3 (unregistering): Released all slaves [ 175.133337][ T9097] veth0_vlan: entered allmulticast mode [ 175.139751][ T9097] veth0_vlan: left promiscuous mode [ 175.145651][ T9097] veth0_vlan: entered promiscuous mode [ 175.527136][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 175.607911][ T9133] bridge0: entered allmulticast mode [ 175.626233][ T9133] dummy0: left allmulticast mode [ 175.631385][ T9133] bridge0: port 1(dummy0) entered disabled state [ 175.681214][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 175.682754][ T29] kauditd_printk_skb: 1535 callbacks suppressed [ 175.682772][ T29] audit: type=1400 audit(1758843335.705:24958): avc: denied { create } for pid=9134 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 175.723921][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 175.733400][ T9135] netlink: 'syz.2.1764': attribute type 13 has an invalid length. [ 175.768694][ T29] audit: type=1400 audit(1758843335.785:24959): avc: denied { prog_load } for pid=9141 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 175.787916][ T29] audit: type=1400 audit(1758843335.785:24960): avc: denied { map_create } for pid=9141 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 175.807143][ T29] audit: type=1400 audit(1758843335.785:24961): avc: denied { prog_load } for pid=9141 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 175.826275][ T29] audit: type=1400 audit(1758843335.785:24962): avc: denied { open } for pid=9141 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 175.845699][ T29] audit: type=1400 audit(1758843335.785:24963): avc: denied { prog_load } for pid=9141 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 175.865750][ T29] audit: type=1326 audit(1758843335.885:24964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 175.871344][ T9135] 8021q: adding VLAN 0 to HW filter on device .` [ 175.894518][ T29] audit: type=1326 audit(1758843335.915:24965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 175.919176][ T29] audit: type=1326 audit(1758843335.915:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 175.942770][ T29] audit: type=1326 audit(1758843335.915:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.1.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 175.967289][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.976716][ T9135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.992613][ T9131] lo speed is unknown, defaulting to 1000 [ 176.029687][ T9144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9144 comm=syz.2.1767 [ 176.146844][ T9154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.156410][ T9154] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 176.164284][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 176.173667][ T9154] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.203786][ T9160] vlan0: entered allmulticast mode [ 176.208959][ T9160] veth0_to_bond: entered allmulticast mode [ 176.514907][ T9200] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 176.522956][ T9200] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 176.531357][ T9200] team0: Device hsr_slave_0 failed to register rx_handler [ 176.578228][ T9208] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 176.584837][ T9208] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.592589][ T9208] vhci_hcd vhci_hcd.0: Device attached [ 176.599616][ T9210] vhci_hcd: connection closed [ 176.600131][ T86] vhci_hcd: stop threads [ 176.609280][ T86] vhci_hcd: release socket [ 176.613885][ T86] vhci_hcd: disconnect device [ 177.410184][ T9258] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 177.416720][ T9258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.424235][ T9258] vhci_hcd vhci_hcd.0: Device attached [ 177.433018][ T9260] vhci_hcd: connection closed [ 177.433267][ T5657] vhci_hcd: stop threads [ 177.442238][ T5657] vhci_hcd: release socket [ 177.446648][ T5657] vhci_hcd: disconnect device [ 177.552224][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 178.461756][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 178.466493][ T9333] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 178.484472][ T9333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.498186][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'. [ 178.514586][ T9333] bond3 (unregistering): Released all slaves [ 178.941174][ T9361] ALSA: seq fatal error: cannot create timer (-19) [ 179.019494][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 179.061262][ T9379] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 179.067874][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.075386][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 179.083399][ T9379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.092215][ T9379] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 179.098855][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.106482][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 179.111434][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 179.115946][ T9379] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 179.127418][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.135045][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 179.141463][ T9379] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 179.148143][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.155810][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 179.161688][ T9379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.177979][ T9384] vhci_hcd: connection closed [ 179.178065][ T9391] vhci_hcd: connection closed [ 179.178108][ T41] vhci_hcd: stop threads [ 179.182948][ T9389] vhci_hcd: connection closed [ 179.187467][ T41] vhci_hcd: release socket [ 179.187477][ T41] vhci_hcd: disconnect device [ 179.191166][ T9381] vhci_hcd: connection closed [ 179.192831][ T41] vhci_hcd: stop threads [ 179.214516][ T41] vhci_hcd: release socket [ 179.218911][ T41] vhci_hcd: disconnect device [ 179.223834][ T41] vhci_hcd: stop threads [ 179.228080][ T41] vhci_hcd: release socket [ 179.232620][ T41] vhci_hcd: disconnect device [ 179.237626][ T41] vhci_hcd: stop threads [ 179.241897][ T41] vhci_hcd: release socket [ 179.246311][ T41] vhci_hcd: disconnect device [ 179.269935][ T5972] vhci_hcd: vhci_device speed not set [ 179.305155][ T9401] ALSA: seq fatal error: cannot create timer (-19) [ 179.408299][ T9408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.420182][ T9408] netlink: 'syz.5.1877': attribute type 10 has an invalid length. [ 179.432518][ T9408] dummy0: entered promiscuous mode [ 179.438671][ T9408] bridge0: port 1(dummy0) entered blocking state [ 179.445193][ T9408] bridge0: port 1(dummy0) entered disabled state [ 179.451643][ T9408] dummy0: entered allmulticast mode [ 180.029499][ T9429] __nla_validate_parse: 2 callbacks suppressed [ 180.029521][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 180.074884][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 180.087814][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 180.197430][ T9438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.206712][ T9438] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 180.214583][ T9438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1888'. [ 180.246263][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 180.261387][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 180.343028][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1897'. [ 180.446121][ T9470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.455102][ T9470] netlink: 'syz.5.1903': attribute type 10 has an invalid length. [ 180.462954][ T9470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1903'. [ 180.497075][ T9475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.507692][ T9475] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 180.515614][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1914'. [ 180.577310][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1910'. [ 180.668869][ T9496] ip6tnl1: entered promiscuous mode [ 180.674199][ T9496] ip6tnl1: entered allmulticast mode [ 180.679737][ T9496] $Hÿ: (slave ip6tnl1): refused to change device type [ 180.688100][ T9492] lo speed is unknown, defaulting to 1000 [ 180.694238][ T29] kauditd_printk_skb: 3087 callbacks suppressed [ 180.694248][ T29] audit: type=1326 audit(1758843853.719:28055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddaf255d67 code=0x7ffc0000 [ 180.724278][ T29] audit: type=1326 audit(1758843853.719:28056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddaf1faf79 code=0x7ffc0000 [ 180.747682][ T29] audit: type=1326 audit(1758843853.719:28057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 180.771774][ T29] audit: type=1326 audit(1758843853.789:28058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddaf255d67 code=0x7ffc0000 [ 180.795194][ T29] audit: type=1326 audit(1758843853.789:28059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddaf1faf79 code=0x7ffc0000 [ 180.818643][ T29] audit: type=1326 audit(1758843853.789:28060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 180.842257][ T29] audit: type=1326 audit(1758843853.789:28061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed487e5d67 code=0x7ffc0000 [ 180.865783][ T29] audit: type=1326 audit(1758843853.789:28062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed4878af79 code=0x7ffc0000 [ 180.889197][ T29] audit: type=1326 audit(1758843853.789:28063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 180.912835][ T29] audit: type=1326 audit(1758843853.799:28064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed487e5d67 code=0x7ffc0000 [ 180.956246][ T9503] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 180.964035][ T9503] netlink: 'syz.3.1917': attribute type 2 has an invalid length. [ 181.023722][ T9507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.035607][ T9507] netlink: 'syz.1.1919': attribute type 10 has an invalid length. [ 181.142808][ T9499] lo speed is unknown, defaulting to 1000 [ 181.230729][ T9537] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.240000][ T9538] ÿÿÿÿÿÿ: renamed from vlan1 [ 181.247484][ T9537] netlink: 'syz.3.1932': attribute type 10 has an invalid length. [ 181.274282][ T9543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9543 comm=syz.0.1934 [ 182.236372][ T9590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.251690][ T9590] netlink: 'syz.1.1953': attribute type 10 has an invalid length. [ 182.468536][ T9610] netlink: 'syz.1.1959': attribute type 39 has an invalid length. [ 182.817343][ T9622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.827999][ T9622] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 182.831226][ T9627] syzkaller0: entered promiscuous mode [ 182.841455][ T9627] syzkaller0: entered allmulticast mode [ 183.670715][ T9671] netlink: 'syz.0.1985': attribute type 13 has an invalid length. [ 183.729406][ T9671] syz_tun: left allmulticast mode [ 183.734488][ T9671] syz_tun: left promiscuous mode [ 183.757114][ T9663] lo speed is unknown, defaulting to 1000 [ 183.848603][ T9684] netlink: 'syz.5.1991': attribute type 6 has an invalid length. [ 183.893094][ T9690] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.024567][ T9698] netlink: 'syz.2.1996': attribute type 13 has an invalid length. [ 184.034909][ T9698] gretap0: refused to change device tx_queue_len [ 184.041512][ T9698] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.024596][ T9723] lo speed is unknown, defaulting to 1000 [ 185.197961][ T9731] lo speed is unknown, defaulting to 1000 [ 185.541865][ T9763] lo speed is unknown, defaulting to 1000 [ 185.626477][ T9777] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.690227][ T9777] __nla_validate_parse: 19 callbacks suppressed [ 185.690243][ T9777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2028'. [ 185.705837][ T29] kauditd_printk_skb: 2451 callbacks suppressed [ 185.705852][ T29] audit: type=1400 audit(1758843858.729:30516): avc: denied { prog_load } for pid=9784 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.720449][ T9785] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 185.749875][ T29] audit: type=1400 audit(1758843858.739:30517): avc: denied { read write } for pid=9784 comm="syz.5.2031" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 185.773872][ T29] audit: type=1400 audit(1758843858.769:30518): avc: denied { prog_load } for pid=9786 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.793151][ T29] audit: type=1400 audit(1758843858.769:30519): avc: denied { map_create } for pid=9776 comm="syz.3.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.812402][ T29] audit: type=1400 audit(1758843858.769:30520): avc: denied { prog_load } for pid=9776 comm="syz.3.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.831834][ T29] audit: type=1400 audit(1758843858.769:30521): avc: denied { prog_load } for pid=9786 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.851430][ T29] audit: type=1400 audit(1758843858.799:30522): avc: denied { prog_load } for pid=9786 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.851505][ T29] audit: type=1400 audit(1758843858.799:30523): avc: denied { map_create } for pid=9786 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.851539][ T29] audit: type=1400 audit(1758843858.799:30524): avc: denied { prog_load } for pid=9786 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 185.851618][ T29] audit: type=1400 audit(1758843858.799:30525): avc: denied { read write } for pid=9786 comm="syz.2.2032" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 185.950470][ T9794] veth0_to_team: entered promiscuous mode [ 186.036269][ T9803] validate_nla: 1 callbacks suppressed [ 186.036283][ T9803] netlink: 'syz.2.2038': attribute type 13 has an invalid length. [ 186.308073][ T9815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.338423][ T9815] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 186.346322][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 186.727503][ T9806] lo speed is unknown, defaulting to 1000 [ 186.753266][ T9827] lo speed is unknown, defaulting to 1000 [ 187.112725][ T9848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.132137][ T9848] netlink: 'syz.1.2054': attribute type 10 has an invalid length. [ 187.140057][ T9848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2054'. [ 187.218588][ T9833] lo speed is unknown, defaulting to 1000 [ 187.290444][ T9838] lo speed is unknown, defaulting to 1000 [ 187.474323][ T9862] netlink: 'syz.1.2059': attribute type 6 has an invalid length. [ 187.502924][ T9862] netlink: 'syz.1.2059': attribute type 6 has an invalid length. [ 187.603414][ T9867] macvtap0: refused to change device tx_queue_len [ 187.861018][ T9878] dummy0: left allmulticast mode [ 187.870016][ T9878] bridge0: port 1(dummy0) entered disabled state [ 187.894059][ T9878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9878 comm=syz.5.2065 [ 188.560811][ T9900] macvtap0: refused to change device tx_queue_len [ 188.668944][ T9908] netlink: 'syz.5.2077': attribute type 10 has an invalid length. [ 188.676914][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2077'. [ 188.746543][ T9908] bridge0: port 1(dummy0) entered blocking state [ 188.752965][ T9908] bridge0: port 1(dummy0) entered disabled state [ 188.764843][ T9908] dummy0: entered allmulticast mode [ 189.790258][ T9939] netlink: 'syz.5.2090': attribute type 10 has an invalid length. [ 189.798102][ T9939] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2090'. [ 189.943674][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2092'. [ 189.975708][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 190.078330][ T9949] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2093'. [ 190.386853][ T9928] lo speed is unknown, defaulting to 1000 [ 190.496172][ T9940] lo speed is unknown, defaulting to 1000 [ 190.575126][ T9952] lo speed is unknown, defaulting to 1000 [ 190.711500][ T29] kauditd_printk_skb: 1197 callbacks suppressed [ 190.711515][ T29] audit: type=1400 audit(1758843863.729:31723): avc: denied { prog_load } for pid=9973 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.789879][ T29] audit: type=1400 audit(1758843863.739:31724): avc: denied { prog_load } for pid=9973 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.809203][ T29] audit: type=1400 audit(1758843863.739:31725): avc: denied { create } for pid=9973 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 190.828890][ T29] audit: type=1400 audit(1758843863.739:31726): avc: denied { create } for pid=9973 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.849412][ T29] audit: type=1400 audit(1758843863.739:31727): avc: denied { create } for pid=9973 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.869967][ T29] audit: type=1400 audit(1758843863.739:31728): avc: denied { read write } for pid=9973 comm="syz.1.2102" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 190.894299][ T29] audit: type=1400 audit(1758843863.739:31729): avc: denied { module_request } for pid=9973 comm="syz.1.2102" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 190.916639][ T29] audit: type=1400 audit(1758843863.739:31730): avc: denied { sys_module } for pid=9973 comm="syz.1.2102" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 190.937785][ T29] audit: type=1400 audit(1758843863.779:31731): avc: denied { prog_load } for pid=9976 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.956994][ T29] audit: type=1400 audit(1758843863.779:31732): avc: denied { prog_load } for pid=9976 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.100092][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'. [ 191.109073][ T9984] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2107'. [ 191.218473][ T9993] syzkaller0: entered promiscuous mode [ 191.223983][ T9993] syzkaller0: entered allmulticast mode [ 191.257029][T10001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10001 comm=syz.1.2111 [ 191.343290][ T9968] lo speed is unknown, defaulting to 1000 [ 191.450821][ T9981] lo speed is unknown, defaulting to 1000 [ 191.519405][T10010] netlink: 'syz.0.2116': attribute type 13 has an invalid length. [ 191.538764][ T9992] lo speed is unknown, defaulting to 1000 [ 192.068278][T10026] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2120'. [ 192.173319][T10016] lo speed is unknown, defaulting to 1000 [ 192.354739][T10022] lo speed is unknown, defaulting to 1000 [ 192.402236][T10036] lo speed is unknown, defaulting to 1000 [ 192.869172][T10058] veth0_vlan: left promiscuous mode [ 192.878046][T10058] veth0_vlan: entered promiscuous mode [ 192.902562][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 193.212205][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 193.386519][T10082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.615487][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 193.736738][T10105] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2149'. [ 194.141695][T10118] lo speed is unknown, defaulting to 1000 [ 194.439646][T10144] serio: Serial port ptm0 [ 194.467593][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 194.485718][T10146] netlink: 'syz.0.2167': attribute type 11 has an invalid length. [ 194.493606][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2167'. [ 194.582588][T10155] netlink: 'syz.3.2171': attribute type 10 has an invalid length. [ 194.641242][T10155] dummy0: left allmulticast mode [ 194.646564][T10155] dummy0: left promiscuous mode [ 194.651623][T10155] bridge0: port 1(dummy0) entered disabled state [ 194.673147][T10155] dummy0: entered promiscuous mode [ 194.679784][T10155] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 194.950395][T10172] netlink: 'syz.1.2177': attribute type 13 has an invalid length. [ 194.965723][T10176] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 194.977772][T10176] $Hÿ: (slave dummy0): Releasing backup interface [ 194.986627][T10176] dummy0: left promiscuous mode [ 194.993111][T10176] dummy0: entered promiscuous mode [ 194.998668][T10176] team0: Port device dummy0 added [ 195.007730][T10178] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 195.015650][T10178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'. [ 195.029224][T10178] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 195.531580][ T5973] IPVS: starting estimator thread 0... [ 195.620200][T10209] IPVS: using max 2880 ests per chain, 144000 per kthread [ 195.721373][ T29] kauditd_printk_skb: 2738 callbacks suppressed [ 195.721391][ T29] audit: type=1326 audit(1758843868.749:34285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddaf255d67 code=0x7ffc0000 [ 195.751301][ T29] audit: type=1326 audit(1758843868.749:34286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddaf1faf79 code=0x7ffc0000 [ 195.774871][ T29] audit: type=1326 audit(1758843868.749:34287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 195.798479][ T29] audit: type=1326 audit(1758843868.749:34288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd948b5d67 code=0x7ffc0000 [ 195.821982][ T29] audit: type=1326 audit(1758843868.749:34289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd9485af79 code=0x7ffc0000 [ 195.845441][ T29] audit: type=1326 audit(1758843868.749:34290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efd948beec9 code=0x7ffc0000 [ 195.869090][ T29] audit: type=1326 audit(1758843868.749:34291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddaf255d67 code=0x7ffc0000 [ 195.892606][ T29] audit: type=1326 audit(1758843868.749:34292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddaf1faf79 code=0x7ffc0000 [ 195.916223][ T29] audit: type=1326 audit(1758843868.749:34293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 195.939799][ T29] audit: type=1326 audit(1758843868.749:34294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.0.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd948b5d67 code=0x7ffc0000 [ 195.971333][T10219] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 195.979363][T10219] dummy0: left promiscuous mode [ 195.985673][T10219] dummy0: entered promiscuous mode [ 195.991369][T10219] .`: (slave dummy0): Enslaving as an active interface with an up link [ 196.001988][T10219] $Hÿ: renamed from .` [ 196.491612][T10256] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 196.499459][T10256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2212'. [ 196.509425][T10256] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 196.600869][T10273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10273 comm=syz.3.2216 [ 196.602049][T10274] netlink: 'syz.0.2220': attribute type 6 has an invalid length. [ 196.649517][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'. [ 196.848809][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 196.905580][T10304] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 196.974806][T10302] lo speed is unknown, defaulting to 1000 [ 197.159197][T10316] netlink: 'syz.0.2239': attribute type 10 has an invalid length. [ 197.190457][T10318] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 197.240586][T10312] binfmt_misc: register: failed to install interpreter file ./file2 [ 197.519275][T10345] macvtap0: refused to change device tx_queue_len [ 198.031993][T10374] lo speed is unknown, defaulting to 1000 [ 198.388342][T10398] hsr_slave_0: left promiscuous mode [ 198.565100][T10415] netlink: 'syz.0.2276': attribute type 4 has an invalid length. [ 198.572892][T10415] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2276'. [ 198.630741][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 200.322730][T10506] netlink: 'syz.1.2313': attribute type 30 has an invalid length. [ 200.347225][T10506] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 200.356396][T10506] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 200.367355][T10495] lo speed is unknown, defaulting to 1000 [ 200.368986][T10506] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2313'. [ 200.382696][T10506] hsr_slave_0: left promiscuous mode [ 200.390849][T10506] hsr_slave_1: left promiscuous mode [ 200.670038][T10538] lo speed is unknown, defaulting to 1000 [ 200.733920][ T29] kauditd_printk_skb: 2614 callbacks suppressed [ 200.733933][ T29] audit: type=1400 audit(1758843873.759:36909): avc: denied { read write } for pid=10559 comm="syz.5.2323" name="loop5" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 200.770781][ T29] audit: type=1400 audit(1758843873.759:36910): avc: denied { map_create } for pid=10561 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.790119][ T29] audit: type=1400 audit(1758843873.759:36911): avc: denied { prog_load } for pid=10561 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.809467][ T29] audit: type=1400 audit(1758843873.759:36912): avc: denied { map_create } for pid=10561 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.828866][ T29] audit: type=1400 audit(1758843873.759:36913): avc: denied { prog_load } for pid=10561 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.828890][ T29] audit: type=1326 audit(1758843873.759:36914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 200.828914][ T29] audit: type=1326 audit(1758843873.759:36915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 200.828979][ T29] audit: type=1326 audit(1758843873.759:36916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 200.829013][ T29] audit: type=1326 audit(1758843873.769:36917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 200.829040][ T29] audit: type=1326 audit(1758843873.769:36918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 201.122814][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'. [ 201.483857][T10623] netlink: 'syz.1.2338': attribute type 4 has an invalid length. [ 201.491746][T10623] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2338'. [ 201.577967][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2344'. [ 201.686715][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=10648 comm=syz.3.2346 [ 201.853173][T10671] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 202.017612][T10691] netlink: 'syz.2.2359': attribute type 13 has an invalid length. [ 202.031989][T10691] gretap0: refused to change device tx_queue_len [ 202.038825][T10691] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 202.074056][T10702] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.108368][T10706] netlink: 'syz.5.2365': attribute type 4 has an invalid length. [ 202.116269][T10706] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2365'. [ 202.126332][T10706] .`: renamed from bond0 [ 202.442915][T10736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2375'. [ 202.509437][T10743] netlink: 'syz.1.2378': attribute type 10 has an invalid length. [ 202.979777][T10774] netlink: 'syz.2.2388': attribute type 30 has an invalid length. [ 203.010080][T10774] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 203.019212][T10774] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 203.050405][T10781] dummy0: left promiscuous mode [ 203.057918][T10781] team0: Port device dummy0 removed [ 203.064430][T10774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2388'. [ 203.102411][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2390'. [ 203.111922][T10790] netlink: 'syz.3.2390': attribute type 10 has an invalid length. [ 203.119744][T10790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2390'. [ 203.238342][T10800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.252819][T10800] netlink: 'syz.1.2400': attribute type 10 has an invalid length. [ 203.260724][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2400'. [ 203.374139][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2405'. [ 203.383683][T10843] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 203.919568][T10862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.928711][T10862] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 203.936613][T10862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2412'. [ 203.946407][T10862] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 204.036830][T10897] lo speed is unknown, defaulting to 1000 [ 204.224165][T10942] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2424'. [ 204.416883][T10972] netlink: 'syz.0.2435': attribute type 10 has an invalid length. [ 204.417485][T10972] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 204.851121][T10993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10993 comm=syz.1.2441 [ 205.188275][T11024] dummy0: left allmulticast mode [ 205.188579][T11024] bridge0: port 1(dummy0) entered disabled state [ 205.241405][T11024] netlink: 'syz.1.2450': attribute type 10 has an invalid length. [ 205.241834][T11024] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 205.496998][T11068] geneve1: entered promiscuous mode [ 205.505712][T11068] team0: Port device geneve1 added [ 205.557699][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.567399][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.577132][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.587076][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.742509][ T29] kauditd_printk_skb: 2576 callbacks suppressed [ 205.742526][ T29] audit: type=1400 audit(205.724:39495): avc: denied { name_bind } for pid=11051 comm="syz.0.2458" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 205.777987][ T29] audit: type=1400 audit(205.724:39496): avc: denied { create } for pid=11051 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 205.797223][ T29] audit: type=1400 audit(205.754:39497): avc: denied { read write } for pid=11089 comm="syz.5.2474" name="loop5" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 205.820763][ T29] audit: type=1400 audit(205.754:39498): avc: denied { map_create } for pid=11089 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.839608][ T29] audit: type=1400 audit(205.754:39499): avc: denied { prog_load } for pid=11089 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.858223][ T29] audit: type=1400 audit(205.754:39500): avc: denied { prog_load } for pid=11089 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.876901][ T29] audit: type=1400 audit(205.754:39501): avc: denied { map_create } for pid=11089 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.927632][ T29] audit: type=1400 audit(205.884:39502): avc: denied { read write } for pid=5712 comm="syz-executor" name="loop5" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 205.950444][ T29] audit: type=1400 audit(205.894:39503): avc: denied { map_create } for pid=11128 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.969143][ T29] audit: type=1400 audit(205.894:39504): avc: denied { map_create } for pid=11128 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 206.316855][T11168] ipip0: entered promiscuous mode [ 206.442915][T11178] lo speed is unknown, defaulting to 1000 [ 206.614366][T11231] __nla_validate_parse: 9 callbacks suppressed [ 206.614381][T11231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2509'. [ 206.683424][T11223] lo speed is unknown, defaulting to 1000 [ 206.706938][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2510'. [ 206.806388][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2512'. [ 206.815620][T11257] dummy0: left allmulticast mode [ 206.820799][T11257] bridge0: port 1(dummy0) entered disabled state [ 206.942367][T11270] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2516'. [ 206.953688][T11270] hsr_slave_0: left promiscuous mode [ 206.967261][T11270] hsr_slave_1: left promiscuous mode [ 207.284658][T11287] lo speed is unknown, defaulting to 1000 [ 207.633487][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2532'. [ 207.642644][T11339] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 207.780801][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2534'. [ 207.812975][T11344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11344 comm=syz.5.2534 [ 207.816355][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2537'. [ 207.954241][T11367] lo speed is unknown, defaulting to 1000 [ 208.912912][T11426] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 208.912912][T11426] The task syz.5.2550 (11426) triggered the difference, watch for misbehavior. [ 209.613356][T11480] validate_nla: 7 callbacks suppressed [ 209.613370][T11480] netlink: 'syz.5.2564': attribute type 6 has an invalid length. [ 210.046185][T11506] lo speed is unknown, defaulting to 1000 [ 210.135960][T11539] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 210.143985][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2580'. [ 210.163468][T11539] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 210.179605][T11507] lo speed is unknown, defaulting to 1000 [ 210.738004][ T29] kauditd_printk_skb: 1964 callbacks suppressed [ 210.738020][ T29] audit: type=1326 audit(978.737:41469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 210.842111][ T29] audit: type=1326 audit(978.769:41470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 210.865123][ T29] audit: type=1326 audit(978.769:41471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 210.888175][ T29] audit: type=1326 audit(978.769:41472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 210.911079][ T29] audit: type=1326 audit(978.769:41473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 210.934078][ T29] audit: type=1326 audit(978.779:41474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 210.957010][ T29] audit: type=1326 audit(978.779:41475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabf6eeaf79 code=0x7ffc0000 [ 210.979963][ T29] audit: type=1326 audit(978.779:41476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fabf6f4eec9 code=0x7ffc0000 [ 210.988758][T11596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.003118][ T29] audit: type=1326 audit(978.779:41477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 211.986660][T11653] vlan0: entered promiscuous mode [ 211.991879][T11653] hsr_slave_1: entered promiscuous mode [ 211.997647][T11653] vlan0: entered allmulticast mode [ 212.002792][T11653] hsr_slave_1: entered allmulticast mode [ 212.011271][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 212.187008][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.308519][T11727] lo speed is unknown, defaulting to 1000 [ 212.340738][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2635'. [ 212.349750][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2635'. [ 212.358818][T11737] netlink: 'syz.5.2635': attribute type 4 has an invalid length. [ 212.697271][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2647'. [ 212.770677][T11789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11789 comm=syz.3.2648 [ 212.874477][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2653'. [ 213.260979][T11814] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 213.738336][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 213.754273][T11870] lo speed is unknown, defaulting to 1000 [ 214.689845][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 214.817687][T11929] -1: renamed from syzkaller0 [ 214.905279][T11942] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.922609][T11942] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 214.931503][T11942] bond8: (slave macvlan0): Enslaving as a backup interface with a down link [ 214.978328][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 215.473781][ T29] kauditd_printk_skb: 3055 callbacks suppressed [ 215.473796][ T29] audit: type=1326 audit(983.747:44531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed487e5d67 code=0x7ffc0000 [ 215.503318][ T29] audit: type=1326 audit(983.747:44532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed4878af79 code=0x7ffc0000 [ 215.526289][ T29] audit: type=1326 audit(983.747:44533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 215.549309][ T29] audit: type=1326 audit(983.747:44534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddaf255d67 code=0x7ffc0000 [ 215.572166][ T29] audit: type=1326 audit(983.747:44535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddaf1faf79 code=0x7ffc0000 [ 215.595135][ T29] audit: type=1326 audit(983.747:44536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.2.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 215.618221][ T29] audit: type=1326 audit(983.758:44537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed487e5d67 code=0x7ffc0000 [ 215.641371][ T29] audit: type=1326 audit(983.758:44538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed4878af79 code=0x7ffc0000 [ 215.664315][ T29] audit: type=1326 audit(983.758:44539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fed487eeec9 code=0x7ffc0000 [ 215.689215][ T29] audit: type=1326 audit(983.779:44540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed487e5d67 code=0x7ffc0000 [ 216.142655][T12032] vlan0: entered promiscuous mode [ 216.147764][T12032] hsr_slave_1: entered promiscuous mode [ 216.153416][T12032] vlan0: entered allmulticast mode [ 216.158632][T12032] hsr_slave_1: entered allmulticast mode [ 216.175515][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 216.353395][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 216.419043][T12053] netlink: 'syz.3.2721': attribute type 6 has an invalid length. [ 217.203896][T12100] @0Ù: renamed from bond_slave_1 [ 217.471551][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2749'. [ 217.661232][T12144] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2757'. [ 218.007781][T12165] team0: left promiscuous mode [ 218.012590][T12165] geneve1: left promiscuous mode [ 218.035400][T12170] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 218.044162][ T41] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.076169][T12170] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 218.085767][ T5666] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.108261][T12170] veth3: entered promiscuous mode [ 218.115683][T12170] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 218.124274][ T5666] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.152866][T12211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.160672][ T5666] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.173190][T12211] netlink: 'syz.5.2767': attribute type 10 has an invalid length. [ 218.181342][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2767'. [ 218.190621][T12211] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 218.265913][ T5982] Process accounting resumed [ 218.367974][T12279] netlink: 20016 bytes leftover after parsing attributes in process `syz.1.2777'. [ 218.669049][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 219.035085][T12314] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 219.043079][T12314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2791'. [ 219.059076][T12314] $Hÿ: (slave dummy0): Releasing backup interface [ 219.068260][T12314] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 219.268845][T12331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2796'. [ 219.742125][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 219.835767][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2812'. [ 220.031802][T12383] tap0: tun_chr_ioctl cmd 1074025677 [ 220.037386][T12383] tap0: linktype set to 774 [ 220.213818][ T29] kauditd_printk_skb: 3250 callbacks suppressed [ 220.213842][ T29] audit: type=1326 audit(988.757:47791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.243479][ T29] audit: type=1326 audit(988.757:47792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.266491][ T29] audit: type=1326 audit(988.757:47793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1eaac85d67 code=0x7ffc0000 [ 220.289450][ T29] audit: type=1326 audit(988.757:47794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eaac2af79 code=0x7ffc0000 [ 220.312445][ T29] audit: type=1326 audit(988.757:47795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.5.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 220.335533][ T29] audit: type=1326 audit(988.757:47796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.358520][ T29] audit: type=1326 audit(988.757:47797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.381650][ T29] audit: type=1326 audit(988.757:47798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.404653][ T29] audit: type=1326 audit(988.757:47799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.427587][ T29] audit: type=1326 audit(988.757:47800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 220.506331][T12393] netlink: 'syz.1.2817': attribute type 30 has an invalid length. [ 220.637967][T12402] lo speed is unknown, defaulting to 1000 [ 220.883534][T12442] team0: Port device geneve1 removed [ 220.923271][T12442] netlink: 'syz.3.2825': attribute type 10 has an invalid length. [ 220.926867][T12448] netlink: 'syz.0.2828': attribute type 10 has an invalid length. [ 220.931172][T12442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2825'. [ 220.946706][T12442] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 220.964699][T12448] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 221.117069][T12468] -1: renamed from syzkaller0 [ 221.172990][T12475] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 221.181812][T12475] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 222.048581][T12507] netlink: 'syz.2.2850': attribute type 10 has an invalid length. [ 222.060558][T12507] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 222.164287][T12509] -1: renamed from syzkaller0 [ 222.229876][T12515] veth0_to_team: left promiscuous mode [ 222.274916][T12519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 222.281459][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.289044][T12519] vhci_hcd vhci_hcd.0: Device attached [ 222.295244][T12519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.306925][T12519] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 222.308398][T12525] __nla_validate_parse: 5 callbacks suppressed [ 222.308457][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 222.313521][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.313667][T12519] vhci_hcd vhci_hcd.0: Device attached [ 222.360863][T12519] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 222.367491][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.375096][T12519] vhci_hcd vhci_hcd.0: Device attached [ 222.381907][T12519] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 222.388506][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.396202][T12519] vhci_hcd vhci_hcd.0: Device attached [ 222.420278][T12519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.447992][T12520] vhci_hcd: connection closed [ 222.450125][ T5666] vhci_hcd: stop threads [ 222.450269][T12522] vhci_hcd: connection closed [ 222.454933][ T5666] vhci_hcd: release socket [ 222.464492][T12527] vhci_hcd: connection closed [ 222.468224][ T5666] vhci_hcd: disconnect device [ 222.468314][T12530] vhci_hcd: connection closed [ 222.478050][ T5972] vhci_hcd: vhci_device speed not set [ 222.488919][ T5666] vhci_hcd: stop threads [ 222.493289][ T5666] vhci_hcd: release socket [ 222.497822][ T5666] vhci_hcd: disconnect device [ 222.510819][ T5666] vhci_hcd: stop threads [ 222.515147][ T5666] vhci_hcd: release socket [ 222.519607][ T5666] vhci_hcd: disconnect device [ 222.528531][ T5666] vhci_hcd: stop threads [ 222.532924][ T5666] vhci_hcd: release socket [ 222.537352][ T5666] vhci_hcd: disconnect device [ 222.672059][T12540] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 222.691584][T12540] dummy0: left promiscuous mode [ 222.710778][T12540] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 222.719829][T12540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.772524][T12542] netlink: 'syz.0.2861': attribute type 10 has an invalid length. [ 222.780502][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'. [ 222.796226][T12542] dummy0: entered promiscuous mode [ 222.802298][T12542] bond0: (slave dummy0): Releasing backup interface [ 222.809663][T12542] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 223.032898][T12548] -1: renamed from syzkaller0 [ 223.150075][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 223.195699][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 223.393542][T12571] C: renamed from team_slave_0 [ 223.423705][T12571] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2868'. [ 223.968962][T12582] netlink: 'syz.0.2872': attribute type 10 has an invalid length. [ 223.976859][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2872'. [ 223.988206][T12584] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.000075][T12582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 224.479379][T12595] lo speed is unknown, defaulting to 1000 [ 224.930180][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2888'. [ 224.955954][ T29] kauditd_printk_skb: 2635 callbacks suppressed [ 224.955965][ T29] audit: type=1326 audit(993.764:50436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabf6f45d67 code=0x7ffc0000 [ 225.029648][ T29] audit: type=1400 audit(993.827:50437): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.053494][ T29] audit: type=1400 audit(993.827:50438): avc: denied { write } for pid=12651 comm="syz.3.2889" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 225.077939][ T29] audit: type=1400 audit(993.838:50439): avc: denied { create } for pid=12651 comm="syz.3.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 225.097255][ T29] audit: type=1400 audit(993.838:50440): avc: denied { read write } for pid=12651 comm="syz.3.2889" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 225.120509][ T29] audit: type=1400 audit(993.838:50441): avc: denied { create } for pid=12651 comm="syz.3.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 225.139810][ T29] audit: type=1400 audit(993.838:50442): avc: denied { map_create } for pid=12651 comm="syz.3.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 225.158596][ T29] audit: type=1400 audit(993.838:50443): avc: denied { allowed } for pid=12651 comm="syz.3.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 225.343145][ T29] audit: type=1400 audit(993.912:50444): avc: denied { read write } for pid=5712 comm="syz-executor" name="loop5" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 225.366232][ T29] audit: type=1400 audit(994.017:50445): avc: denied { map_create } for pid=12653 comm="syz.5.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.194493][T12692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2901'. [ 226.446265][T12712] IPv6: sit1: Disabled Multicast RS [ 226.888771][T12776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.205564][T12787] lo speed is unknown, defaulting to 1000 [ 227.425594][T12835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.442709][T12835] netlink: 'syz.5.2938': attribute type 10 has an invalid length. [ 227.450595][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2938'. [ 227.496537][T12835] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.623029][T12872] lo speed is unknown, defaulting to 1000 [ 227.746388][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 227.773556][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 227.982915][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2946'. [ 228.299090][T12940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.322260][T12940] netlink: 'syz.5.2952': attribute type 10 has an invalid length. [ 228.330208][T12940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2952'. [ 228.355165][T12940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 228.781045][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 229.031378][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2955'. [ 229.065457][T13007] C: renamed from team_slave_0 [ 229.076211][T13007] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2960'. [ 229.350502][T13026] netlink: 'syz.3.2969': attribute type 10 has an invalid length. [ 229.358348][T13026] $Hÿ: left promiscuous mode [ 229.398516][T13028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2969'. [ 229.403499][T13026] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 229.446494][T13026] team0: Device $Hÿ failed to register rx_handler [ 229.743631][ T29] kauditd_printk_skb: 1357 callbacks suppressed [ 229.743646][ T29] audit: type=1400 audit(998.810:51803): avc: denied { prog_load } for pid=13043 comm="syz.5.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.788969][T13046] -1: renamed from syzkaller0 [ 229.802582][ T29] audit: type=1400 audit(998.842:51804): avc: denied { prog_load } for pid=13043 comm="syz.5.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 229.932094][ T29] audit: type=1326 audit(999.011:51805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13043 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 229.955209][ T29] audit: type=1400 audit(999.011:51806): avc: denied { create } for pid=13043 comm="syz.5.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 229.974365][ T29] audit: type=1326 audit(999.011:51807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13043 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 229.997431][ T29] audit: type=1326 audit(999.011:51808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13043 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaac8eec9 code=0x7ffc0000 [ 230.078526][ T29] audit: type=1400 audit(999.138:51809): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 230.160294][ T29] audit: type=1400 audit(999.243:51810): avc: denied { prog_load } for pid=13050 comm="syz.0.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.179058][ T29] audit: type=1400 audit(999.243:51811): avc: denied { prog_load } for pid=13050 comm="syz.0.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.197832][ T29] audit: type=1400 audit(999.243:51812): avc: denied { allowed } for pid=13050 comm="syz.0.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 230.382974][T13077] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2985'. [ 230.401716][T13077] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 230.414912][T13077] 0ªî{X¹¦: entered allmulticast mode [ 230.428400][T13077] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 230.592133][T13081] lo speed is unknown, defaulting to 1000 [ 231.598902][T13128] -1: renamed from syzkaller0 [ 231.732180][ T5982] IPVS: starting estimator thread 0... [ 231.737900][T13136] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 231.822072][T13138] IPVS: using max 2736 ests per chain, 136800 per kthread [ 232.012399][T13146] syz_tun: refused to change device tx_queue_len [ 232.059031][T13148] netlink: 'syz.3.3000': attribute type 30 has an invalid length. [ 232.141991][T13156] -1: renamed from syzkaller0 [ 232.181088][T13168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.194840][T13168] netlink: 'syz.3.3004': attribute type 10 has an invalid length. [ 232.202742][T13168] __nla_validate_parse: 1 callbacks suppressed [ 232.202758][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3004'. [ 232.222463][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 232.232897][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 232.251447][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'. [ 232.282591][T13155] lo speed is unknown, defaulting to 1000 [ 232.289547][T13168] dummy0: entered promiscuous mode [ 232.306250][T13168] bridge0: port 1(dummy0) entered blocking state [ 232.312658][T13168] bridge0: port 1(dummy0) entered disabled state [ 232.321086][T13206] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 232.329616][T13168] dummy0: entered allmulticast mode [ 232.520973][T13210] lo speed is unknown, defaulting to 1000 [ 232.720746][T13310] tap0: tun_chr_ioctl cmd 1074025677 [ 232.726328][T13310] tap0: linktype set to 774 [ 232.808871][T13246] lo speed is unknown, defaulting to 1000 [ 233.153886][T13345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.188683][T13345] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 233.196678][T13345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3021'. [ 233.208022][T13345] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.354706][T13397] bond3: (slave ip6gretap1): Releasing backup interface [ 233.361722][T13397] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 7e:90:4e:af:dc:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 233.399253][T13398] netlink: 'syz.2.3026': attribute type 10 has an invalid length. [ 233.407204][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3026'. [ 233.437964][T13397] bond3: (slave veth3): Releasing backup interface [ 233.474879][T13398] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 233.571976][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 233.737214][T13428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.747242][T13428] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 233.755189][T13428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'. [ 233.764854][T13428] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.896692][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'. [ 234.089623][T13488] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 234.491140][ T29] kauditd_printk_skb: 1384 callbacks suppressed [ 234.491153][ T29] audit: type=1400 audit(1003.823:53197): avc: denied { prog_load } for pid=13515 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.539905][ T29] audit: type=1400 audit(1003.855:53198): avc: denied { open } for pid=13515 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 234.558957][ T29] audit: type=1400 audit(1003.855:53199): avc: denied { map_create } for pid=13515 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.577936][ T29] audit: type=1400 audit(1003.855:53200): avc: denied { create } for pid=13515 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 234.598338][ T29] audit: type=1400 audit(1003.855:53201): avc: denied { prog_load } for pid=13515 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 234.696124][ T29] audit: type=1326 audit(1004.045:53202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 234.719416][ T29] audit: type=1326 audit(1004.045:53203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 234.743153][ T29] audit: type=1326 audit(1004.045:53204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 234.766305][ T29] audit: type=1326 audit(1004.045:53205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 234.789476][ T29] audit: type=1326 audit(1004.045:53206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.2.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaf25eec9 code=0x7ffc0000 [ 235.053717][T13532] lo speed is unknown, defaulting to 1000 [ 235.974128][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3069'. [ 236.079828][T13603] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 236.238512][T13616] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 236.555056][T13640] -1: renamed from syzkaller0 [ 237.046391][ T4753] ================================================================== [ 237.054508][ T4753] BUG: KCSAN: data-race in alloc_pid / copy_process [ 237.061114][ T4753] [ 237.063429][ T4753] read-write to 0xffffffff8685fc48 of 4 bytes by task 5666 on cpu 0: [ 237.071489][ T4753] alloc_pid+0x539/0x720 [ 237.075727][ T4753] copy_process+0xe25/0x2000 [ 237.080310][ T4753] kernel_clone+0x16c/0x5c0 [ 237.084812][ T4753] user_mode_thread+0x7d/0xb0 [ 237.089486][ T4753] call_usermodehelper_exec_work+0x41/0x160 [ 237.095380][ T4753] process_scheduled_works+0x4cb/0x9d0 [ 237.100840][ T4753] worker_thread+0x582/0x770 [ 237.105428][ T4753] kthread+0x489/0x510 [ 237.109491][ T4753] ret_from_fork+0x11f/0x1b0 [ 237.114077][ T4753] ret_from_fork_asm+0x1a/0x30 [ 237.118839][ T4753] [ 237.121148][ T4753] read to 0xffffffff8685fc48 of 4 bytes by task 4753 on cpu 1: [ 237.128674][ T4753] copy_process+0x14a6/0x2000 [ 237.133351][ T4753] kernel_clone+0x16c/0x5c0 [ 237.137860][ T4753] user_mode_thread+0x7d/0xb0 [ 237.142540][ T4753] call_usermodehelper_exec_work+0x41/0x160 [ 237.148447][ T4753] process_scheduled_works+0x4cb/0x9d0 [ 237.153906][ T4753] worker_thread+0x582/0x770 [ 237.158499][ T4753] kthread+0x489/0x510 [ 237.162575][ T4753] ret_from_fork+0x11f/0x1b0 [ 237.167167][ T4753] ret_from_fork_asm+0x1a/0x30 [ 237.171933][ T4753] [ 237.174250][ T4753] value changed: 0x80000133 -> 0x80000134 [ 237.179952][ T4753] [ 237.182269][ T4753] Reported by Kernel Concurrency Sanitizer on: [ 237.188446][ T4753] CPU: 1 UID: 0 PID: 4753 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.198349][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.208404][ T4753] Workqueue: events_unbound call_usermodehelper_exec_work [ 237.215535][ T4753] ================================================================== [ 237.277566][T13670] blkio.reset_stats is deprecated