last executing test programs: 3m46.030594981s ago: executing program 1 (id=1211): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 3m45.857233097s ago: executing program 1 (id=1214): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 3m45.653973186s ago: executing program 1 (id=1219): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 3m43.975742911s ago: executing program 1 (id=1245): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 3m43.805856867s ago: executing program 1 (id=1249): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x9}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x414000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 3m43.249909449s ago: executing program 1 (id=1265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x10400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 3m43.186890594s ago: executing program 32 (id=1265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8000, 0x10400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m46.632503029s ago: executing program 0 (id=1992): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x100, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x5537, 0x1c881, 0x8, 0x91}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x8848, 0x37, 0x0, 0x0) 2m46.578179464s ago: executing program 0 (id=1994): socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) 2m45.676463447s ago: executing program 0 (id=2006): r0 = gettid() migrate_pages(r0, 0xfc, &(0x7f0000000200)=0x7fffbffffffffffc, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x32, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x62040200) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2m45.209536401s ago: executing program 0 (id=2010): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 2m45.060355044s ago: executing program 0 (id=2012): r0 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000ea03010008000000000000000000000a14"], 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 2m44.251514069s ago: executing program 0 (id=2017): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20040840) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0xc2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180200000300000100000000000000008500000020000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m44.227515002s ago: executing program 33 (id=2017): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20040840) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0xc2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180200000300000100000000000000008500000020000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.21800218s ago: executing program 2 (id=4256): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4044090) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.178242984s ago: executing program 6 (id=4246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000500)={0x0, 0x2003f71, 0x100, 0x2000001, 0x9a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137"], 0x0}, 0x94) 4.177255354s ago: executing program 2 (id=4247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0xffffffffffffffff) syz_read_part_table(0x5e4, &(0x7f0000000600)="$eJzs3D+oHFUUB+DfzO7OvhcSnpWV4IMUBgWfkFIXo5A80wXRTtDWYkViZSG7SwQLjZWNvRZGIYhtCgUJajorER5aiNhbmMJwZefPrqJWT9TA9xUz95w795xZ5k65E+5uZS8p1Xq02ibHdT/4MckkWT3/RDLtUpN+ar3m2WvnL1zcv1RNN7l1dtnPTrcFm6Fw9vvRjXGuXjt84+13TlVZ5la96NLLZPJRk3F7a926d/9807erthb/uTOflu5BNPk6+fLRE/Nq1D789X56P7knO21wkGSU/rBMdtej5vj9r89urh7vx7vpd9qkixZ5oDzSz01SSil1FqeHlaPkvscOLv9V0Un++Dqs92Ipk5PD2nr7FszvNMM+PPvF94us7t9UbzuW0sVHu8nLR08/3NaquhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPz/nHnlwc+aITjXHqs++uTJpz5Ivb10mfw6jPd3/qH+12c39668frnOq7MXv3nptR8Of8rPSUY5ODyZTDfXvdCdPn6zPY377L27x+0/v1M3H773+bZOX7pKvjr97e0y6tNHmwu295RZfdz2AAAAAAAAAAAAAAAAAAAA0Dp/4eL+pTrPJFWey/bv/iU7STV8CmAdlFLKL6WTnL0xnl9tcuVEN3/ru/6zAaX6ffVzyd6ppEzfemj4rMCyrTRuW1T/1q/k7/wWAAD//27mZ2s=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x3, 0x0, 0x404042bc0) 4.011750969s ago: executing program 2 (id=4260): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 3.839744065s ago: executing program 6 (id=4252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3.106308543s ago: executing program 5 (id=4258): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r4 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 3.004141522s ago: executing program 2 (id=4259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$eJzs3M1rHGUYAPBnJpvv2KQiaotgQKqiuE2bUqGn1rOooAePjcmmhGw/TCKY0ENa7+pBxENB+icI3u3Fk+ChHrT+BUUsUvTS9rAy+5Gu2WwSk81Om/5+8Gbed97JPs+T2e68AzsN4Ik1nv1IIw5FxNkkYrS+P42IvmpvIGK1dtz9u5ens5ZEpfL+X0kkEXHv7uXpxmsl9e1wfTAQETffSuLpz1rjLi6vzE+Vy6WF+vjo0vlLRxeXV96YOz91rnSudOHE5JsnJk9OTnaw1tuXPvrmhV/eefnq9c8n3v36wE9JnI6R+lxzHZ0yHuNrf5NmhYiY6nSwnPTU62muMynkmBAAAJtKm9Zwz8Zo9MTDxdto/PhrrskBAAAAHVHpiagAAAAA+1zi/h8AAAD2ucb3AO7dvTzdaPl+I6G77pyJiLFa/Y3nm2szhVitbgeiNyKG/k6i+bHWpPZruzaeRfr+51LWYqvnkAc7EHCd1SsR8fxG5z+p1j9WfYq7tf40IiY6EH983bjb77/d1H+6A/Hzrh+AJ9ONM7ULWev1L62tf/pro/XXv8IG166dyPv611j/3W9Z/6Vr67+eNuu/97YZ4/CD1262m2te/334xe8zWfxsu6ui/oc7VyIOFzaqP1mrP2lT/9ltxhievn2t3VxWf1Zvo3W7/sr1iCPV1Vxr/Q3JZv8/0dHZuXJpovZzg9dfPrl5/Obzn7UsfuNeoBuy8z8UOzv/l7YZY+y5Pw+1m9u6/vSPvuSDaq+vvufTqaWlhWMRfcnbrfuPb55L45jGa2T1v/rS5v/+N6o/+0xYrf8dsnfPlfo2G19dF3P4yPHvdl7/3srqn9nh+f9ymzG+/eHax+3m8q4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdDGhEjkaTFtX6aFosRwxHxTAyl5YuLS6/PXvzkwkw2FzEWvensXLk0ERGjtXGSjY9V+w/Hx9eNJyPiYER8NTpYHRenL5Zn8i4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANcMRMRJJWoyINCL+GU3TYjHvrAAAAICOG8s7AQAAAGDPuf8HAACA/a/l/r/wn9FAN3MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgXzr44o1bSUSsnhqstkxffa4318yAvZZu77Chvc4D6L6evBMAclNo6lcqlUqOqQBd5h4fSLaYH2g709/xXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dL1y6MatJCJWTw1WW6avPteba2bAXkvzTgDITc9mk8mWO4DHWCHvBIDcuMcHaiv7B5Wa1vmBtr/Zv+uoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw+RqotSYsRkVb7aVosRjwVEWPRm8zOlUsTEXEgIn4b7e3PxsfyThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOW1xemZ8ql0sLOvu2U6mf60clnyejMxhdizVYP8FtjulvP7VJJ8cPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcrO4vDI/VS6XFhbzzgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI2+LyyvxUuVxa2MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwMAAP//xB0HRA==") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) r3 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.960206069s ago: executing program 6 (id=4277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0), 0xfdef) 1.83556646s ago: executing program 5 (id=4269): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r0 = syz_io_uring_setup(0x42ea, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.833937441s ago: executing program 4 (id=4270): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r3}, 0x18) close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.640595048s ago: executing program 2 (id=4271): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.40259068s ago: executing program 6 (id=4273): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x1000000) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.262018333s ago: executing program 6 (id=4275): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount(0x0, 0x0, 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.158527663s ago: executing program 3 (id=4276): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.123873476s ago: executing program 5 (id=4278): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) 837.490713ms ago: executing program 3 (id=4279): r0 = socket(0x25, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000a212}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 836.493433ms ago: executing program 4 (id=4289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 631.032042ms ago: executing program 2 (id=4280): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x1, 0x1, 0xdf, @vifc_lcl_addr=@broadcast, @rand_addr=0x64010102}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 629.500712ms ago: executing program 3 (id=4291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 629.154352ms ago: executing program 5 (id=4281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x10, 0x8, 0x11, {{0x5, 0x4, 0x3, 0x2d, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @broadcast}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, &(0x7f0000000680)=""/169, 0x0, 0xa9, 0x1, 0xf7, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 538.73947ms ago: executing program 5 (id=4282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 411.846862ms ago: executing program 5 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x3e, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 283.734404ms ago: executing program 3 (id=4284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a528ef2ea08", 0x8}], 0x1}, 0x40) 202.636511ms ago: executing program 6 (id=4285): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x200000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xd3b, 0x81, 0x5, 0x3ff, 0x3, "5f656fe690a5fe89"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) 186.212023ms ago: executing program 3 (id=4286): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000005803"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, r5, 0xd, {0x7, 0xa42}, 0x80}, 0x1) 162.508935ms ago: executing program 4 (id=4287): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x8d) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8936, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 64.510604ms ago: executing program 4 (id=4288): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r2, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) 997.85µs ago: executing program 4 (id=4290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0x1000}) setrlimit(0x40000000000008, &(0x7f0000000000)) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 580.13µs ago: executing program 3 (id=4292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) 0s ago: executing program 4 (id=4293): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 233.514164][T13020] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 233.571969][ T3670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.584452][ T3670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.597126][ T3670] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.609241][ T3670] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.854215][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 233.988298][T13043] lo speed is unknown, defaulting to 1000 [ 234.186267][ T3670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.202839][ T3670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.215019][ T3670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.233139][ T3670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.340795][T13058] v: renamed from ip6_vti0 [ 234.635201][T13065] lo speed is unknown, defaulting to 1000 [ 234.786349][T13075] netlink: 64 bytes leftover after parsing attributes in process `GPL'. [ 234.842165][T13082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.896270][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 234.961534][T13065] netlink: 'syz.2.3028': attribute type 2 has an invalid length. [ 235.004648][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3038'. [ 235.043556][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3038'. [ 235.129268][T13065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3028'. [ 235.474534][T13112] xt_hashlimit: max too large, truncated to 1048576 [ 235.487942][T13112] No such timeout policy "syz1" [ 235.521536][T13113] netlink: 'syz.3.3041': attribute type 3 has an invalid length. [ 235.965311][T13124] lo speed is unknown, defaulting to 1000 [ 236.242274][T13137] bridge0: port 1(team0) entered blocking state [ 236.248673][T13137] bridge0: port 1(team0) entered disabled state [ 236.255656][T13137] team0: entered allmulticast mode [ 236.274866][T13137] team0: entered promiscuous mode [ 236.420296][T13149] lo speed is unknown, defaulting to 1000 [ 236.913319][ T29] kauditd_printk_skb: 1109 callbacks suppressed [ 236.913336][ T29] audit: type=1326 audit(492.898:16253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8501982005 code=0x7ffc0000 [ 236.969059][ T29] audit: type=1326 audit(492.928:16254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85019465e7 code=0x7ffc0000 [ 236.992359][ T29] audit: type=1326 audit(492.928:16255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85018eb829 code=0x7ffc0000 [ 237.015746][ T29] audit: type=1326 audit(492.928:16256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 237.038728][ T29] audit: type=1326 audit(492.928:16257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8501982005 code=0x7ffc0000 [ 237.061888][ T29] audit: type=1326 audit(492.928:16258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8501982005 code=0x7ffc0000 [ 237.085067][ T29] audit: type=1326 audit(492.928:16259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85019465e7 code=0x7ffc0000 [ 237.108178][ T29] audit: type=1326 audit(492.928:16260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85018eb829 code=0x7ffc0000 [ 237.131363][ T29] audit: type=1326 audit(492.928:16261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 237.154442][ T29] audit: type=1326 audit(492.938:16262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8501982005 code=0x7ffc0000 [ 237.297959][T13164] rdma_op ffff88811a68d580 conn xmit_rdma 0000000000000000 [ 238.039448][T13184] lo speed is unknown, defaulting to 1000 [ 240.167426][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3088'. [ 240.218546][T13231] vlan2: entered promiscuous mode [ 240.223782][T13231] gretap0: entered promiscuous mode [ 240.438320][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3094'. [ 240.501024][T13250] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 240.708655][T13260] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3101'. [ 241.007802][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'. [ 241.026681][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'. [ 241.352711][T13303] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3120'. [ 241.523741][T13309] lo speed is unknown, defaulting to 1000 [ 241.634021][T13310] xt_connbytes: Forcing CT accounting to be enabled [ 241.663443][T13310] set match dimension is over the limit! [ 241.956866][ T29] kauditd_printk_skb: 1003 callbacks suppressed [ 241.956945][ T29] audit: type=1326 audit(497.938:17266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 242.020865][T13334] lo speed is unknown, defaulting to 1000 [ 242.036832][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 242.142542][ T29] audit: type=1326 audit(497.938:17267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 242.165716][ T29] audit: type=1326 audit(497.938:17268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 242.188718][ T29] audit: type=1326 audit(497.938:17269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f850194f783 code=0x7ffc0000 [ 242.211738][ T29] audit: type=1326 audit(497.938:17270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f850194e1ff code=0x7ffc0000 [ 242.235015][ T29] audit: type=1326 audit(497.938:17271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f850194f7d7 code=0x7ffc0000 [ 242.257915][ T29] audit: type=1326 audit(497.938:17272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f850194df90 code=0x7ffc0000 [ 242.280970][ T29] audit: type=1326 audit(497.938:17273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f850194e3aa code=0x7ffc0000 [ 242.303928][ T29] audit: type=1326 audit(497.938:17274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 242.326998][ T29] audit: type=1326 audit(497.938:17275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 242.419880][T13341] tipc: New replicast peer: 255.255.255.83 [ 242.425884][T13341] tipc: Enabled bearer , priority 10 [ 242.482046][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3137'. [ 242.594153][T13353] netlink: 'syz.2.3137': attribute type 13 has an invalid length. [ 242.711603][ T3645] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.735626][ T3645] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.746981][T13355] lo speed is unknown, defaulting to 1000 [ 242.802928][ T3645] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.845664][T13364] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3143'. [ 242.872074][ T3645] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.919020][T13366] infiniband !yz!: set down [ 242.923679][T13366] infiniband !yz!: added team_slave_0 [ 242.988611][T13366] RDS/IB: !yz!: added [ 243.004947][T13366] smc: adding ib device !yz! with port count 1 [ 243.011153][T13366] smc: ib device !yz! port 1 has no pnetid [ 243.136296][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3149'. [ 243.184917][T13380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.229477][T13386] ip6gre1: entered allmulticast mode [ 243.249288][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.277896][T13384] bond6: (slave bond0): Enslaving as an active interface with an up link [ 243.334906][T13380] netlink: 'syz.3.3149': attribute type 10 has an invalid length. [ 243.364008][T13392] netem: change failed [ 243.620487][T13402] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.941801][T13420] lo speed is unknown, defaulting to 1000 [ 244.034447][T13423] xt_connbytes: Forcing CT accounting to be enabled [ 244.052670][T13423] set match dimension is over the limit! [ 244.519272][T13449] tipc: Started in network mode [ 244.524351][T13449] tipc: Node identity ac14140f, cluster identity 4711 [ 244.531445][T13449] tipc: New replicast peer: 255.255.255.83 [ 244.537476][T13449] tipc: Enabled bearer , priority 10 [ 244.571256][T13451] wireguard0: entered promiscuous mode [ 244.576895][T13451] wireguard0: entered allmulticast mode [ 245.177758][T13477] team0 (unregistering): Port device team_slave_0 removed [ 245.254397][T13477] team0 (unregistering): Port device team_slave_1 removed [ 245.655778][T13488] lo speed is unknown, defaulting to 1000 [ 245.708442][T13491] Cannot find set identified by id 0 to match [ 245.724327][ T6271] tipc: Node number set to 2886997007 [ 245.796547][T13494] __nla_validate_parse: 72 callbacks suppressed [ 245.796614][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3191'. [ 245.828505][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3191'. [ 246.169877][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3197'. [ 246.241812][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 246.420927][T13523] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3203'. [ 246.804579][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3207'. [ 247.506412][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 247.506432][ T29] audit: type=1326 audit(503.488:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.625514][ T29] audit: type=1326 audit(503.518:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.648936][ T29] audit: type=1326 audit(503.518:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.671983][ T29] audit: type=1326 audit(503.518:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.695086][ T29] audit: type=1326 audit(503.518:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.718128][ T29] audit: type=1326 audit(503.518:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.741060][ T29] audit: type=1326 audit(503.518:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.764129][ T29] audit: type=1326 audit(503.518:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.787202][ T29] audit: type=1326 audit(503.518:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.810442][ T29] audit: type=1326 audit(503.518:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 247.844004][T13547] wireguard0: entered promiscuous mode [ 247.849514][T13547] wireguard0: entered allmulticast mode [ 247.993459][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3210'. [ 248.002705][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3210'. [ 248.011752][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3210'. [ 248.223102][T13563] netlink: 'syz.5.3216': attribute type 4 has an invalid length. [ 248.346427][T13563] netlink: 'syz.5.3216': attribute type 4 has an invalid length. [ 249.137498][T13567] Set syz1 is full, maxelem 65536 reached [ 249.287046][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 249.400647][T13597] bond1: (slave bridge10): Enslaving as an active interface with an up link [ 249.418747][T13597] macvlan2: entered promiscuous mode [ 249.424252][T13597] macvlan2: entered allmulticast mode [ 249.430627][T13597] bond1: entered promiscuous mode [ 249.435803][T13597] bridge10: entered promiscuous mode [ 249.441900][T13597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.449968][T13597] bond1: left promiscuous mode [ 249.454857][T13597] bridge10: left promiscuous mode [ 249.809614][T13603] lo speed is unknown, defaulting to 1000 [ 249.873238][ T6273] Process accounting resumed [ 249.928174][T13610] tipc: Enabling of bearer rejected, failed to enable media [ 250.155561][T13622] xt_hashlimit: max too large, truncated to 1048576 [ 250.192672][T13622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.261832][T13622] netlink: 'syz.4.3238': attribute type 10 has an invalid length. [ 250.376573][T13642] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 250.385934][T13642] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 250.396150][ T6282] lo speed is unknown, defaulting to 1000 [ 250.401935][ T6282] syz1: Port: 1 Link ACTIVE [ 250.418733][ T6283] lo speed is unknown, defaulting to 1000 [ 250.968004][T13666] __nla_validate_parse: 2 callbacks suppressed [ 250.968020][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 250.985214][T13666] syz_tun (unregistering): left allmulticast mode [ 251.884304][T13691] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 251.930341][T13691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.938430][T13694] tipc: Enabling of bearer rejected, failed to enable media [ 251.982485][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 251.991851][T13691] bond7: entered promiscuous mode [ 251.996954][T13691] bond7: entered allmulticast mode [ 252.006311][T13691] bond4: (slave dummy0): Releasing active interface [ 252.018160][T13691] bond7: (slave dummy0): making interface the new active one [ 252.026075][T13691] dummy0: entered promiscuous mode [ 252.034262][T13691] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 252.109360][T13707] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3271'. [ 252.151250][T13719] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.162995][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 252.178798][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 252.234500][T13719] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.284789][T13719] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.326005][T13719] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.437347][ T3689] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.448532][ T3689] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.459694][ T3689] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.471030][ T3689] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.550031][T13728] lo speed is unknown, defaulting to 1000 [ 252.932645][ T29] kauditd_printk_skb: 2048 callbacks suppressed [ 252.932666][ T29] audit: type=1326 audit(508.498:19525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9002662005 code=0x7ffc0000 [ 252.962478][ T29] audit: type=1326 audit(508.498:19526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90026265e7 code=0x7ffc0000 [ 252.984865][ T29] audit: type=1326 audit(508.498:19527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90025cb829 code=0x7ffc0000 [ 253.007220][ T29] audit: type=1326 audit(508.498:19528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 253.029589][ T29] audit: type=1326 audit(508.498:19530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90026265e7 code=0x7ffc0000 [ 253.051989][ T29] audit: type=1326 audit(508.498:19529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9002662005 code=0x7ffc0000 [ 253.075039][ T29] audit: type=1326 audit(508.498:19531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90025cb829 code=0x7ffc0000 [ 253.097395][ T29] audit: type=1326 audit(508.498:19532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 253.119862][ T29] audit: type=1326 audit(508.498:19533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9002662005 code=0x7ffc0000 [ 253.143112][ T29] audit: type=1326 audit(508.498:19534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9002662005 code=0x7ffc0000 [ 253.204639][ T6271] IPVS: starting estimator thread 0... [ 253.211233][T13735] IPVS: nq: FWM 3 0x00000003 - no destination available [ 253.252918][T13733] tipc: Can't bind to reserved service type 1 [ 253.269157][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 253.305410][T13736] IPVS: using max 3312 ests per chain, 165600 per kthread [ 253.341025][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3284'. [ 253.393258][T13749] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3285'. [ 253.413537][T13753] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 253.428116][T13753] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 253.477392][T13756] netlink: 'syz.2.3288': attribute type 1 has an invalid length. [ 253.493767][T13758] netlink: 'syz.6.3285': attribute type 13 has an invalid length. [ 253.507747][T13756] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.604611][T13756] bond11: (slave veth7): Enslaving as an active interface with a down link [ 253.618657][T13762] bond6: (slave dummy0): Releasing active interface [ 253.632166][T13762] bond11: (slave dummy0): making interface the new active one [ 253.642106][T13762] dummy0: entered promiscuous mode [ 253.647756][T13762] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 253.975132][T13771] blktrace: Concurrent blktraces are not allowed on loop8 [ 254.288481][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3297'. [ 254.305723][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 254.400786][T13787] vlan2 (unregistering): left allmulticast mode [ 254.407132][T13787] bridge0 (unregistering): left allmulticast mode [ 254.413677][T13787] vlan2 (unregistering): left promiscuous mode [ 254.419948][T13787] bridge0 (unregistering): left promiscuous mode [ 254.426424][T13787] bridge1: port 1(vlan2) entered disabled state [ 254.472319][T13790] netlink: 'syz.4.3300': attribute type 10 has an invalid length. [ 254.527817][T13790] : entered promiscuous mode [ 254.533034][T13790] bridge0: port 3() entered blocking state [ 254.539014][T13790] bridge0: port 3() entered disabled state [ 254.552933][T13790] : entered allmulticast mode [ 254.557780][T13790] bridge0: entered allmulticast mode [ 254.570432][T13790] : left allmulticast mode [ 254.575050][T13790] bridge0: left allmulticast mode [ 254.590909][T13791] lo speed is unknown, defaulting to 1000 [ 254.847840][T13805] xt_hashlimit: max too large, truncated to 1048576 [ 254.891384][T13812] netlink: 'syz.5.3307': attribute type 13 has an invalid length. [ 254.899561][T13805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.940085][T13805] netlink: 'syz.6.3305': attribute type 10 has an invalid length. [ 255.103124][T13805] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 255.122422][ T3645] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.136344][ T3645] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.166812][ T3645] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.192679][ T3645] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.297963][T13833] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.310449][T13833] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 255.357658][T13833] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 255.626146][T13842] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 256.329129][T13851] openvswitch: netlink: Missing key (keys=40, expected=100) [ 256.424240][T13858] __nla_validate_parse: 6 callbacks suppressed [ 256.424331][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 256.464112][T13861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3324'. [ 256.533135][T13866] netlink: 'syz.4.3324': attribute type 13 has an invalid length. [ 256.544617][T13866] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 256.565101][ T6271] lo speed is unknown, defaulting to 1000 [ 256.570882][ T6271] syz1: Port: 1 Link DOWN [ 256.579216][ T6273] lo speed is unknown, defaulting to 1000 [ 257.341046][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'. [ 257.418530][T13895] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 257.499477][T13900] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 257.586519][T13911] sch_tbf: burst 22 is lower than device lo mtu (100663310) ! [ 257.595523][T13911] sch_tbf: burst 22 is lower than device lo mtu (100663310) ! [ 257.667592][T13914] lo speed is unknown, defaulting to 1000 [ 257.835962][T13918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13918 comm=syz.2.3343 [ 257.854531][T13918] netlink: 'syz.2.3343': attribute type 1 has an invalid length. [ 257.881656][T13918] 8021q: adding VLAN 0 to HW filter on device bond12 [ 257.902118][T13918] bond11: (slave dummy0): Releasing active interface [ 257.918535][T13918] dummy0: left promiscuous mode [ 258.005964][T13918] bond12: (slave dummy0): making interface the new active one [ 258.015091][T13918] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 258.279243][T13929] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 258.325181][T13929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.491614][T13929] bond1: (slave veth11): Enslaving as an active interface with a down link [ 258.593027][T13929] bond0: (slave dummy0): Releasing active interface [ 258.606048][T13929] bond1: (slave dummy0): making interface the new active one [ 258.615262][T13929] dummy0: entered promiscuous mode [ 258.620591][T13929] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 258.895781][T13944] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 258.903294][T13944] bond0: option active_slave: invalid value (veth0_to_hsr) [ 259.276669][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 259.276692][ T29] audit: type=1326 audit(515.258:19789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.488057][ T29] audit: type=1326 audit(515.288:19790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.511288][ T29] audit: type=1326 audit(515.298:19792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.534408][ T29] audit: type=1326 audit(515.298:19793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.557367][ T29] audit: type=1326 audit(515.298:19794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.580518][ T29] audit: type=1326 audit(515.288:19791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.603731][ T29] audit: type=1326 audit(515.298:19795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.626772][ T29] audit: type=1326 audit(515.298:19796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.649743][ T29] audit: type=1326 audit(515.298:19797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.673031][ T29] audit: type=1326 audit(515.298:19798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 259.820900][T13957] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3358'. [ 259.833778][T13957] netlink: zone id is out of range [ 259.838950][T13957] netlink: zone id is out of range [ 259.847626][T13957] netlink: zone id is out of range [ 259.852820][T13957] netlink: zone id is out of range [ 259.857947][T13957] netlink: zone id is out of range [ 259.863142][T13957] netlink: zone id is out of range [ 259.868361][T13957] netlink: zone id is out of range [ 259.895017][T13957] netlink: zone id is out of range [ 259.900374][T13957] netlink: zone id is out of range [ 259.957999][T13965] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.970475][T13965] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 259.981568][T13965] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 260.405156][T13989] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3370'. [ 260.427756][T13989] 0ªX¹¦À: renamed from caif0 [ 260.482310][T13989] 0ªX¹¦À: entered allmulticast mode [ 260.770847][T14005] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.783538][T14005] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 260.816046][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3384'. [ 260.825224][T14005] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 260.931865][T14013] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.055021][T14013] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.255881][T14013] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.298086][T14013] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.384144][ T3672] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.433119][ T3672] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.463002][ T3672] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.471323][ T3672] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.483777][T14061] netlink: 'syz.3.3395': attribute type 10 has an invalid length. [ 262.493850][T14061] bond7: (slave dummy0): Releasing active interface [ 262.500585][T14061] dummy0: left promiscuous mode [ 262.509323][T14061] dummy0: entered promiscuous mode [ 262.517417][T14061] team0: Port device dummy0 added [ 262.523952][ T3687] bridge0: port 1(team0) entered blocking state [ 262.530245][ T3687] bridge0: port 1(team0) entered forwarding state [ 262.553268][T14061] netlink: 'syz.3.3395': attribute type 10 has an invalid length. [ 262.564183][T14061] dummy0: left promiscuous mode [ 262.569938][T14061] team0: Port device dummy0 removed [ 262.580278][T14061] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 262.617334][ T3680] bridge0: port 1(team0) entered disabled state [ 262.996963][T14098] netlink: 'syz.5.3407': attribute type 30 has an invalid length. [ 263.305187][T14104] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 263.691366][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3410'. [ 263.989359][T14123] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 263.998205][T14123] ref_ctr increment failed for inode: 0xf28 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888107795e80 [ 264.036000][T14123] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 264.045002][T14123] ref_ctr decrement failed for inode: 0xf28 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888107795e80 [ 264.077730][T14123] uprobe: syz.2.3416:14123 failed to unregister, leaking uprobe [ 264.287972][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 264.287990][ T29] audit: type=1326 audit(520.268:20400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.337259][ T29] audit: type=1326 audit(520.298:20401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.360686][ T29] audit: type=1326 audit(520.308:20402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.415677][ T29] audit: type=1326 audit(520.368:20403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.438767][ T29] audit: type=1326 audit(520.378:20404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.461835][ T29] audit: type=1326 audit(520.388:20405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.484976][ T29] audit: type=1326 audit(520.448:20406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.508179][ T29] audit: type=1326 audit(520.458:20407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.533127][ T29] audit: type=1326 audit(520.488:20408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.556040][ T29] audit: type=1326 audit(520.498:20409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14118 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 264.804048][T14145] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.915087][T14145] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.968722][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3431'. [ 265.000304][T14155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.030945][T14155] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 265.041175][T14145] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.087085][T14162] bond2: entered promiscuous mode [ 265.092154][T14162] bridge3: entered promiscuous mode [ 265.098380][T14162] bond2: entered allmulticast mode [ 265.103724][T14162] bridge3: entered allmulticast mode [ 265.131721][T14161] netlink: 'syz.2.3432': attribute type 12 has an invalid length. [ 265.141718][T14145] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.196987][T14164] netlink: 'syz.2.3433': attribute type 4 has an invalid length. [ 265.222232][ T3670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.235437][ T3670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.262914][ T3670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.276733][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'. [ 265.296151][ T3670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.412522][T14172] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.559199][T14178] lo speed is unknown, defaulting to 1000 [ 265.726364][T14172] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.010241][T14191] netlink: 'syz.4.3443': attribute type 39 has an invalid length. [ 266.090179][T14172] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.241654][T14172] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.350119][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 266.359852][T14198] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 266.565349][T14207] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 267.072727][T14217] lo speed is unknown, defaulting to 1000 [ 267.511524][ T3660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 267.531561][ T3660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 267.542926][ T3660] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 267.555310][ T3660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 267.917925][T14236] netlink: 'syz.6.3457': attribute type 30 has an invalid length. [ 268.129209][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'. [ 268.145755][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3461'. [ 268.198084][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'. [ 268.473723][T14264] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 268.525787][T14266] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3469'. [ 269.090912][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 269.123178][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3474'. [ 269.411402][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 269.411417][ T29] audit: type=1326 audit(525.388:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.442074][ T29] audit: type=1326 audit(525.398:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.465165][ T29] audit: type=1326 audit(525.398:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.488397][ T29] audit: type=1326 audit(525.398:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.511571][ T29] audit: type=1326 audit(525.398:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.534964][ T29] audit: type=1326 audit(525.398:20435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.558015][ T29] audit: type=1326 audit(525.398:20436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.581313][ T29] audit: type=1326 audit(525.398:20437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.604461][ T29] audit: type=1326 audit(525.408:20438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.627842][ T29] audit: type=1326 audit(525.408:20439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14291 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 269.685010][T14303] netlink: 'syz.6.3484': attribute type 4 has an invalid length. [ 269.714262][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 269.724657][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 269.734322][T14309] hsr_slave_0: left promiscuous mode [ 269.740268][T14309] hsr_slave_1: left promiscuous mode [ 270.222935][T14332] tipc: Enabling of bearer rejected, failed to enable media [ 270.378727][T14333] rdma_op ffff888123ca7980 conn xmit_rdma 0000000000000000 [ 270.393006][T14339] futex_wake_op: syz.5.3497 tries to shift op by -3; fix this program [ 270.553933][ T3645] dummy0: left promiscuous mode [ 270.800900][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 270.809907][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 271.232071][T14373] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3512'. [ 271.380857][T14379] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.3514'. [ 271.390260][T14379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3514'. [ 272.077964][T14399] ref_ctr increment failed for inode: 0xe8b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888122be9440 [ 272.213738][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3532'. [ 272.741694][T14441] lo speed is unknown, defaulting to 1000 [ 272.864975][T14424] futex_wake_op: syz.3.3528 tries to shift op by -1; fix this program [ 272.914265][T14444] netlink: 'syz.3.3537': attribute type 30 has an invalid length. [ 273.255846][T14451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14451 comm=syz.5.3540 [ 273.713994][T14463] 8021q: VLANs not supported on ip6tnl0 [ 274.238815][T14492] netlink: 'syz.4.3557': attribute type 1 has an invalid length. [ 274.259794][T14492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.276462][T14492] bond2: entered allmulticast mode [ 274.288022][T14492] bond2: (slave ip6gretap1): making interface the new active one [ 274.296065][T14492] ip6gretap1: entered allmulticast mode [ 274.303929][T14492] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 274.419168][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 274.419183][ T29] audit: type=1326 audit(530.398:20717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.496506][ T29] audit: type=1326 audit(530.428:20718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f326507f783 code=0x7ffc0000 [ 274.519445][ T29] audit: type=1326 audit(530.428:20719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f326507f783 code=0x7ffc0000 [ 274.542609][ T29] audit: type=1326 audit(530.428:20720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.565752][ T29] audit: type=1326 audit(530.438:20721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.588820][ T29] audit: type=1326 audit(530.438:20722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.612360][ T29] audit: type=1326 audit(530.438:20723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.635579][ T29] audit: type=1326 audit(530.438:20724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.658600][ T29] audit: type=1326 audit(530.438:20725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.682208][ T29] audit: type=1326 audit(530.438:20726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14504 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 274.708249][T14511] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 274.855042][T14511] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.034032][T14511] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.272006][T14511] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.389504][ T3670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.406009][ T3670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.430634][ T3670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.439143][ T3670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.776980][T14525] lo speed is unknown, defaulting to 1000 [ 275.843660][T14535] syz1: rxe_newlink: already configured on lo [ 275.850318][T14527] __nla_validate_parse: 6 callbacks suppressed [ 275.850350][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 275.865485][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 275.941246][T14536] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 276.911879][T14557] syz.4.3580: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 276.926582][T14557] CPU: 1 UID: 0 PID: 14557 Comm: syz.4.3580 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.926615][T14557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.926629][T14557] Call Trace: [ 276.926637][T14557] [ 276.926646][T14557] __dump_stack+0x1d/0x30 [ 276.926695][T14557] dump_stack_lvl+0x95/0xd0 [ 276.926719][T14557] dump_stack+0x15/0x1b [ 276.926742][T14557] warn_alloc+0x12b/0x1a0 [ 276.926774][T14557] __vmalloc_node_range_noprof+0xa0/0x1310 [ 276.926803][T14557] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 276.926856][T14557] ? probe_sched_wakeup+0x85/0xa0 [ 276.926888][T14557] ? rb_next+0xf/0x80 [ 276.926954][T14557] ? __rcu_read_unlock+0x4f/0x70 [ 276.927049][T14557] ? avc_has_perm_noaudit+0xab/0x130 [ 276.927069][T14557] ? should_fail_ex+0x30/0x280 [ 276.927090][T14557] ? should_failslab+0x8c/0xb0 [ 276.927114][T14557] vmalloc_user_noprof+0x7d/0xb0 [ 276.927176][T14557] ? xskq_create+0x80/0xe0 [ 276.927216][T14557] xskq_create+0x80/0xe0 [ 276.927250][T14557] xsk_init_queue+0x95/0xf0 [ 276.927284][T14557] xsk_setsockopt+0x477/0x640 [ 276.927359][T14557] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.927426][T14557] __sys_setsockopt+0x184/0x200 [ 276.927458][T14557] __x64_sys_setsockopt+0x64/0x80 [ 276.927488][T14557] x64_sys_call+0x21d5/0x3000 [ 276.927584][T14557] do_syscall_64+0xca/0x2b0 [ 276.927616][T14557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.927640][T14557] RIP: 0033:0x7f326507f749 [ 276.927659][T14557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.927741][T14557] RSP: 002b:00007f3263adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.927769][T14557] RAX: ffffffffffffffda RBX: 00007f32652d5fa0 RCX: 00007f326507f749 [ 276.927784][T14557] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 276.927798][T14557] RBP: 00007f3265103f91 R08: 0000000000000004 R09: 0000000000000000 [ 276.927812][T14557] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 276.927851][T14557] R13: 00007f32652d6038 R14: 00007f32652d5fa0 R15: 00007ffee068da58 [ 276.927872][T14557] [ 276.927943][T14557] Mem-Info: [ 277.145394][T14557] active_anon:36947 inactive_anon:2 isolated_anon:0 [ 277.145394][T14557] active_file:20265 inactive_file:3011 isolated_file:0 [ 277.145394][T14557] unevictable:16364 dirty:314 writeback:0 [ 277.145394][T14557] slab_reclaimable:3790 slab_unreclaimable:135260 [ 277.145394][T14557] mapped:29956 shmem:19894 pagetables:1338 [ 277.145394][T14557] sec_pagetables:0 bounce:0 [ 277.145394][T14557] kernel_misc_reclaimable:0 [ 277.145394][T14557] free:1682181 free_pcp:19283 free_cma:0 [ 277.191144][T14557] Node 0 active_anon:147788kB inactive_anon:8kB active_file:81060kB inactive_file:12044kB unevictable:65456kB isolated(anon):0kB isolated(file):0kB mapped:119824kB dirty:1256kB writeback:0kB shmem:79576kB kernel_stack:5136kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.219679][T14557] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.249488][T14557] lowmem_reserve[]: 0 2880 7859 7859 [ 277.254851][T14557] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 277.286246][T14557] lowmem_reserve[]: 0 0 4978 4978 [ 277.291503][T14557] Node 0 Normal free:3767480kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:147788kB inactive_anon:8kB active_file:81060kB inactive_file:12044kB unevictable:65456kB writepending:1256kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:73496kB local_pcp:55404kB free_cma:0kB [ 277.325070][T14557] lowmem_reserve[]: 0 0 0 0 [ 277.329668][T14557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.342699][T14557] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 277.358869][T14557] Node 0 Normal: 2632*4kB (UM) 1043*8kB (UME) 1244*16kB (UME) 758*32kB (UME) 356*64kB (UME) 429*128kB (UM) 521*256kB (UME) 361*512kB (UM) 291*1024kB (UME) 154*2048kB (UME) 658*4096kB (UM) = 3767480kB [ 277.378777][T14557] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 277.388268][T14557] 59987 total pagecache pages [ 277.392999][T14557] 29 pages in swap cache [ 277.397413][T14557] Free swap = 124204kB [ 277.401659][T14557] Total swap = 124996kB [ 277.405862][T14557] 2097051 pages RAM [ 277.409684][T14557] 0 pages HighMem/MovableOnly [ 277.414420][T14557] 81272 pages reserved [ 277.865041][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 278.079230][T14582] lo speed is unknown, defaulting to 1000 [ 278.178354][T14585] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 278.894006][T14591] netlink: 'syz.2.3601': attribute type 1 has an invalid length. [ 278.907003][T14594] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3599'. [ 278.957124][T14594] hsr_slave_0: left promiscuous mode [ 278.962992][T14594] hsr_slave_1: left promiscuous mode [ 278.976988][T14591] 8021q: adding VLAN 0 to HW filter on device bond13 [ 279.018584][T14595] ip6erspan0: entered promiscuous mode [ 279.043957][T14595] bond13: (slave ip6erspan0): making interface the new active one [ 279.064166][T14595] bond13: (slave ip6erspan0): Enslaving as an active interface with an up link [ 279.076897][T14597] macvlan2: entered promiscuous mode [ 279.082914][T14597] bond13: entered promiscuous mode [ 279.088524][T14597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 279.096908][T14597] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 279.114405][T14597] bond13: left promiscuous mode [ 279.238133][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3594'. [ 279.289476][T14605] hsr_slave_0: left promiscuous mode [ 279.301456][T14605] hsr_slave_1: left promiscuous mode [ 279.603466][T14620] lo speed is unknown, defaulting to 1000 [ 280.489200][T14639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 281.350595][T14644] lo speed is unknown, defaulting to 1000 [ 281.382384][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 281.382402][ T29] audit: type=1326 audit(537.358:21060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.422652][ T29] audit: type=1326 audit(537.368:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.445831][ T29] audit: type=1326 audit(537.368:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd99301f783 code=0x7ffc0000 [ 281.468938][ T29] audit: type=1326 audit(537.368:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd99301f783 code=0x7ffc0000 [ 281.492063][ T29] audit: type=1326 audit(537.368:21064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.515240][ T29] audit: type=1326 audit(537.368:21065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.538447][ T29] audit: type=1326 audit(537.368:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.561641][ T29] audit: type=1326 audit(537.368:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.585038][ T29] audit: type=1326 audit(537.368:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.608222][ T29] audit: type=1326 audit(537.368:21069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.5.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 281.746760][T14659] net_ratelimit: 24 callbacks suppressed [ 281.746797][T14659] IPVS: nq: FWM 3 0x00000003 - no destination available [ 281.844387][T14662] netlink: 'syz.6.3616': attribute type 12 has an invalid length. [ 282.182420][T14676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14676 comm=syz.6.3619 [ 282.300839][T14679] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 282.915334][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'. [ 283.165810][T14700] vlan2: entered allmulticast mode [ 283.171865][T14700] dummy0: entered allmulticast mode [ 283.284600][T14713] vlan0: entered allmulticast mode [ 283.293944][T14713] dummy0: entered allmulticast mode [ 283.676076][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3641'. [ 283.747270][T14735] lo speed is unknown, defaulting to 1000 [ 283.761805][T14737] $Hÿ: renamed from bond0 [ 283.776068][T14737] $Hÿ: entered promiscuous mode [ 283.796759][T14739] tipc: Started in network mode [ 283.801661][T14739] tipc: Node identity ac1414aa, cluster identity 4711 [ 283.808488][T14739] tipc: Enabling of bearer rejected, failed to enable media [ 284.040709][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 284.237367][T14770] veth0_to_team: entered promiscuous mode [ 284.817558][T14756] lo speed is unknown, defaulting to 1000 [ 285.391566][T14818] vlan0: entered allmulticast mode [ 285.437404][T14818] dummy0: entered allmulticast mode [ 285.490244][T14827] lo speed is unknown, defaulting to 1000 [ 285.505540][T14829] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3672'. [ 286.231922][T14846] netlink: 'syz.2.3676': attribute type 1 has an invalid length. [ 286.268470][T14848] lo speed is unknown, defaulting to 1000 [ 286.500770][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 287.425975][T14885] netlink: 'syz.6.3688': attribute type 1 has an invalid length. [ 287.456743][T14888] syzkaller0: entered allmulticast mode [ 287.463127][T14888] syzkaller0: entered promiscuous mode [ 287.481662][T14888] syzkaller0 (unregistering): left allmulticast mode [ 287.488419][T14888] syzkaller0 (unregistering): left promiscuous mode [ 287.739032][T14904] tipc: Enabling of bearer rejected, already enabled [ 287.816165][T14908] lo speed is unknown, defaulting to 1000 [ 288.092918][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 288.092933][ T29] audit: type=1326 audit(544.048:21256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.6.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.122477][ T29] audit: type=1326 audit(544.048:21257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.6.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.145733][ T29] audit: type=1326 audit(544.058:21258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.6.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.168833][ T29] audit: type=1326 audit(544.058:21259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.6.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.192048][ T29] audit: type=1326 audit(544.058:21260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.6.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.497243][ T29] audit: type=1326 audit(544.478:21261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.4.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 288.520521][ T29] audit: type=1326 audit(544.478:21262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.4.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 288.543642][ T29] audit: type=1326 audit(544.478:21263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.4.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f326507f783 code=0x7ffc0000 [ 288.598119][ T29] audit: type=1326 audit(544.578:21264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.6.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850194f749 code=0x7ffc0000 [ 288.681006][ T29] audit: type=1326 audit(544.578:21265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.4.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f326507e1ff code=0x7ffc0000 [ 288.718864][T14930] lo speed is unknown, defaulting to 1000 [ 289.272189][T14953] 9p: Bad value for 'rfdno' [ 289.361007][T14955] delete_channel: no stack [ 289.542603][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3722'. [ 289.559830][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'. [ 289.949854][T14984] lo speed is unknown, defaulting to 1000 [ 290.114005][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3724'. [ 290.147633][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3724'. [ 290.330999][T15006] netlink: 'syz.2.3729': attribute type 1 has an invalid length. [ 290.410746][T15006] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.555039][T15006] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 290.619232][T15006] macvlan2: entered promiscuous mode [ 290.624679][T15006] macvlan2: entered allmulticast mode [ 290.630679][T15006] bond0: entered promiscuous mode [ 290.637037][T15006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.645762][T15006] bond0: left promiscuous mode [ 290.672101][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3734'. [ 290.711512][T15020] netlink: 'syz.6.3737': attribute type 10 has an invalid length. [ 290.854737][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3742'. [ 290.863883][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3742'. [ 290.880453][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3742'. [ 290.889554][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3742'. [ 290.917344][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3742'. [ 290.991947][T15045] lo speed is unknown, defaulting to 1000 [ 291.145468][T15054] lo speed is unknown, defaulting to 1000 [ 291.574165][T15063] netlink: 'syz.6.3749': attribute type 1 has an invalid length. [ 291.698604][T15063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.722293][T15069] veth5: entered promiscuous mode [ 291.731121][T15069] bond1: (slave veth5): Enslaving as an active interface with a down link [ 291.763003][T15063] macvlan2: entered promiscuous mode [ 291.768542][T15063] macvlan2: entered allmulticast mode [ 291.823539][T15063] bond1: entered promiscuous mode [ 291.833657][T15063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.849428][T15063] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 291.872240][T15063] bond1: left promiscuous mode [ 291.889719][T15061] lo speed is unknown, defaulting to 1000 [ 292.508630][T15100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 292.923987][T15106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 292.975845][T15106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.034497][T15106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.094300][T15106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.161114][ T3689] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.184932][ T3689] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.197796][ T3689] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.211218][ T3689] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.524775][T15143] netlink: 'syz.3.3777': attribute type 13 has an invalid length. [ 294.651070][T15143] bridge0: port 1(team0) entered disabled state [ 294.719880][T15149] lo speed is unknown, defaulting to 1000 [ 295.053012][ T3677] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.098025][ T3677] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.107477][ T3677] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.125647][T14881] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.140542][T15154] __nla_validate_parse: 5 callbacks suppressed [ 295.140561][T15154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3781'. [ 295.268997][T15164] netlink: 'syz.3.3786': attribute type 10 has an invalid length. [ 295.297546][T15164] hsr0: entered allmulticast mode [ 295.302727][T15164] hsr_slave_0: entered allmulticast mode [ 295.308464][T15164] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 295.331726][T15164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 295.344588][T15164] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 295.405380][T15167] lo speed is unknown, defaulting to 1000 [ 295.466746][T15178] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 295.467213][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 295.467228][ T29] audit: type=1326 audit(551.448:21479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.508403][ T29] audit: type=1326 audit(551.488:21480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.521848][T15178] 8021q: adding VLAN 0 to HW filter on device bond14 [ 295.531555][ T29] audit: type=1326 audit(551.488:21481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.531591][ T29] audit: type=1326 audit(551.488:21482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.587115][ T29] audit: type=1326 audit(551.568:21483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.610187][ T29] audit: type=1326 audit(551.568:21484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.633721][ T29] audit: type=1326 audit(551.568:21485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.656920][ T29] audit: type=1326 audit(551.568:21486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.680002][ T29] audit: type=1326 audit(551.568:21487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.704607][ T29] audit: type=1326 audit(551.688:21488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 295.708011][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3791'. [ 295.844140][T15178] bond12: (slave dummy0): Releasing active interface [ 295.963519][T15178] bond14: (slave dummy0): making interface the new active one [ 295.972369][T15178] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 295.997045][T15189] bond14 (unregistering): (slave dummy0): Releasing active interface [ 296.008671][T15189] bond14 (unregistering): Released all slaves [ 296.425010][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3799'. [ 298.827382][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3826'. [ 298.870002][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3826'. [ 298.924087][T15274] tipc: New replicast peer: 255.255.255.255 [ 298.930219][T15274] tipc: Enabled bearer , priority 10 [ 299.299734][T15287] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 299.709425][T15295] 9p: Bad value for 'wfdno' [ 300.052657][ T6273] tipc: Node number set to 2886997162 [ 300.060161][T15307] veth0_to_team: entered promiscuous mode [ 300.389789][T15306] lo speed is unknown, defaulting to 1000 [ 300.485268][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 300.485287][ T29] audit: type=1326 audit(556.448:21945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.514566][ T29] audit: type=1326 audit(556.458:21946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.537687][ T29] audit: type=1326 audit(556.468:21947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.561801][ T29] audit: type=1326 audit(556.468:21948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.584848][ T29] audit: type=1326 audit(556.468:21949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.607944][ T29] audit: type=1326 audit(556.468:21950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.631155][ T29] audit: type=1326 audit(556.498:21951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.654321][ T29] audit: type=1326 audit(556.518:21952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.677294][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3843'. [ 300.678521][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3843'. [ 300.686515][ T29] audit: type=1326 audit(556.518:21953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.718727][ T29] audit: type=1326 audit(556.538:21954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15301 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 300.933756][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3847'. [ 300.996956][T15327] netlink: 'syz.5.3849': attribute type 29 has an invalid length. [ 301.162326][T15341] netlink: 'syz.3.3853': attribute type 1 has an invalid length. [ 301.198295][T15341] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 301.214560][T15341] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 301.235903][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 301.261745][T15345] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 301.271265][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 301.300186][T15341] macvlan2: entered promiscuous mode [ 301.305579][T15341] macvlan2: entered allmulticast mode [ 301.314285][T15341] bond8: entered promiscuous mode [ 301.319788][T15341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.321700][T15349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3856'. [ 301.336086][T15341] bond8: left promiscuous mode [ 301.591133][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 301.631142][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 301.742139][T15380] netlink: 'syz.5.3868': attribute type 4 has an invalid length. [ 301.761784][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'. [ 301.806314][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'. [ 302.333819][T15427] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 302.616817][T15456] xt_hashlimit: max too large, truncated to 1048576 [ 302.813493][T15455] bridge0: port 5(macvtap1) entered blocking state [ 302.820109][T15455] bridge0: port 5(macvtap1) entered disabled state [ 302.827142][T15455] macvtap1: entered allmulticast mode [ 302.832599][T15455] bridge0: entered allmulticast mode [ 302.838441][T15455] macvtap1: left allmulticast mode [ 302.843765][T15455] bridge0: left allmulticast mode [ 303.533990][T15495] netlink: 'syz.2.3912': attribute type 30 has an invalid length. [ 303.650426][T14881] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.660355][T14881] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.669312][T14881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.685931][T15497] lo speed is unknown, defaulting to 1000 [ 303.686260][T14881] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.740159][T15492] lo speed is unknown, defaulting to 1000 [ 303.823012][T15508] netlink: 'syz.2.3917': attribute type 13 has an invalid length. [ 303.984323][ T64] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.017091][ T64] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.052723][ T64] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.081549][ T64] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.530657][T15541] tipc: Enabling of bearer rejected, failed to enable media [ 304.632934][T15554] xt_hashlimit: max too large, truncated to 1048576 [ 304.751803][T15562] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 304.764315][T15562] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 304.806644][T15562] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 305.093795][T15583] netlink: 'syz.6.3944': attribute type 4 has an invalid length. [ 305.103690][T15583] netlink: 'syz.6.3944': attribute type 4 has an invalid length. [ 305.180236][T15589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15589 comm=syz.6.3946 [ 305.213792][T15589] netlink: 'syz.6.3946': attribute type 1 has an invalid length. [ 305.242191][T15589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.279996][T15589] bond0: (slave dummy0): Releasing backup interface [ 305.290539][T15589] bond2: (slave dummy0): making interface the new active one [ 305.300686][T15589] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 305.440530][T15595] tipc: Enabling of bearer rejected, already enabled [ 305.455005][T15595] tipc: Enabled bearer , priority 10 [ 305.498516][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 305.498597][ T29] audit: type=1326 audit(561.478:22350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.623473][ T29] audit: type=1326 audit(561.508:22351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.646584][ T29] audit: type=1326 audit(561.588:22352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.669850][ T29] audit: type=1326 audit(561.598:22353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.693028][ T29] audit: type=1326 audit(561.608:22354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.723413][ T29] audit: type=1326 audit(561.608:22355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.746458][ T29] audit: type=1326 audit(561.608:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.769514][ T29] audit: type=1326 audit(561.628:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.792697][ T29] audit: type=1326 audit(561.648:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.815837][ T29] audit: type=1326 audit(561.678:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 305.938168][T15616] xt_hashlimit: max too large, truncated to 1048576 [ 305.989423][T15623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15623 comm=syz.5.3960 [ 306.014844][T15623] netlink: 'syz.5.3960': attribute type 1 has an invalid length. [ 306.054717][T15623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.078850][T15626] bond1: (slave dummy0): Releasing active interface [ 306.106883][T15626] bond3: (slave dummy0): making interface the new active one [ 306.123830][T15626] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 306.200609][T15635] __nla_validate_parse: 14 callbacks suppressed [ 306.200629][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 306.229204][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 306.261365][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 306.292263][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3967'. [ 306.322181][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3967'. [ 306.686215][T15666] syzkaller0: entered allmulticast mode [ 306.696401][T15666] syzkaller0: entered promiscuous mode [ 306.717823][T15665] syzkaller0: left promiscuous mode [ 306.725089][T15665] syzkaller0: left allmulticast mode [ 306.733061][T15668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15668 comm=syz.3.3976 [ 306.756721][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3978'. [ 306.765179][T15676] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3979'. [ 306.789728][T15668] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 306.803746][T15676] veth2: left allmulticast mode [ 306.808887][T15676] ip6gre1: left allmulticast mode [ 306.816659][T15676] veth5: left promiscuous mode [ 306.829322][T15674] syzkaller0: entered allmulticast mode [ 306.844179][T15668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.852908][T15679] bond0: (slave dummy0): Releasing backup interface [ 306.862962][T15679] bond9: (slave dummy0): making interface the new active one [ 306.871637][T15679] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 306.880953][T15674] syzkaller0: entered promiscuous mode [ 306.895161][T15684] syzkaller0 (unregistering): left allmulticast mode [ 306.902068][T15684] syzkaller0 (unregistering): left promiscuous mode [ 306.925700][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 306.953684][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 307.023503][T15696] tipc: Enabling of bearer rejected, failed to enable media [ 307.035802][T15689] tipc: Enabling of bearer rejected, failed to enable media [ 307.044734][T15694] lo speed is unknown, defaulting to 1000 [ 307.080290][T15700] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.092753][T15700] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 307.105018][T15700] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 307.177488][T15707] 9p: Bad value for 'rfdno' [ 307.481861][T15717] netlink: 'syz.5.3993': attribute type 4 has an invalid length. [ 307.491084][T15717] netlink: 'syz.5.3993': attribute type 4 has an invalid length. [ 307.532379][T15718] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.046240][T15709] lo speed is unknown, defaulting to 1000 [ 308.197212][T15721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15721 comm=syz.4.3994 [ 308.223350][T15725] lo speed is unknown, defaulting to 1000 [ 308.263682][T15721] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 308.298572][T15721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.326750][T15721] bond3: (slave dummy0): making interface the new active one [ 308.356115][T15721] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 308.513209][T15733] syzkaller0: entered allmulticast mode [ 308.519100][T15733] syzkaller0: entered promiscuous mode [ 308.533081][T15733] syzkaller0 (unregistering): left allmulticast mode [ 308.539854][T15733] syzkaller0 (unregistering): left promiscuous mode [ 308.588833][T15737] netlink: 'syz.4.3999': attribute type 13 has an invalid length. [ 308.651598][T15741] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4000'. [ 308.685535][T15741] bond6: (slave bond0): Releasing backup interface [ 308.693720][T15741] bond0 (unregistering): Released all slaves [ 309.066503][T15756] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 309.343361][T15754] bridge0: port 3(macvtap0) entered blocking state [ 309.350226][T15754] bridge0: port 3(macvtap0) entered disabled state [ 309.473667][T15754] macvtap0: entered allmulticast mode [ 309.479267][T15754] bridge0: entered allmulticast mode [ 309.490467][T15754] macvtap0: left allmulticast mode [ 309.496034][T15754] bridge0: left allmulticast mode [ 309.566732][T15770] syzkaller0: entered allmulticast mode [ 309.580933][T15770] syzkaller0: entered promiscuous mode [ 309.591709][T15769] syzkaller0: left promiscuous mode [ 309.597490][T15769] syzkaller0: left allmulticast mode [ 309.620747][T15775] netlink: 'syz.3.4013': attribute type 13 has an invalid length. [ 310.141288][T15792] sctp: [Deprecated]: syz.4.4019 (pid 15792) Use of int in max_burst socket option. [ 310.141288][T15792] Use struct sctp_assoc_value instead [ 310.545358][T15785] Set syz1 is full, maxelem 65536 reached [ 310.593686][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 310.593718][ T29] audit: type=1326 audit(566.578:22573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.629155][ T29] audit: type=1326 audit(566.578:22574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.652420][ T29] audit: type=1326 audit(566.578:22575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.675578][ T29] audit: type=1326 audit(566.578:22576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.698915][ T29] audit: type=1326 audit(566.578:22577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.722245][ T29] audit: type=1326 audit(566.578:22578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.745334][ T29] audit: type=1326 audit(566.578:22579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.768519][ T29] audit: type=1326 audit(566.578:22580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.791485][ T29] audit: type=1326 audit(566.578:22581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 310.814630][ T29] audit: type=1326 audit(566.578:22582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15799 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3265081667 code=0x7ffc0000 [ 311.028488][T15811] lo speed is unknown, defaulting to 1000 [ 311.182317][T15809] lo speed is unknown, defaulting to 1000 [ 311.496541][T15831] __nla_validate_parse: 5 callbacks suppressed [ 311.496623][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4034'. [ 311.554234][T15834] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 311.578823][T15835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 311.678974][T15837] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 311.690595][T15837] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 311.708446][T15838] gretap1: entered promiscuous mode [ 311.732291][T15838] bond0: (slave gretap1): making interface the new active one [ 311.742151][T15838] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 311.756368][T15834] macvlan2: entered promiscuous mode [ 311.761752][T15834] macvlan2: entered allmulticast mode [ 311.768477][T15834] bond0: entered promiscuous mode [ 311.774464][T15834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.786193][T15834] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 311.821290][T15834] bond0: left promiscuous mode [ 312.068346][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4036'. [ 312.078131][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4036'. [ 312.296728][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4042'. [ 312.305753][T15853] netlink: 'syz.4.4042': attribute type 30 has an invalid length. [ 312.365885][ T3687] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.386364][ T3687] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.410667][ T3687] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.419305][ T3687] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.494049][T15857] lo speed is unknown, defaulting to 1000 [ 313.293050][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 313.305736][T15877] team0: left allmulticast mode [ 313.310681][T15877] team0: left promiscuous mode [ 313.315894][T15877] bridge0: port 1(team0) entered disabled state [ 313.325925][T15877] bond5: (slave bridge0): Releasing backup interface [ 313.342658][T15877] bridge0 (unregistering): left promiscuous mode [ 313.349073][T15877] bridge0 (unregistering): left allmulticast mode [ 313.687071][T15883] lo speed is unknown, defaulting to 1000 [ 313.726662][T15893] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.877152][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4056'. [ 314.171786][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4056'. [ 314.237686][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4058'. [ 314.435554][T15907] bond2: (slave dummy0): Releasing active interface [ 314.463820][T15907] bond1: (slave veth5): Releasing active interface [ 314.793481][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 314.846128][T15929] batadv2: left allmulticast mode [ 314.851218][T15929] batadv2: left promiscuous mode [ 314.856303][T15929] bridge0: port 1(batadv2) entered disabled state [ 314.863833][T15929] batadv1: left allmulticast mode [ 314.868925][T15929] batadv1: left promiscuous mode [ 314.874130][T15929] bridge0: port 2(batadv1) entered disabled state [ 314.952806][T15936] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.437874][T15950] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.467762][T15950] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.623715][T15950] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.678759][T15954] veth0_to_team: entered promiscuous mode [ 315.717774][T15950] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.756605][T15967] netlink: 'syz.5.4080': attribute type 13 has an invalid length. [ 316.079460][T15976] netlink: 'syz.6.4084': attribute type 1 has an invalid length. [ 316.173017][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4084'. [ 316.210028][T15976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.218684][T15952] lo speed is unknown, defaulting to 1000 [ 316.233288][ T3687] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.241586][ T3687] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.327485][T15976] bond3: (slave dummy0): making interface the new active one [ 316.412443][T15976] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 316.489523][T15980] bond3 (unregistering): (slave dummy0): Releasing active interface [ 316.643735][T15980] bond3 (unregistering): Released all slaves [ 316.713971][ T3687] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.750288][ T3687] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.862403][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'. [ 316.885677][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'. [ 317.369394][T16008] netlink: 'syz.2.4095': attribute type 13 has an invalid length. [ 318.041753][T16024] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 318.113616][T16024] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.141892][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4100'. [ 318.269431][T16024] bond9: (slave dummy0): Releasing active interface [ 318.280859][T16024] bond10: (slave dummy0): making interface the new active one [ 318.295773][T16024] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 318.335788][T16024] bond10 (unregistering): (slave dummy0): Releasing active interface [ 318.354296][T16024] bond10 (unregistering): Released all slaves [ 318.748714][T16046] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 318.808480][T16046] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 318.863051][T16046] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 318.880125][T16049] gretap1: entered promiscuous mode [ 318.961601][T16049] bond4: (slave gretap1): making interface the new active one [ 318.992826][T16049] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 319.046346][T16046] macvlan2: entered promiscuous mode [ 319.051677][T16046] macvlan2: entered allmulticast mode [ 319.073582][T16046] bond4: entered promiscuous mode [ 319.079224][T16046] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.107025][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 319.107091][ T29] audit: type=1326 audit(575.088:22955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.139757][T16046] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 319.153507][ T29] audit: type=1326 audit(575.088:22956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.176529][ T29] audit: type=1326 audit(575.088:22957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.199538][ T29] audit: type=1326 audit(575.088:22958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.222767][ T29] audit: type=1326 audit(575.088:22959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.246038][ T29] audit: type=1326 audit(575.088:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.269087][ T29] audit: type=1326 audit(575.088:22961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.292117][ T29] audit: type=1326 audit(575.098:22962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.315210][ T29] audit: type=1326 audit(575.098:22963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.338315][ T29] audit: type=1326 audit(575.098:22964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.5.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fd99301f749 code=0x7ffc0000 [ 319.362328][T16046] bond4: left promiscuous mode [ 319.423088][T16066] lo speed is unknown, defaulting to 1000 [ 319.453254][T16071] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 319.503777][T16071] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 320.723835][T16103] netlink: 'syz.3.4125': attribute type 4 has an invalid length. [ 320.734896][T16105] bond3: (slave dummy0): Releasing active interface [ 320.749793][T16105] batman_adv: batadv0: Removing interface: veth1_vlan [ 320.760493][T16105] bond1: (slave bridge10): Releasing backup interface [ 320.768633][T16109] netlink: 'syz.5.4126': attribute type 1 has an invalid length. [ 320.777516][T16105] bond2: (slave ip6gretap1): Releasing active interface [ 320.784950][T16105] ip6gretap1: left allmulticast mode [ 320.787760][T16111] netlink: 'syz.3.4125': attribute type 4 has an invalid length. [ 320.799741][T16105] bond4: (slave gretap1): Releasing active interface [ 320.833223][T16109] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 320.845005][T16109] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 320.883749][T16117] gretap1: entered promiscuous mode [ 320.891098][T16117] bond4: (slave gretap1): making interface the new active one [ 320.899551][T16117] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 320.916914][T16117] macvlan0: entered promiscuous mode [ 320.922278][T16117] macvlan0: entered allmulticast mode [ 320.930614][T16117] bond4: entered promiscuous mode [ 320.936149][T16117] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 320.947152][T16117] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 320.974815][T16117] bond4: left promiscuous mode [ 321.180890][T16129] netlink: 'syz.5.4131': attribute type 1 has an invalid length. [ 321.190673][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4141'. [ 321.252352][T16129] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 321.272079][T16129] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 321.309736][T16133] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 321.329000][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4141'. [ 321.450853][T16134] macvlan0: entered promiscuous mode [ 321.456263][T16134] macvlan0: entered allmulticast mode [ 321.517258][T16134] bond5: entered promiscuous mode [ 321.567890][T16134] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 321.604378][T16134] bond5: left promiscuous mode [ 322.297231][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 323.014134][T16158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4139'. [ 323.023675][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4139'. [ 323.117361][T16163] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 323.786742][T16181] lo speed is unknown, defaulting to 1000 [ 324.082042][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 324.108995][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 324.143242][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 324.395839][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 324.395856][ T29] audit: type=1326 audit(580.378:23086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.444867][T16202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4157'. [ 324.454175][ T29] audit: type=1326 audit(580.408:23087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.477264][ T29] audit: type=1326 audit(580.408:23088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.500298][ T29] audit: type=1326 audit(580.408:23089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.523411][ T29] audit: type=1326 audit(580.408:23090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.546491][ T29] audit: type=1326 audit(580.408:23091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.569473][ T29] audit: type=1326 audit(580.408:23092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.592470][ T29] audit: type=1326 audit(580.408:23093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.615458][ T29] audit: type=1326 audit(580.408:23094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.638487][ T29] audit: type=1326 audit(580.408:23095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz.2.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f900262f749 code=0x7ffc0000 [ 324.652955][T16208] lo speed is unknown, defaulting to 1000 [ 324.667573][T16206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4157'. [ 324.692814][T16204] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.723142][T16214] netlink: 'syz.2.4160': attribute type 4 has an invalid length. [ 324.733534][T16214] netlink: 'syz.2.4160': attribute type 4 has an invalid length. [ 324.784220][T16204] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.816439][T16204] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.854077][T16204] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.909433][T16223] tipc: Enabling of bearer rejected, failed to enable media [ 324.936829][ T64] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.949132][ T64] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.964055][ T64] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.985117][ T64] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.012124][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 325.038660][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 325.186809][T16234] rdma_op ffff88811a620d80 conn xmit_rdma 0000000000000000 [ 325.353586][T16241] netlink: 'syz.6.4171': attribute type 1 has an invalid length. [ 325.387903][T16241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.476188][T16241] bond3: (slave geneve2): making interface the new active one [ 325.525753][T16241] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 325.562234][T16252] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 325.566830][ T3687] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.606073][T16252] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 325.616952][T16252] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 325.632016][ T3687] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.666154][T16254] bond5: (slave bridge0): Enslaving as an active interface with a down link [ 325.675216][ T3687] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.699627][ T3687] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.778899][T16252] macvlan0: entered promiscuous mode [ 325.784264][T16252] macvlan0: entered allmulticast mode [ 325.813139][T16252] bond5: entered promiscuous mode [ 325.818710][T16252] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.843561][T16252] bond5: left promiscuous mode [ 326.137108][T16266] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.231025][T16266] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.337534][T16266] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.389428][T16247] Set syz1 is full, maxelem 65536 reached [ 326.474188][T16281] 8021q: adding VLAN 0 to HW filter on device .` [ 326.483608][T16281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.514843][T16266] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.622248][ T3687] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.640243][ T3687] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.652411][ T3687] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.670978][ T3687] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.115559][T16296] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.177383][T16296] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.224167][T16296] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.284242][T16296] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.303998][T16306] lo speed is unknown, defaulting to 1000 [ 327.373321][ T3687] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.388519][ T3687] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.427587][ T3687] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.483815][ T3687] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.596929][T16310] __nla_validate_parse: 4 callbacks suppressed [ 327.596949][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4207'. [ 328.053886][T16327] sch_fq: defrate 4294967295 ignored. [ 328.185596][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4204'. [ 328.346491][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4211'. [ 328.367635][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4211'. [ 328.511444][T16347] bridge: RTM_NEWNEIGH with invalid ether address [ 328.653681][T16353] xt_hashlimit: max too large, truncated to 1048576 [ 328.664867][T16353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.778033][T16358] x_tables: duplicate underflow at hook 2 [ 328.828137][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4217'. [ 328.855138][T16366] Cannot find add_set index 0 as target [ 329.085378][T16378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.182461][T16385] netlink: 'syz.2.4224': attribute type 1 has an invalid length. [ 329.197569][T16385] 8021q: adding VLAN 0 to HW filter on device bond14 [ 329.219688][T16385] bond14: (slave geneve3): making interface the new active one [ 329.229233][T16385] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 329.238133][ T42] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.247366][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.255820][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.265322][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.451848][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 329.451909][ T29] audit: type=1400 audit(585.428:23163): avc: denied { accept } for pid=16393 comm="syz.5.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 329.466769][T16397] lo speed is unknown, defaulting to 1000 [ 330.083010][ T29] audit: type=1326 audit(585.968:23164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.106101][ T29] audit: type=1326 audit(585.978:23165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.129131][ T29] audit: type=1326 audit(585.978:23166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.152382][ T29] audit: type=1326 audit(585.978:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.175693][ T29] audit: type=1326 audit(585.978:23168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.198841][ T29] audit: type=1326 audit(585.978:23169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.221978][ T29] audit: type=1326 audit(585.978:23170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.245095][ T29] audit: type=1326 audit(585.978:23171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f326507df90 code=0x7ffc0000 [ 330.268191][ T29] audit: type=1326 audit(585.978:23172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16401 comm="syz.4.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326507f749 code=0x7ffc0000 [ 330.455260][T16417] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4237'. [ 330.472221][T16417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4237'. [ 330.481290][T16417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4237'. [ 330.482763][T16415] lo speed is unknown, defaulting to 1000 [ 330.524937][T16417] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4237'. [ 330.542007][T16417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4237'. [ 330.669957][T16421] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.733419][T16421] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.794514][T16421] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.834957][T16421] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.846031][T16434] lo speed is unknown, defaulting to 1000 [ 330.912855][ T42] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.923853][ T42] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.936581][ T42] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.950342][ T42] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.007341][T16443] tipc: New replicast peer: 255.255.255.255 [ 331.013526][T16443] tipc: Enabled bearer , priority 10 [ 331.067385][T16447] netlink: 'syz.3.4245': attribute type 1 has an invalid length. [ 331.113428][T16447] 8021q: adding VLAN 0 to HW filter on device bond10 [ 331.159980][T16447] bond10: (slave geneve3): making interface the new active one [ 331.171197][T16447] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 331.180209][ T64] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.191197][ T64] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.199600][ T64] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.210971][ T64] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.304872][T16459] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.333840][T16462] sch_fq: defrate 4294967295 ignored. [ 331.354916][T16464] pim6reg: entered allmulticast mode [ 331.361296][T16464] pim6reg: left allmulticast mode [ 331.376623][T16459] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.469878][T16471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.479369][T16471] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.493031][T16471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.545903][T16459] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.566630][T16476] syz.5.4254: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 331.581419][T16476] CPU: 0 UID: 0 PID: 16476 Comm: syz.5.4254 Not tainted syzkaller #0 PREEMPT(voluntary) [ 331.581453][T16476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.581466][T16476] Call Trace: [ 331.581474][T16476] [ 331.581516][T16476] __dump_stack+0x1d/0x30 [ 331.581535][T16476] dump_stack_lvl+0x95/0xd0 [ 331.581623][T16476] dump_stack+0x15/0x1b [ 331.581636][T16476] warn_alloc+0x12b/0x1a0 [ 331.581737][T16476] ? rb_next+0x4b/0x80 [ 331.581758][T16476] __vmalloc_node_range_noprof+0xa0/0x1310 [ 331.581775][T16476] ? __pmu_ctx_sched_in+0x8a/0xb0 [ 331.581790][T16476] ? ctx_sched_in+0x34d/0x370 [ 331.581847][T16476] ? __rcu_read_unlock+0x4f/0x70 [ 331.581926][T16476] ? avc_has_perm_noaudit+0xab/0x130 [ 331.581939][T16476] ? should_fail_ex+0x30/0x280 [ 331.581955][T16476] ? should_failslab+0x8c/0xb0 [ 331.581985][T16476] vmalloc_user_noprof+0x7d/0xb0 [ 331.582002][T16476] ? xskq_create+0x80/0xe0 [ 331.582021][T16476] xskq_create+0x80/0xe0 [ 331.582098][T16476] xsk_init_queue+0x95/0xf0 [ 331.582114][T16476] xsk_setsockopt+0x3f5/0x640 [ 331.582134][T16476] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.582168][T16476] __sys_setsockopt+0x184/0x200 [ 331.582208][T16476] __x64_sys_setsockopt+0x64/0x80 [ 331.582221][T16476] x64_sys_call+0x21d5/0x3000 [ 331.582233][T16476] do_syscall_64+0xca/0x2b0 [ 331.582313][T16476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.582366][T16476] RIP: 0033:0x7fd99301f749 [ 331.582380][T16476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.582422][T16476] RSP: 002b:00007fd991a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.582435][T16476] RAX: ffffffffffffffda RBX: 00007fd993275fa0 RCX: 00007fd99301f749 [ 331.582442][T16476] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 331.582448][T16476] RBP: 00007fd9930a3f91 R08: 0000000000000004 R09: 0000000000000000 [ 331.582455][T16476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.582479][T16476] R13: 00007fd993276038 R14: 00007fd993275fa0 R15: 00007ffd0ed3d6b8 [ 331.582489][T16476] [ 331.582500][T16476] Mem-Info: [ 331.797099][T16476] active_anon:42927 inactive_anon:20 isolated_anon:0 [ 331.797099][T16476] active_file:22145 inactive_file:3077 isolated_file:0 [ 331.797099][T16476] unevictable:16364 dirty:199 writeback:0 [ 331.797099][T16476] slab_reclaimable:3858 slab_unreclaimable:135335 [ 331.797099][T16476] mapped:31867 shmem:25622 pagetables:1482 [ 331.797099][T16476] sec_pagetables:0 bounce:0 [ 331.797099][T16476] kernel_misc_reclaimable:0 [ 331.797099][T16476] free:1654709 free_pcp:20736 free_cma:0 [ 331.842816][T16476] Node 0 active_anon:171708kB inactive_anon:80kB active_file:88580kB inactive_file:12308kB unevictable:65456kB isolated(anon):0kB isolated(file):0kB mapped:127468kB dirty:796kB writeback:0kB shmem:102488kB kernel_stack:5488kB pagetables:5928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.870825][T16476] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.900549][T16476] lowmem_reserve[]: 0 2880 7859 7859 [ 331.905999][T16476] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 331.937286][T16476] lowmem_reserve[]: 0 0 4978 4978 [ 331.942383][T16476] Node 0 Normal free:3657592kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:171708kB inactive_anon:80kB active_file:88580kB inactive_file:12308kB unevictable:65456kB writepending:796kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:79312kB local_pcp:23676kB free_cma:0kB [ 331.976206][T16476] lowmem_reserve[]: 0 0 0 0 [ 331.980846][T16476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.993827][T16476] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 332.010116][T16476] Node 0 Normal: 500*4kB (UE) 1503*8kB (UME) 871*16kB (UM) 678*32kB (UME) 886*64kB (UME) 482*128kB (UME) 281*256kB (UM) 395*512kB (UM) 312*1024kB (UME) 164*2048kB (UME) 625*4096kB (UM) = 3657592kB [ 332.029705][T16476] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 332.039250][T16476] 67228 total pagecache pages [ 332.044012][T16476] 31 pages in swap cache [ 332.048230][T16476] Free swap = 124260kB [ 332.052434][T16476] Total swap = 124996kB [ 332.056586][T16476] 2097051 pages RAM [ 332.060396][T16476] 0 pages HighMem/MovableOnly [ 332.065091][T16476] 81272 pages reserved [ 332.094147][T16459] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.172126][ T3667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.188518][ T3667] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.199229][ T3667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.208015][ T3667] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.239939][T16481] lo speed is unknown, defaulting to 1000 [ 332.339773][T16487] lo speed is unknown, defaulting to 1000 [ 332.358405][T16495] v: renamed from ip6_vti0 (while UP) [ 333.315728][T16505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.380598][T16509] lo speed is unknown, defaulting to 1000 [ 333.527764][T16513] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.586410][T16516] lo speed is unknown, defaulting to 1000 [ 333.614157][T16513] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.754528][T16513] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.834040][T16513] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.856481][T16522] __nla_validate_parse: 8 callbacks suppressed [ 333.856501][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4272'. [ 333.986482][ T3677] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.015788][ T3677] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.035871][ T3677] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.066800][ T3677] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.182808][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 334.191791][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 334.499553][T16545] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.614602][T16545] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.664853][T16551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.677816][T16545] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.723944][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.748966][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4291'. [ 334.773530][T16559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4282'. [ 334.792786][T16549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.810480][T16545] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.844261][T16559] IPVS: Unknown mcast interface: ipvlan1 [ 335.038953][ T3687] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.062883][ T3687] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.089957][ T3687] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.123426][ T3687] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.432687][T16553] ================================================================== [ 335.440812][T16553] BUG: KCSAN: data-race in touch_atime / touch_atime [ 335.447525][T16553] [ 335.449862][T16553] write to 0xffff88811ac41830 of 4 bytes by task 16556 on cpu 0: [ 335.457584][T16553] touch_atime+0x1e8/0x340 [ 335.462037][T16553] shmem_file_read_iter+0x477/0x540 [ 335.467275][T16553] copy_splice_read+0x442/0x660 [ 335.472152][T16553] splice_direct_to_actor+0x290/0x680 [ 335.477683][T16553] do_splice_direct+0xda/0x150 [ 335.482458][T16553] do_sendfile+0x380/0x650 [ 335.486887][T16553] __x64_sys_sendfile64+0x105/0x150 [ 335.492122][T16553] x64_sys_call+0x2db1/0x3000 [ 335.496817][T16553] do_syscall_64+0xca/0x2b0 [ 335.501347][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.507264][T16553] [ 335.509594][T16553] read to 0xffff88811ac41830 of 4 bytes by task 16553 on cpu 1: [ 335.517232][T16553] touch_atime+0x194/0x340 [ 335.521683][T16553] shmem_file_read_iter+0x477/0x540 [ 335.526908][T16553] copy_splice_read+0x442/0x660 [ 335.531781][T16553] splice_direct_to_actor+0x290/0x680 [ 335.537166][T16553] do_splice_direct+0xda/0x150 [ 335.541949][T16553] do_sendfile+0x380/0x650 [ 335.546384][T16553] __x64_sys_sendfile64+0x105/0x150 [ 335.551607][T16553] x64_sys_call+0x2db1/0x3000 [ 335.556305][T16553] do_syscall_64+0xca/0x2b0 [ 335.560938][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.566844][T16553] [ 335.569172][T16553] value changed: 0x18585d8b -> 0x18f0f40b [ 335.574900][T16553] [ 335.577225][T16553] Reported by Kernel Concurrency Sanitizer on: [ 335.583383][T16553] CPU: 1 UID: 0 PID: 16553 Comm: syz.2.4280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 335.593297][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.603382][T16553] ================================================================== [ 335.754068][T16582] ip6gre0: entered promiscuous mode