last executing test programs: 12.194544838s ago: executing program 4 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x6, 0x400) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000001c0)=0xc) rmdir(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x62a83200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1850000000000008000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x61022, &(0x7f0000000680)=ANY=[@ANYRES8=r3, @ANYRES8=r2, @ANYRESHEX, @ANYRES32=r1, @ANYRESDEC=r6, @ANYRES64=r5], 0x1, 0x35a, &(0x7f0000000b00)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r7, 0x5ad, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r9, r10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="ead5", 0x2}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11.551718203s ago: executing program 4 (id=1552): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x5460, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r5, 0x0, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r6, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 11.453091482s ago: executing program 4 (id=1554): syz_emit_ethernet(0x76, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts]}}}}}}}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000200)=@req={0xfffffffc, 0x7, 0x7ffffffe, 0x10}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000301010100000000000000000a0000000c0019"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xfb, 0x4a, 0x1, 0x0, "6f0ce9b54e7fedf25239f7791c280827", "81f11d21543f1375803a7c0526242c3559d81be504381e3ae26c81ae90bf531fbb866f7ac66da39053cfa2823173295e4d9bd4675a"}, 0x4a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000003c0)={0x8, &(0x7f0000000240)=[{0x8, 0x8, 0x3, 0x3}, {0x8, 0x0, 0x2}, {0xd94f, 0x36, 0x2, 0xe6}, {0x2, 0x3, 0x2, 0x7}, {0x9, 0x4, 0x6, 0x9}, {0x4, 0x1c, 0x7, 0x7}, {0x6, 0x3, 0x5, 0x200}, {0x9, 0x1, 0x3, 0x1}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 11.24730179s ago: executing program 1 (id=1556): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}]}, 0x1d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.139895309s ago: executing program 4 (id=1557): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9"}, 0x26) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10.415042292s ago: executing program 1 (id=1563): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000006c0)={@remote, @multicast2, 0x0}, &(0x7f0000000700)=0xc) getpeername$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000080000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32=r12, @ANYBLOB="080004007f8991cb468d9b734b78e9b5215aff000038d54d2344588aec042e05852c38254626bb5c5480aa91822e76b25d2adfb321cbd2c0cf"], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x7, 0x80, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x7800, 0x9, 0x7fff}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)={0x2fc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3fb2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x2000c8c1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c80800c0000000000000000f002e4", @ANYRESDEC=0x0, @ANYBLOB="03000000000000001c0012800e0001006970366772657461700000000800028004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 10.400773863s ago: executing program 4 (id=1564): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x20) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0x10, 0x80000, 0x3) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r2]) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 10.240014208s ago: executing program 1 (id=1565): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 10.184058753s ago: executing program 1 (id=1566): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0a00ff000000009500740000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8010, 0xb3e5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 10.146649996s ago: executing program 4 (id=1567): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@local, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rename(&(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x8, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ptrace(0x10, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x74, 0x30, 0x1, 0x4, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) 9.06800529s ago: executing program 1 (id=1573): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88ef3465afb51a600c76bb8cd86042e1621db431070e0b8892304772067fcab3ecc29139c462f43d599e9e033e615d72d20a827e947eddc39bc0804d50d87f50d406e55af72ab164f168364db3b150cd380061c445c8207e5f4e28afe3909edab455225fb41b26ac3e85e0df7706defb32f9cd13431cda2dbf249fac939bbd0e82202ad35b53a41e9f9f331eedab54c79a45fb5a9f931351e6feea0413ecd10", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 9.007814835s ago: executing program 1 (id=1574): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@local, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rename(&(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x8, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ptrace(0x10, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x74, 0x30, 0x1, 0x4, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3.932607047s ago: executing program 2 (id=1634): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9e5695df65fe3"}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.20516505s ago: executing program 2 (id=1638): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88ef3465afb51a600c76bb8cd86042e1621db431070e0b8892304772067fcab3ecc29139c462f43d599e9e033e615d72d20a827e947eddc39bc0804d50d87f50d406e55af72ab164f168364db3b150cd380061c445c8207e5f4e28afe3909edab455225fb41b26ac3e85e0df7706defb32f9cd13431cda2dbf249fac939bbd0e82202ad35b53a41e9f9f331eedab54c79a45fb5a9f931351e", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 3.124515478s ago: executing program 2 (id=1639): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 3.048854414s ago: executing program 2 (id=1641): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000181200", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 2.838773662s ago: executing program 2 (id=1643): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 2.659231488s ago: executing program 2 (id=1645): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9e5695df65fe39239"}, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.613495322s ago: executing program 0 (id=1646): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9e5695df6"}, 0x2a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.863304627s ago: executing program 0 (id=1649): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000180000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 1.796308153s ago: executing program 0 (id=1650): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 1.729655389s ago: executing program 0 (id=1651): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @dev}, 0x10) sendfile(r1, r0, 0x0, 0xffefffff) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x8010550e, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd01000000"], 0xfdef) getdents64(r3, &(0x7f0000000400)=""/53, 0x35) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) getdents(r3, &(0x7f0000000780)=""/74, 0x4a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@block_validity}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@abort}, {@data_ordered}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfb, 0x54c, &(0x7f0000000400)="$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") r11 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r11, 0x80044801, &(0x7f00000000c0)) sendto$packet(r1, 0x0, 0x0, 0x20048816, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @multicast}, 0x14) 984.568864ms ago: executing program 3 (id=1654): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000181200", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$eJzs3c9LG00YwPFnk2gSfd83Hl5KKS0MFkpLcTGB3nqoFIXSQIuaQi0U1hrbkDWRJAgppXooeO25Bw89lkIp9NZLKb166V/QXzcv3upBOmWzuzE/1hgVrdbv56CPO8+TmezMYhx1s3b1+Vx+NiYu3eMFMiAhCXvxklz6tPL13MTHf9yvlRobmUymlAqJyL0nrwc/VPrvvPvvfVRWB+6vrad+rJ6dFPk1+UhCKldWBa2VpaaLxYrhFM/kynlTqdt21ipnVa5QzpYqXrs1bWfVrF2cn68qq2BEvO6sQlXls1VVKapKqaqsh1auoEzTVP/2CWqT5Qu1tRmdCjOvNrSWda21ji6J1joge8kP/LUR3d9gcZS0zH/H3LbFET7IkeEwbOhI1/OPv497/X97wfyfTBN3p26OpNOj40rFROaWFzILGfez2/6lX3JiS1ZWxi9PbYqzRjxiOB/HbqRHh1XNgFyYW/TqFxcy7jeHkVmvPikJ53WKV7zsLDW/PunWq+b6HulrrE9JQv5v6r9en/LrJdRQ3ysXzzfUm5KQzw+kKLbMOK90G+qfJpW6fivd0n+8lgcAAAAAAAAAwHFkqrqt/Xuj/qveuGlGa3/xUW+PO4edPDehvr8+LAnZDN6fHw7c34/ImcgffOIAAAAAAJwg5erjvGXb2VJrEGk7spcg/DK+fRe93hhskWeDtaDTA57ysrvr3Xns9qZw5y6agvgVt783497AZN9no4sgtosRBgT+P2vkLfut3xSXoOTQTgugKRjqDTzzsZIhB3k2mgPpJlliu3leW0G066XVGhib/pHTgTna2PlxtGX3uEdkawY7Vl3b1eWwbRBrPVFD3+sX5bZ+1rf4AAAAABwjDT84BYkd+oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiB9nTzMP++/c1N4r1FfPst2VrfJ577/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4gn4HAAD//23yqcs=") 583.993879ms ago: executing program 3 (id=1655): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 491.470237ms ago: executing program 3 (id=1656): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 423.088163ms ago: executing program 0 (id=1657): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88ef3465afb51a600c76bb8cd86042e1621db431070e0b8892304772067fcab3ecc29139c462f43d599e9e033e615d72d20a827e947eddc39bc0804d50d87f50d406e55af72ab164f168364db3b150cd380061c445c8207e5f4e28afe3909edab455225fb41b26ac3e85e0df7706defb32f9cd13431cda2dbf249fac939bbd0e82202ad35b53a41e9f9f331eedab54c79a45fb5a9f931351e6feea0413ecd10", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 422.241072ms ago: executing program 3 (id=1658): syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESHEX], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3ff, 0x9, 0xecc, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x0, 0xb, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mq_timedreceive(r2, &(0x7f0000000540)=""/31, 0x1f, 0x9, &(0x7f0000000580)={0x0, 0x3938700}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100006, 0x0, 0x0, {r4}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES16, @ANYRESHEX=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x84}, {0x6}]}, 0x10) r6 = socket(0x200000100000011, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f00000007c0)="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", 0x133, 0x0, &(0x7f0000000000)={0x11, 0x4, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14) 278.476025ms ago: executing program 0 (id=1659): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9e5695df6"}, 0x2a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 51.560725ms ago: executing program 3 (id=1661): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x5460, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfcb8) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1e, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000030000000000000004000000018110000", @ANYRES32, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000000058f6222cd59d5fcbe1a3c10e08190320c929aa6c1e6a815b971b08d2bb26795c7ef2c88ef3465afb51a600c76bb8cd86042e1621db431070e0b8892304772067fcab3ecc29139c462f43d599e9e033e615d72d20a827e947eddc39bc0804d50d87f50d406e55af72ab164f168364db3b150cd380061c445c8207e5f4e28afe3909edab455225fb41b26ac3e85e0df7706defb32f9cd13431cda2dbf249fac939bbd0e82202ad35b53a41e9f9f331eedab54c79a45fb5a9f931351e6feea0413ecd10", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000005", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x20, 0x47, &(0x7f0000000380)=""/71, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x8000, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r1, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x5}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x3, 0xf, 0x9}, {0x5, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x5}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x2, 0xe, 0xb}, {0x4, 0x5, 0x5, 0x6}, {0x3, 0x1, 0xd}, {0x4, 0x0, 0xb, 0x3}], 0x10, 0xae, @void, @value}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x7ff7, 0x3}, {0xd, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000001900)=""/114, 0xd8, 0x72, 0x0, 0x80000001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffe35}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x7, 0x5, 0x5, 0x5, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x3, 0x10, 0x3e, 0xffff}, 0x10, 0x1a522, 0xffffffffffffffff, 0x3, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001ac0)=[{0x1, 0x1, 0x5, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x5, 0x3, 0x8}], 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2fc, &(0x7f0000001780)="$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") 0s ago: executing program 3 (id=1662): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x7, 0xfffffffffffffffe}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '@'}, {0x20, 'GPL\x00'}, {0x20, '@[:*\\\x93+({\\'}], 0xa, "cfc9f35c2e73ea92c9e5695df65fe3"}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000140)=""/196, 0xc4) timerfd_settime(r9, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): uid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.342153][ T7291] hub 9-0:1.0: USB hub found [ 109.354791][ T29] audit: type=1326 audit(1726088873.227:12472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.382929][ T29] audit: type=1326 audit(1726088873.227:12473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.407111][ T29] audit: type=1326 audit(1726088873.227:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.409855][ T7297] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 109.431985][ T29] audit: type=1326 audit(1726088873.227:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.441648][ T7291] hub 9-0:1.0: 8 ports detected [ 109.463535][ T29] audit: type=1326 audit(1726088873.277:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.463665][ T29] audit: type=1326 audit(1726088873.277:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 109.712392][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.723447][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.731814][ T7342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.974'. [ 111.036728][ T7371] siw: device registration error -23 [ 111.247982][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.261462][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.395622][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.404472][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.412211][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.419991][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.427662][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.435444][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.443161][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.450850][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.458549][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.466226][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.473880][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.481587][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.489273][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.496984][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.504662][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.512397][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.520062][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.527849][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.536097][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.544644][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.552422][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.560173][ T24] hid-generic 0000:1000000:0000.000B: unknown main item tag 0x0 [ 112.570196][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.574669][ T24] hid-generic 0000:1000000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.621661][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.636488][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.709389][ T24] IPVS: starting estimator thread 0... [ 112.795199][ T7444] IPVS: using max 2784 ests per chain, 139200 per kthread [ 112.897448][ T7451] siw: device registration error -23 [ 112.982332][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.991909][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.296880][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 113.306384][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 113.340556][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 114.532068][ T7473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7473 comm=syz.1.1015 [ 114.548006][ T7479] can0: slcan on ttyS3. [ 114.590564][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.599357][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.615651][ T7479] can0 (unregistered): slcan off ttyS3. [ 114.621270][ T7479] Falling back ldisc for ttyS3. [ 114.682152][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 114.682176][ T29] audit: type=1326 audit(1726088878.697:12620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 114.743682][ T29] audit: type=1326 audit(1726088878.727:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd489f3c797 code=0x7ffc0000 [ 114.767298][ T29] audit: type=1326 audit(1726088878.727:12622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 114.790833][ T29] audit: type=1326 audit(1726088878.727:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 114.814390][ T29] audit: type=1326 audit(1726088878.727:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd489f3fe17 code=0x7ffc0000 [ 114.837975][ T29] audit: type=1326 audit(1726088878.727:12625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd489f3fd8c code=0x7ffc0000 [ 114.861779][ T29] audit: type=1326 audit(1726088878.727:12626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd489f3fcc4 code=0x7ffc0000 [ 114.885494][ T29] audit: type=1326 audit(1726088878.727:12627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd489f3fcc4 code=0x7ffc0000 [ 114.909824][ T29] audit: type=1326 audit(1726088878.727:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd489f3cb8a code=0x7ffc0000 [ 114.933346][ T29] audit: type=1326 audit(1726088878.727:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 115.023311][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.031132][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.038901][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.046617][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.054260][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.056574][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.061943][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.061967][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.085903][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093604][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093630][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093671][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093731][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093757][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093854][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093877][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093900][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093923][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.093978][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.094001][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.094024][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.094047][ T3341] hid-generic 0000:1000000:0000.000C: unknown main item tag 0x0 [ 115.117667][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.145885][ T3341] hid-generic 0000:1000000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 115.178480][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.187013][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.307292][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 115.352794][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 115.361761][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.369189][ T7536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.399567][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.407217][ T7536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.734238][ T7544] lo speed is unknown, defaulting to 1000 [ 115.740723][ T7544] gre0 speed is unknown, defaulting to 1000 [ 115.745033][ T7556] syz.0.1030[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.746965][ T7556] syz.0.1030[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.008559][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.036723][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.501610][ T7590] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.759245][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.770239][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.777338][ T7606] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 117.346393][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.355014][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.436173][ T7642] syz.0.1061[7642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.436285][ T7642] syz.0.1061[7642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.449729][ T7642] hub 9-0:1.0: USB hub found [ 117.466692][ T7642] hub 9-0:1.0: 8 ports detected [ 117.481134][ T7642] netlink: 'syz.0.1061': attribute type 21 has an invalid length. [ 117.935586][ T7674] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 118.038295][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.076075][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.097692][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.115482][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.247301][ T24] IPVS: starting estimator thread 0... [ 118.342444][ T7698] IPVS: using max 2832 ests per chain, 141600 per kthread [ 118.552812][ T7696] nfs: Unknown parameter '' [ 118.898275][ T7713] syz.2.1076[7713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.898476][ T7713] syz.2.1076[7713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.143312][ T7728] syzkaller1: entered promiscuous mode [ 119.160176][ T7728] syzkaller1: entered allmulticast mode [ 119.236628][ T7734] program syz.2.1082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.292953][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 119.384370][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.417384][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.482476][ T7729] lo speed is unknown, defaulting to 1000 [ 119.500842][ T7729] gre0 speed is unknown, defaulting to 1000 [ 119.511857][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.535542][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.649202][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 119.694031][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 119.694045][ T29] audit: type=1400 audit(1726088883.707:12748): avc: denied { create } for pid=7747 comm="syz.1.1088" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.728915][ T7751] block device autoloading is deprecated and will be removed. [ 119.755844][ T29] audit: type=1400 audit(1726088883.747:12749): avc: denied { read } for pid=7747 comm="syz.1.1088" name="file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.778380][ T29] audit: type=1400 audit(1726088883.747:12750): avc: denied { open } for pid=7747 comm="syz.1.1088" path="/144/file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.810677][ T29] audit: type=1400 audit(1726088883.817:12751): avc: denied { ioctl } for pid=7747 comm="syz.1.1088" path="/144/file0" dev="tmpfs" ino=888 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.841620][ T7749] lo speed is unknown, defaulting to 1000 [ 119.844353][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.855386][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.862695][ T7729] bridge_slave_0: entered allmulticast mode [ 119.869108][ T7729] bridge_slave_0: entered promiscuous mode [ 119.876127][ T7749] gre0 speed is unknown, defaulting to 1000 [ 119.879232][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.889498][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.897953][ T7729] bridge_slave_1: entered allmulticast mode [ 119.898636][ T7729] bridge_slave_1: entered promiscuous mode [ 119.939239][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.950296][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.980541][ T7729] team0: Port device team_slave_0 added [ 119.995449][ T7729] team0: Port device team_slave_1 added [ 120.022243][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.029238][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.055199][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.091894][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.098976][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.099003][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.155573][ T7729] hsr_slave_0: entered promiscuous mode [ 120.162254][ T7729] hsr_slave_1: entered promiscuous mode [ 120.169031][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.177634][ T7729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.189726][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.195226][ T7729] Cannot create hsr debugfs directory [ 120.203676][ T29] audit: type=1400 audit(1726088884.207:12752): avc: denied { read write } for pid=5715 comm="syz-executor" name="loop2" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.228152][ T29] audit: type=1400 audit(1726088884.207:12753): avc: denied { open } for pid=5715 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.252353][ T29] audit: type=1400 audit(1726088884.207:12754): avc: denied { ioctl } for pid=5715 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.310897][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.319707][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.387160][ T7729] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.442904][ T7729] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.507593][ T7729] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.523481][ T29] audit: type=1400 audit(1726088884.537:12755): avc: denied { unlink } for pid=5346 comm="syz-executor" name="file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.559565][ T7778] syzkaller0: entered promiscuous mode [ 120.565062][ T7778] syzkaller0: entered allmulticast mode [ 120.589329][ T7778] bridge0: entered promiscuous mode [ 120.595109][ T7778] bridge0: left promiscuous mode [ 120.602163][ T7729] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.612920][ T29] audit: type=1400 audit(1726088884.617:12756): avc: denied { accept } for pid=7777 comm="syz.2.1098" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.638879][ T29] audit: type=1400 audit(1726088884.627:12757): avc: denied { read } for pid=7777 comm="syz.2.1098" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.731872][ T7729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.741181][ T7729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.755408][ T7729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.772921][ T7729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.813375][ T7785] loop2: detected capacity change from 0 to 128 [ 120.836151][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.853220][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.863989][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.871077][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.884682][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.891879][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.913210][ T7787] loop2: detected capacity change from 0 to 128 [ 120.977531][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.988764][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.007259][ T7790] loop2: detected capacity change from 0 to 128 [ 121.015413][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.056342][ T7801] loop2: detected capacity change from 0 to 128 [ 121.094123][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.103014][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.145336][ T7729] veth0_vlan: entered promiscuous mode [ 121.153647][ T7729] veth1_vlan: entered promiscuous mode [ 121.171425][ T7729] veth0_macvtap: entered promiscuous mode [ 121.179584][ T7729] veth1_macvtap: entered promiscuous mode [ 121.190865][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.201355][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.211202][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.221764][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.232937][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.243870][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.254782][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.264697][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.275231][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.286614][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.300396][ T7729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.309261][ T7729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.318002][ T7729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.326746][ T7729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.362476][ T7822] hub 9-0:1.0: USB hub found [ 121.367470][ T7822] hub 9-0:1.0: 8 ports detected [ 121.878670][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.881874][ T7831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.900258][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.952494][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.961439][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.041867][ T7829] lo speed is unknown, defaulting to 1000 [ 122.048187][ T7829] gre0 speed is unknown, defaulting to 1000 [ 122.281781][ T24] IPVS: starting estimator thread 0... [ 122.359633][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.368966][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.375256][ T7856] IPVS: using max 2832 ests per chain, 141600 per kthread [ 122.425192][ T7863] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.014224][ T7868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.034902][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.045824][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.202677][ T7887] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.873961][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.896470][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.242217][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.245432][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.249686][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.265385][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.272833][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.280259][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.287659][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.295034][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.302514][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.309919][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.317314][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.324869][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.332286][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.339758][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.347208][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.354577][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.362101][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.369513][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.377026][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.384403][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.391864][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.399296][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.406862][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.414247][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.421700][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.429096][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.436687][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.444067][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.451478][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.458923][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.466430][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.473827][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.481245][ T3341] hid-generic 0000:04AD:0000.000D: unknown main item tag 0x0 [ 124.488798][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.489930][ T3341] hid-generic 0000:04AD:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 124.521506][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 124.561925][ T7915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.612130][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.623030][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.718050][ T7936] team0: Port device dummy0 removed [ 124.729227][ T7936] bridge_slave_1: left allmulticast mode [ 124.734897][ T7936] bridge_slave_1: left promiscuous mode [ 124.740716][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.751059][ T7936] @: (slave bond_slave_0): Releasing backup interface [ 124.763885][ T7936] @: (slave bond_slave_1): Releasing backup interface [ 124.778303][ T7936] team0: Port device team_slave_0 removed [ 124.794157][ T7936] team0: Port device team_slave_1 removed [ 124.814487][ T7936] team0: Port device netdevsim1 removed [ 124.850281][ T7939] team0: Port device wg2 added [ 125.006197][ T7947] hub 9-0:1.0: USB hub found [ 125.010958][ T7947] hub 9-0:1.0: 8 ports detected [ 125.409154][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.465749][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.543370][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 125.543385][ T29] audit: type=1400 audit(1726088889.557:12868): avc: denied { create } for pid=7960 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.588178][ T29] audit: type=1400 audit(1726088889.557:12869): avc: denied { setopt } for pid=7960 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.611545][ T29] audit: type=1400 audit(1726088889.627:12870): avc: denied { read } for pid=7964 comm="syz.3.1154" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.635453][ T29] audit: type=1400 audit(1726088889.627:12871): avc: denied { open } for pid=7964 comm="syz.3.1154" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.733394][ T29] audit: type=1400 audit(1726088889.747:12872): avc: denied { mac_admin } for pid=7964 comm="syz.3.1154" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.785666][ T29] audit: type=1400 audit(1726088889.777:12873): avc: denied { relabelto } for pid=7964 comm="syz.3.1154" name="bus" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 125.812049][ T29] audit: type=1400 audit(1726088889.777:12874): avc: denied { associate } for pid=7964 comm="syz.3.1154" name="bus" dev="tmpfs" ino=381 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 125.870480][ T29] audit: type=1400 audit(1726088889.887:12875): avc: denied { bind } for pid=7960 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.890013][ T29] audit: type=1400 audit(1726088889.887:12876): avc: denied { name_bind } for pid=7960 comm="syz.0.1153" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.912204][ T29] audit: type=1400 audit(1726088889.887:12877): avc: denied { node_bind } for pid=7960 comm="syz.0.1153" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 126.049366][ T7975] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 126.268586][ T7988] bridge_slave_0: left allmulticast mode [ 126.274362][ T7988] bridge_slave_0: left promiscuous mode [ 126.280134][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.289337][ T7988] bridge_slave_1: left allmulticast mode [ 126.295071][ T7988] bridge_slave_1: left promiscuous mode [ 126.301047][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.310745][ T7988] bond0: (slave bond_slave_0): Releasing backup interface [ 126.321224][ T7988] bond0: (slave bond_slave_1): Releasing backup interface [ 126.336822][ T7988] team0: Port device team_slave_0 removed [ 126.349728][ T7988] team0: Port device team_slave_1 removed [ 126.362233][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.370029][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.404737][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.412574][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.451644][ T7990] team0: Port device wg2 added [ 126.466988][ T7994] lo speed is unknown, defaulting to 1000 [ 126.474441][ T7994] gre0 speed is unknown, defaulting to 1000 [ 127.114004][ T8011] hub 9-0:1.0: USB hub found [ 127.119086][ T8011] hub 9-0:1.0: 8 ports detected [ 127.418888][ T8018] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 127.426744][ T8018] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 127.426758][ T8018] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1170'. [ 127.527870][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.529520][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.560162][ T8023] bridge0: entered allmulticast mode [ 127.568533][ T8023] pim6reg: entered allmulticast mode [ 127.712842][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 127.721849][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 127.744117][ T8035] bond0: entered promiscuous mode [ 127.749321][ T8035] bond0: entered allmulticast mode [ 127.754553][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.768903][ T8035] bond0 (unregistering): Released all slaves [ 128.185567][ T8045] bond0: entered allmulticast mode [ 128.244799][ T8057] random: crng reseeded on system resumption [ 128.401540][ T8071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 128.408209][ T8071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.415907][ T8071] vhci_hcd vhci_hcd.0: Device attached [ 128.450064][ T8073] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 128.458422][ T3364] vhci_hcd: stop threads [ 128.462716][ T3364] vhci_hcd: release socket [ 128.467261][ T3364] vhci_hcd: disconnect device [ 128.584369][ T8096] pim6reg1: entered promiscuous mode [ 128.589795][ T8096] pim6reg1: entered allmulticast mode [ 128.647682][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 128.759285][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.767995][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.807932][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.816457][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.064045][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 129.073479][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1194'. [ 129.123081][ T8131] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 129.313709][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 129.323047][ T8141] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1200'. [ 129.332871][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'. [ 129.342487][ T8141] vlan0: entered allmulticast mode [ 129.348004][ T8141] veth0_vlan: entered allmulticast mode [ 129.425802][ T8147] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 129.441329][ T8147] ip6erspan0: entered promiscuous mode [ 129.772118][ T8173] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 129.952849][ T8180] __nla_validate_parse: 3 callbacks suppressed [ 129.952863][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 130.007471][ T3448] udevd[3448]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 130.090409][ T8185] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1214'. [ 130.092424][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.099450][ T8185] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1214'. [ 130.125476][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.189021][ T8185] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 130.343382][ T8198] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.362544][ T8198] vhci_hcd: invalid port number 219 [ 130.367834][ T8198] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 130.379647][ T8198] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1219'. [ 130.390167][ T8198] futex_wake_op: syz.3.1219 tries to shift op by 32; fix this program [ 130.793420][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 130.793434][ T29] audit: type=1326 audit(1726088894.800:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.824247][ T29] audit: type=1326 audit(1726088894.800:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.847826][ T29] audit: type=1326 audit(1726088894.800:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.871555][ T29] audit: type=1326 audit(1726088894.800:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.895294][ T29] audit: type=1326 audit(1726088894.800:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.919181][ T29] audit: type=1326 audit(1726088894.800:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.942911][ T29] audit: type=1326 audit(1726088894.800:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 130.966481][ T29] audit: type=1326 audit(1726088894.800:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f157e8ec890 code=0x7ffc0000 [ 130.990066][ T29] audit: type=1326 audit(1726088894.800:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f157e8ef727 code=0x7ffc0000 [ 131.013565][ T29] audit: type=1326 audit(1726088894.800:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f157e8edef9 code=0x7ffc0000 [ 131.230439][ T8236] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 131.328873][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.347385][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.356555][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 131.371664][ T8248] @: renamed from bond0 (while UP) [ 131.388865][ T8248] lo speed is unknown, defaulting to 1000 [ 131.394944][ T8248] gre0 speed is unknown, defaulting to 1000 [ 132.190890][ T8275] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 132.199101][ T8275] dvmrp1: linktype set to 805 [ 132.302356][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 132.335230][ T8282] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 132.335230][ T8282] program syz.3.1245 not setting count and/or reply_len properly [ 132.427624][ T8293] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1246'. [ 132.437102][ T8293] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1246'. [ 132.818059][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.828946][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.038039][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 133.060920][ T8322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8322 comm=syz.3.1254 [ 133.225814][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 133.235640][ T8328] vhci_hcd: default hub control req: 0017 v0000 i0000 l0 [ 134.001797][ T8349] sctp: [Deprecated]: syz.0.1266 (pid 8349) Use of int in maxseg socket option. [ 134.001797][ T8349] Use struct sctp_assoc_value instead [ 134.071433][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.080628][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.109151][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.117742][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.385066][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.393662][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.754207][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.762748][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.893485][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.902298][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.430378][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 135.571195][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.581219][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.590525][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.599336][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.235740][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 136.235753][ T29] audit: type=1326 audit(1726088900.250:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.243882][ T8404] syzkaller1: entered promiscuous mode [ 136.265858][ T29] audit: type=1326 audit(1726088900.250:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.270903][ T8404] syzkaller1: entered allmulticast mode [ 136.294348][ T29] audit: type=1326 audit(1726088900.250:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.323629][ T29] audit: type=1326 audit(1726088900.250:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.324741][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.347190][ T29] audit: type=1326 audit(1726088900.250:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.347221][ T29] audit: type=1326 audit(1726088900.250:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.402416][ T29] audit: type=1326 audit(1726088900.250:13499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.404276][ T8407] siw: device registration error -23 [ 136.425808][ T29] audit: type=1326 audit(1726088900.250:13500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.425835][ T29] audit: type=1326 audit(1726088900.250:13501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.425859][ T29] audit: type=1326 audit(1726088900.250:13502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6d04ddef9 code=0x7ffc0000 [ 136.472107][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.097392][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.108242][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.132287][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.142688][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.744702][ T8431] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.749035][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.768916][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.532437][ T8450] xt_cgroup: path and classid specified [ 138.555671][ T8452] syzkaller1: entered promiscuous mode [ 138.561774][ T8452] syzkaller1: entered allmulticast mode [ 138.592558][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.601807][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.647242][ T8462] bridge0: entered allmulticast mode [ 138.655415][ T8462] pim6reg: entered allmulticast mode [ 138.658604][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.669703][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.693945][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.702620][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.263910][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.272556][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.314778][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.323355][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.383435][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.393607][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.404886][ T8481] netlink: 'syz.2.1309': attribute type 10 has an invalid length. [ 139.416789][ T8481] team0: Device dummy0 is of different type [ 139.915675][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.917049][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.923094][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.938851][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.946260][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.953724][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.961244][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.968660][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.972541][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.976052][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.976077][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 139.999277][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.006665][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.014037][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.021645][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.029052][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.036493][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.043872][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.051278][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.058730][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.066139][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.073597][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.081048][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.088491][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.095977][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.103490][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.111002][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.111024][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.111044][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.111063][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.111083][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.148189][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.148240][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.148262][ T3334] hid-generic 0000:04AD:0000.000E: unknown main item tag 0x0 [ 140.151877][ T3334] hid-generic 0000:04AD:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 140.180237][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.187002][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.289916][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.298899][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.865698][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.886194][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.951598][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.972546][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.978873][ T8512] lo speed is unknown, defaulting to 1000 [ 140.996898][ T8512] gre0 speed is unknown, defaulting to 1000 [ 141.142133][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 141.159831][ T8535] 9pnet_fd: Insufficient options for proto=fd [ 141.233550][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.240721][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.249099][ T8512] bridge_slave_0: entered allmulticast mode [ 141.256019][ T8512] bridge_slave_0: entered promiscuous mode [ 141.257407][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.269279][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.269815][ T8512] bridge_slave_1: entered allmulticast mode [ 141.270212][ T8512] bridge_slave_1: entered promiscuous mode [ 141.328886][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.349805][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.546568][ T8512] team0: Port device team_slave_0 added [ 141.555459][ T8512] team0: Port device team_slave_1 added [ 141.571442][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.583427][ T8548] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 141.591618][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 141.591651][ T29] audit: type=1400 audit(1726088905.610:13650): avc: denied { write } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.592333][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.616405][ T29] audit: type=1400 audit(1726088905.610:13651): avc: denied { remove_name } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.649879][ T29] audit: type=1400 audit(1726088905.610:13652): avc: denied { rename } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.672399][ T29] audit: type=1400 audit(1726088905.610:13653): avc: denied { add_name } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.695081][ T29] audit: type=1400 audit(1726088905.610:13654): avc: denied { unlink } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.717668][ T29] audit: type=1400 audit(1726088905.610:13655): avc: denied { create } for pid=2943 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.734379][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.751725][ T8548] team0: Port device dummy0 added [ 141.781384][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.788482][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.790133][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.814511][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.838683][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.845890][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.871865][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.904376][ T29] audit: type=1400 audit(1726088905.910:13656): avc: denied { setopt } for pid=8556 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.935276][ T8512] hsr_slave_0: entered promiscuous mode [ 141.947089][ T8512] hsr_slave_1: entered promiscuous mode [ 141.963533][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.973957][ T8512] Cannot create hsr debugfs directory [ 142.022912][ T29] audit: type=1400 audit(1726088906.030:13657): avc: denied { execute } for pid=8556 comm="syz.3.1331" path="/98/blkio.bfq.avg_queue_size" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.070572][ T8512] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.102631][ T29] audit: type=1400 audit(1726088906.110:13658): avc: denied { write } for pid=8556 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.124377][ T8512] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.157702][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.166402][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.175727][ T8512] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.227128][ T8512] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.289457][ T8512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.300899][ T8512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.309455][ T8512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.318109][ T8512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.355166][ T29] audit: type=1326 audit(1726088906.360:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8563 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 142.360338][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.391165][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.400841][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.407971][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.421521][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.428639][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.437539][ T8564] pim6reg1: entered promiscuous mode [ 142.442850][ T8564] pim6reg1: entered allmulticast mode [ 142.478600][ T8567] netlink: 'syz.4.1334': attribute type 7 has an invalid length. [ 142.499410][ T8567] lo speed is unknown, defaulting to 1000 [ 142.505485][ T8567] gre0 speed is unknown, defaulting to 1000 [ 142.542354][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.650231][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.654888][ T8512] veth0_vlan: entered promiscuous mode [ 142.665813][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.669142][ T8512] veth1_vlan: entered promiscuous mode [ 142.692960][ T8512] veth0_macvtap: entered promiscuous mode [ 142.700899][ T8512] veth1_macvtap: entered promiscuous mode [ 142.705551][ T8588] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.713941][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.713961][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.713970][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.744802][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.760436][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.789496][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.800095][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.809941][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.820663][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.845403][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.855062][ T8512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.863853][ T8512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.872606][ T8512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.874646][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.881383][ T8512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.888798][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.905032][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.912536][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.919975][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.927553][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.935047][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.942582][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.950007][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.957415][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.964928][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.972383][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.979810][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.987205][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 142.994591][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.001999][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.009479][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.017185][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.024577][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.032059][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.039526][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.047159][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.054562][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.061973][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.069523][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.076952][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.084423][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.091825][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.099226][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.106725][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.114141][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.121570][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.129053][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.136526][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.143988][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.151441][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.158956][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.166474][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.173979][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.181497][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.188904][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.196528][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.203903][ T3420] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 143.213329][ T3420] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 143.306031][ T8605] ALSA: seq fatal error: cannot create timer (-22) [ 143.314795][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.323575][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.360653][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.369838][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.037810][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.075323][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.185846][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 152.185860][ T29] audit: type=1400 audit(1726088916.200:13725): avc: denied { read } for pid=8631 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.274108][ T29] audit: type=1326 audit(1726088916.230:13726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.297827][ T29] audit: type=1326 audit(1726088916.230:13727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.321486][ T29] audit: type=1326 audit(1726088916.230:13728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.345154][ T29] audit: type=1326 audit(1726088916.230:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.368728][ T29] audit: type=1326 audit(1726088916.230:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.392300][ T29] audit: type=1326 audit(1726088916.230:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.415797][ T29] audit: type=1326 audit(1726088916.230:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.415823][ T29] audit: type=1326 audit(1726088916.230:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.415847][ T29] audit: type=1326 audit(1726088916.230:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd7b7def9 code=0x7ffc0000 [ 152.503098][ T8623] lo speed is unknown, defaulting to 1000 [ 152.503437][ T8623] gre0 speed is unknown, defaulting to 1000 [ 152.758505][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 152.859271][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 152.868482][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.875696][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.923612][ T8623] bridge_slave_0: entered allmulticast mode [ 152.940345][ T8623] bridge_slave_0: entered promiscuous mode [ 152.954318][ T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.998984][ T8666] lo speed is unknown, defaulting to 1000 [ 153.007628][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.014696][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.050062][ T8623] bridge_slave_1: entered allmulticast mode [ 153.070323][ T8623] bridge_slave_1: entered promiscuous mode [ 153.104138][ T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.124538][ T8666] gre0 speed is unknown, defaulting to 1000 [ 153.161323][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.171959][ T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.196371][ T8676] xt_policy: neither incoming nor outgoing policy selected [ 153.197949][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.246467][ T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.307362][ T8623] team0: Port device team_slave_0 added [ 153.349756][ T8623] team0: Port device team_slave_1 added [ 153.595886][ T8684] Invalid option length (234) for dns_resolver key [ 153.607978][ T8686] siw: device registration error -23 [ 153.681496][ T28] bridge0 (unregistering): left allmulticast mode [ 153.759536][ T28] @ (unregistering): Released all slaves [ 153.788450][ T28] bond1 (unregistering): Released all slaves [ 153.850382][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.850396][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.850469][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.851023][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.851032][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.851052][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.873340][ T8701] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 153.917206][ T8693] sit0: entered allmulticast mode [ 153.925400][ T8697] sit0: entered promiscuous mode [ 154.021750][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.021867][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.124349][ T8623] hsr_slave_0: entered promiscuous mode [ 154.151432][ T8623] hsr_slave_1: entered promiscuous mode [ 154.162486][ T8623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.162501][ T8623] Cannot create hsr debugfs directory [ 154.181553][ T28] hsr_slave_0: left promiscuous mode [ 154.186388][ T28] hsr_slave_1: left promiscuous mode [ 154.614385][ T28] veth1_macvtap: left promiscuous mode [ 154.619931][ T28] veth0_macvtap: left promiscuous mode [ 154.625486][ T28] veth1_vlan: left promiscuous mode [ 154.630728][ T28] veth0_vlan: left promiscuous mode [ 154.694950][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.717558][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.839673][ T28] pim6reg (unregistering): left allmulticast mode [ 155.054080][ T28] team0 (unregistering): Port device wg2 removed [ 155.142851][ T8722] netlink: 'syz.4.1374': attribute type 10 has an invalid length. [ 155.150738][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1374'. [ 155.195247][ T8722] vlan0: entered promiscuous mode [ 155.202428][ T8722] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 155.258719][ T8726] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 155.493006][ T28] IPVS: stop unused estimator thread 0... [ 155.706151][ T8738] syz.0.1378 (8738) used greatest stack depth: 9312 bytes left [ 155.772764][ T8623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.825582][ T8623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.875556][ T8623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.925089][ T8623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.005582][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.037362][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.154346][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.223389][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.281368][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.288554][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.357764][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.364856][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.649121][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.923817][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 156.950372][ T8623] veth0_vlan: entered promiscuous mode [ 157.061215][ T8623] veth1_vlan: entered promiscuous mode [ 157.142033][ T8623] veth0_macvtap: entered promiscuous mode [ 157.168277][ T8623] veth1_macvtap: entered promiscuous mode [ 157.220479][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.230956][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.240887][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.251333][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.261206][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.271702][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.433463][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 157.433492][ T29] audit: type=1326 audit(1726088921.440:13988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.496979][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.506787][ T8861] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1392'. [ 157.567092][ T29] audit: type=1326 audit(1726088921.480:13989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.590768][ T29] audit: type=1326 audit(1726088921.480:13990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.614391][ T29] audit: type=1326 audit(1726088921.480:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.637893][ T29] audit: type=1326 audit(1726088921.480:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.661536][ T29] audit: type=1326 audit(1726088921.490:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.684962][ T29] audit: type=1326 audit(1726088921.490:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.708613][ T29] audit: type=1326 audit(1726088921.490:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.732090][ T29] audit: type=1326 audit(1726088921.500:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.756032][ T29] audit: type=1326 audit(1726088921.500:13997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x7ffc0000 [ 157.871463][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.882118][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.891997][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.902474][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.912554][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.923389][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.126112][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.165925][ T8623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.174761][ T8623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.183543][ T8623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.192435][ T8623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.202541][ T8878] syz.0.1395[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.202737][ T8878] syz.0.1395[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.287682][ T8878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.457284][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.525076][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.548365][ T8892] hub 9-0:1.0: USB hub found [ 158.553655][ T8892] hub 9-0:1.0: 8 ports detected [ 159.335206][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.407567][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 159.631270][ T8916] lo speed is unknown, defaulting to 1000 [ 159.661035][ T8916] gre0 speed is unknown, defaulting to 1000 [ 160.385191][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.446333][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 160.721257][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'. [ 160.747867][ T8958] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1405'. [ 160.756980][ T8958] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1405'. [ 161.065887][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'. [ 161.697658][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1410'. [ 161.784302][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1412'. [ 161.793466][ T8978] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1412'. [ 161.845522][ T8976] raw_sendmsg: syz.0.1411 forgot to set AF_INET. Fix it! [ 162.016982][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.063454][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.368689][ T8991] random: crng reseeded on system resumption [ 162.738842][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 162.792590][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 162.792604][ T29] audit: type=1400 audit(1726088926.800:14306): avc: denied { connect } for pid=9002 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.886365][ T9044] random: crng reseeded on system resumption [ 162.898216][ T9009] bond1: entered promiscuous mode [ 162.903325][ T9009] bond1: entered allmulticast mode [ 162.925549][ T29] audit: type=1400 audit(1726088926.890:14307): avc: denied { unmount } for pid=4273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.945543][ T29] audit: type=1400 audit(1726088926.900:14308): avc: denied { append } for pid=9043 comm="syz.0.1419" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.979183][ T9009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.046968][ T9009] bond1 (unregistering): Released all slaves [ 163.133880][ T9044] SELinux: Context target default is not valid (left unmapped). [ 163.143040][ T29] audit: type=1400 audit(1726088927.140:14309): avc: denied { getopt } for pid=9043 comm="syz.0.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.179992][ T9046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 163.186617][ T9046] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.194250][ T9046] vhci_hcd vhci_hcd.0: Device attached [ 163.244699][ T29] audit: type=1400 audit(1726088927.210:14310): avc: denied { create } for pid=9043 comm="syz.0.1419" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=7461726765742064656661756C74 [ 163.268519][ T29] audit: type=1400 audit(1726088927.210:14311): avc: denied { associate } for pid=9043 comm="syz.0.1419" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=7461726765742064656661756C74 [ 163.293318][ T29] audit: type=1400 audit(1726088927.210:14312): avc: denied { read append open } for pid=9043 comm="syz.0.1419" path="/265/bus" dev="tmpfs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=7461726765742064656661756C74 [ 163.377105][ T9082] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 163.398860][ T59] vhci_hcd: stop threads [ 163.403217][ T59] vhci_hcd: release socket [ 163.407797][ T59] vhci_hcd: disconnect device [ 163.446560][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.453170][ T3336] vhci_hcd: vhci_device speed not set [ 163.495550][ T29] audit: type=1400 audit(1726088927.360:14313): avc: denied { create } for pid=9092 comm="syz.2.1422" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.516468][ T29] audit: type=1400 audit(1726088927.400:14314): avc: denied { write } for pid=9092 comm="syz.2.1422" name="file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.538905][ T29] audit: type=1400 audit(1726088927.400:14315): avc: denied { open } for pid=9092 comm="syz.2.1422" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.616425][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.667507][ T9102] lo speed is unknown, defaulting to 1000 [ 163.713079][ T28] team0: Port device netdevsim1 removed [ 163.731577][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.797027][ T9102] gre0 speed is unknown, defaulting to 1000 [ 163.821846][ T9086] lo speed is unknown, defaulting to 1000 [ 163.884735][ T9093] netlink: 'syz.2.1422': attribute type 5 has an invalid length. [ 163.899182][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.958252][ T9086] gre0 speed is unknown, defaulting to 1000 [ 164.166494][ T28] bridge_slave_1: left allmulticast mode [ 164.172213][ T28] bridge_slave_1: left promiscuous mode [ 164.177939][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.275371][ T28] bridge_slave_0: left allmulticast mode [ 164.281185][ T28] bridge_slave_0: left promiscuous mode [ 164.286998][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.423153][ T9188] hub 9-0:1.0: USB hub found [ 164.428156][ T9188] hub 9-0:1.0: 8 ports detected [ 164.684791][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.704228][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.945381][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.977418][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.008692][ T28] bond0 (unregistering): Released all slaves [ 165.273880][ T9224] __nla_validate_parse: 1 callbacks suppressed [ 165.273892][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1438'. [ 165.379637][ T28] hsr_slave_0: left promiscuous mode [ 165.503000][ T28] hsr_slave_1: left promiscuous mode [ 165.541260][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1438'. [ 165.587633][ T28] veth1_macvtap: left promiscuous mode [ 165.593173][ T28] veth0_macvtap: left promiscuous mode [ 165.598800][ T28] veth1_vlan: left promiscuous mode [ 165.604056][ T28] veth0_vlan: left promiscuous mode [ 165.630184][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.674228][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.946616][ T28] team0 (unregistering): Port device team_slave_1 removed [ 166.010517][ T28] team0 (unregistering): Port device team_slave_0 removed [ 166.098300][ T28] team0 (unregistering): Port device dummy0 removed [ 166.115598][ T9250] siw: device registration error -23 [ 166.282195][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 166.411683][ T9382] syz.4.1440: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 166.426542][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.4.1440 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 166.437257][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 166.447382][ T9382] Call Trace: [ 166.450663][ T9382] [ 166.453608][ T9382] dump_stack_lvl+0xf2/0x150 [ 166.458219][ T9382] dump_stack+0x15/0x20 [ 166.462393][ T9382] warn_alloc+0x145/0x1b0 [ 166.466741][ T9382] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 166.472692][ T9382] ? visit_groups_merge+0x1b43/0x1b90 [ 166.478156][ T9382] __vmalloc_node_range_noprof+0xaa/0xec0 [ 166.483961][ T9382] ? event_sched_out+0x45e/0x4a0 [ 166.488958][ T9382] ? __rcu_read_unlock+0x4e/0x70 [ 166.493926][ T9382] ? avc_has_perm_noaudit+0x1cc/0x210 [ 166.499430][ T9382] ? xskq_create+0x36/0xd0 [ 166.503911][ T9382] vmalloc_user_noprof+0x59/0x70 [ 166.508874][ T9382] ? xskq_create+0x79/0xd0 [ 166.513404][ T9382] xskq_create+0x79/0xd0 [ 166.517652][ T9382] xsk_init_queue+0x82/0xd0 [ 166.522156][ T9382] xsk_setsockopt+0x409/0x520 [ 166.526852][ T9382] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.532089][ T9382] __sys_setsockopt+0x1d8/0x250 [ 166.537127][ T9382] __x64_sys_setsockopt+0x66/0x80 [ 166.542207][ T9382] x64_sys_call+0x278d/0x2d60 [ 166.546887][ T9382] do_syscall_64+0xc9/0x1c0 [ 166.551390][ T9382] ? clear_bhb_loop+0x55/0xb0 [ 166.556061][ T9382] ? clear_bhb_loop+0x55/0xb0 [ 166.560814][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.566722][ T9382] RIP: 0033:0x7f550fa1def9 [ 166.571130][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.590784][ T9382] RSP: 002b:00007f550e691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.599228][ T9382] RAX: ffffffffffffffda RBX: 00007f550fbd5f80 RCX: 00007f550fa1def9 [ 166.607220][ T9382] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 166.615182][ T9382] RBP: 00007f550fa90b76 R08: 0000000000000020 R09: 0000000000000000 [ 166.623144][ T9382] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 166.631138][ T9382] R13: 0000000000000000 R14: 00007f550fbd5f80 R15: 00007ffc9b641ca8 [ 166.639124][ T9382] [ 166.642191][ T9382] Mem-Info: [ 166.645577][ T9382] active_anon:35568 inactive_anon:16 isolated_anon:0 [ 166.645577][ T9382] active_file:4653 inactive_file:21978 isolated_file:0 [ 166.645577][ T9382] unevictable:0 dirty:366 writeback:0 [ 166.645577][ T9382] slab_reclaimable:2883 slab_unreclaimable:19131 [ 166.645577][ T9382] mapped:21984 shmem:21196 pagetables:875 [ 166.645577][ T9382] sec_pagetables:0 bounce:0 [ 166.645577][ T9382] kernel_misc_reclaimable:0 [ 166.645577][ T9382] free:1857000 free_pcp:5900 free_cma:0 [ 166.690762][ T9382] Node 0 active_anon:142272kB inactive_anon:64kB active_file:18612kB inactive_file:87912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87944kB dirty:1476kB writeback:0kB shmem:84732kB writeback_tmp:0kB kernel_stack:3344kB pagetables:3384kB sec_pagetables:0kB all_unreclaimable? no [ 166.718993][ T9382] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.745867][ T9382] lowmem_reserve[]: 0 2866 7844 0 [ 166.751088][ T9382] Node 0 DMA32 free:2950336kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 166.779722][ T9382] lowmem_reserve[]: 0 0 4978 0 [ 166.784616][ T9382] Node 0 Normal free:4462392kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:142156kB inactive_anon:64kB active_file:18612kB inactive_file:87912kB unevictable:0kB writepending:1476kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:20236kB local_pcp:18364kB free_cma:0kB [ 166.815255][ T9382] lowmem_reserve[]: 0 0 0 0 [ 166.815285][ T9382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.815389][ T9382] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950336kB [ 166.815639][ T9382] Node 0 Normal: 302*4kB (UME) 912*8kB (UME) 394*16kB (UME) 347*32kB (UME) 386*64kB (UME) 181*128kB (UME) 189*256kB (UME) 89*512kB (UME) 78*1024kB (UME) 48*2048kB (UME) 1005*4096kB (UM) = 4462392kB [ 166.815810][ T9382] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 166.815825][ T9382] 47814 total pagecache pages [ 166.815830][ T9382] 0 pages in swap cache [ 166.815834][ T9382] Free swap = 124528kB [ 166.815840][ T9382] Total swap = 124996kB [ 166.895683][ T9382] 2097051 pages RAM [ 166.895726][ T9382] 0 pages HighMem/MovableOnly [ 166.895742][ T9382] 80167 pages reserved [ 166.903801][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.032653][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.075975][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.076012][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.076114][ T9086] bridge_slave_0: entered allmulticast mode [ 167.076505][ T9086] bridge_slave_0: entered promiscuous mode [ 167.077532][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.077568][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.077688][ T9086] bridge_slave_1: entered allmulticast mode [ 167.078179][ T9086] bridge_slave_1: entered promiscuous mode [ 167.148976][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.150363][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.195956][ T9086] team0: Port device team_slave_0 added [ 167.197010][ T9086] team0: Port device team_slave_1 added [ 167.247848][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.247862][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.247887][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.248507][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.248516][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.248537][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.334165][ T9086] hsr_slave_0: entered promiscuous mode [ 167.335269][ T9086] hsr_slave_1: entered promiscuous mode [ 167.336290][ T9086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.336303][ T9086] Cannot create hsr debugfs directory [ 167.944789][ T9086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.999675][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 167.999690][ T29] audit: type=1326 audit(1726088932.010:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.033547][ T9086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.062355][ T9086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.098373][ T9086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.104849][ T29] audit: type=1326 audit(1726088932.010:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.125171][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.128991][ T29] audit: type=1326 audit(1726088932.010:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.160874][ T29] audit: type=1326 audit(1726088932.010:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.160901][ T29] audit: type=1326 audit(1726088932.010:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.207954][ T29] audit: type=1326 audit(1726088932.010:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.231581][ T29] audit: type=1326 audit(1726088932.010:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.255522][ T29] audit: type=1326 audit(1726088932.010:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.279224][ T29] audit: type=1326 audit(1726088932.010:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.302705][ T29] audit: type=1326 audit(1726088932.010:14337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9650 comm="syz.2.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dad96def9 code=0x7ffc0000 [ 168.332648][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.406871][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.477740][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.518142][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.525224][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.601237][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 168.602264][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.617221][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.687090][ T9680] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 168.694920][ T9086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.695380][ T9680] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 168.705639][ T9086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.738334][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.765576][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.003950][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.043361][ T9703] lo speed is unknown, defaulting to 1000 [ 169.092056][ T9703] gre0 speed is unknown, defaulting to 1000 [ 169.285675][ T9086] veth0_vlan: entered promiscuous mode [ 169.292004][ T9086] veth1_vlan: entered promiscuous mode [ 169.319530][ T9086] veth0_macvtap: entered promiscuous mode [ 169.374828][ T9086] veth1_macvtap: entered promiscuous mode [ 169.389487][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.389556][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.389566][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.389578][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.389589][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.389602][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.389611][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.389703][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.390489][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.395890][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.395907][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.395919][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.395931][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.395941][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.395951][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.395965][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.395977][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.404863][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.420379][ T9086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.603955][ T9086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.603986][ T9086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.621503][ T9086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.882646][ T9756] lo speed is unknown, defaulting to 1000 [ 169.883045][ T9756] gre0 speed is unknown, defaulting to 1000 [ 170.074857][ T9768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.421497][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.436085][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 171.476995][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.510496][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.545391][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.733887][ T9903] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.742823][ T9903] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 172.287767][ T9911] syz.1.1478[9911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.287827][ T9911] syz.1.1478[9911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.769458][ T9938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.799370][ T9943] lo speed is unknown, defaulting to 1000 [ 172.820167][ T9943] gre0 speed is unknown, defaulting to 1000 [ 172.878939][ T9950] lo speed is unknown, defaulting to 1000 [ 172.950430][ T9950] gre0 speed is unknown, defaulting to 1000 [ 173.109624][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.118125][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.149818][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.157707][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.344064][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 173.344078][ T29] audit: type=1400 audit(1726088937.350:14520): avc: denied { shutdown } for pid=10000 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.375252][T10003] ucma_write: process 23 (syz.3.1490) changed security contexts after opening file descriptor, this is not allowed. [ 173.428782][ T3420] IPVS: starting estimator thread 0... [ 173.439169][T10005] tipc: Started in network mode [ 173.444087][T10005] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.464802][T10005] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.471871][T10005] tipc: Enabled bearer , priority 10 [ 173.515215][T10006] IPVS: using max 2880 ests per chain, 144000 per kthread [ 173.531238][ T29] audit: type=1400 audit(1726088937.540:14521): avc: denied { read append } for pid=10004 comm="syz.3.1491" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 173.556117][ T29] audit: type=1400 audit(1726088937.540:14522): avc: denied { open } for pid=10004 comm="syz.3.1491" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 173.595216][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.649340][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 173.658584][T10014] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1493'. [ 173.667727][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 173.677429][T10014] vlan0: entered allmulticast mode [ 173.682625][T10014] veth0_vlan: entered allmulticast mode [ 173.735274][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.859650][T10029] block device autoloading is deprecated and will be removed. [ 173.875238][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.914168][ T29] audit: type=1326 audit(1726088937.920:14523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10028 comm="syz.4.1495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f550fa1def9 code=0x0 [ 174.012838][T10044] syz.3.1501[10044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.012923][T10044] syz.3.1501[10044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.025168][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.061948][T10047] xt_SECMARK: invalid security context 'unconfined' [ 174.070256][T10039] lo speed is unknown, defaulting to 1000 [ 174.083567][ T29] audit: type=1400 audit(1726088938.090:14524): avc: denied { name_bind } for pid=10040 comm="syz.2.1500" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 174.095610][T10039] gre0 speed is unknown, defaulting to 1000 [ 174.136307][T10053] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.165171][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.205222][ T29] audit: type=1326 audit(1726088938.200:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918b6edef9 code=0x7ffc0000 [ 174.228840][ T29] audit: type=1326 audit(1726088938.200:14526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918b6edef9 code=0x7ffc0000 [ 174.252506][ T29] audit: type=1326 audit(1726088938.200:14527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f918b6edef9 code=0x7ffc0000 [ 174.276067][ T29] audit: type=1326 audit(1726088938.200:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918b6edef9 code=0x7ffc0000 [ 174.299889][ T29] audit: type=1326 audit(1726088938.200:14529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918b6edef9 code=0x7ffc0000 [ 174.323487][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.458031][ T24] tipc: Node number set to 2886997162 [ 174.560668][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.577686][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.590443][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.605166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.625675][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.756169][T10088] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1507'. [ 174.765275][T10088] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1507'. [ 174.813123][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1507'. [ 174.867287][T10088] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 174.875720][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.085427][T10102] block device autoloading is deprecated and will be removed. [ 175.210553][T10111] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.241665][T10107] cgroup2: Unknown parameter 'memory_locale˜ents' [ 175.323584][T10117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.356166][T10107] xt_CT: No such helper "syz0" [ 175.367202][T10117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.535524][T10128] netlink: 'syz.3.1519': attribute type 10 has an invalid length. [ 175.586804][T10128] team0: Failed to send options change via netlink (err -105) [ 175.594302][T10128] team0: Port device netdevsim1 added [ 175.600059][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1519'. [ 175.654568][ T28] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 175.698782][T10134] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1518'. [ 176.313995][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.357512][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.416958][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.461416][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.972520][T10184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.383281][T10207] IPv6: Can't replace route, no match found [ 177.549018][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.566945][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.578423][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.596485][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.063396][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.083702][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.310831][T10263] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1547'. [ 178.336876][T10263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1547'. [ 178.378462][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 178.378474][ T29] audit: type=1400 audit(1726088942.390:15071): avc: denied { mount } for pid=10262 comm="syz.2.1547" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.411536][T10263] Invalid ELF header type: 3 != 1 [ 178.462164][ T29] audit: type=1400 audit(1726088942.420:15072): avc: denied { sys_module } for pid=10262 comm="syz.2.1547" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 178.483540][ T29] audit: type=1400 audit(1726088942.420:15073): avc: denied { module_load } for pid=10262 comm="syz.2.1547" path=2F6D656D66643A21202864656C6574656429 dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 178.509008][ T29] audit: type=1400 audit(1726088942.460:15074): avc: denied { getopt } for pid=10275 comm="syz.4.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.530157][T10279] lo speed is unknown, defaulting to 1000 [ 178.535962][ C1] net_ratelimit: 3 callbacks suppressed [ 178.535991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.630830][T10279] gre0 speed is unknown, defaulting to 1000 [ 178.685077][ T29] audit: type=1400 audit(1726088942.620:15075): avc: denied { unmount } for pid=8623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.705210][ T29] audit: type=1400 audit(1726088942.640:15076): avc: denied { execute } for pid=10276 comm="syz.1.1549" path="/53/cpu.stat" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.728290][ T29] audit: type=1400 audit(1726088942.640:15077): avc: denied { read } for pid=3000 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 178.749439][ T29] audit: type=1400 audit(1726088942.660:15078): avc: denied { search } for pid=3000 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.770902][ T29] audit: type=1400 audit(1726088942.660:15079): avc: denied { read } for pid=3000 comm="dhcpcd" name="n87" dev="tmpfs" ino=4447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.792704][ T29] audit: type=1400 audit(1726088942.660:15080): avc: denied { open } for pid=3000 comm="dhcpcd" path="/run/udev/data/n87" dev="tmpfs" ino=4447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.198983][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 179.447065][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.472493][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.503371][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.511511][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.585170][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.280673][T10438] program syz.4.1564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.615175][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.624332][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 180.644922][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 180.730045][T10466] 9pnet_fd: p9_fd_create_tcp (10466): problem connecting socket to 127.0.0.1 [ 180.899780][T10476] hub 9-0:1.0: USB hub found [ 180.904756][T10476] hub 9-0:1.0: 8 ports detected [ 181.335983][T10455] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 181.400421][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.411477][T10455] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 181.442025][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.655232][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.724643][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.765217][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.072867][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.121302][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.696026][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.704493][T10578] program syz.0.1587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.809421][T10580] hub 9-0:1.0: USB hub found [ 182.814189][T10580] hub 9-0:1.0: 8 ports detected [ 183.195974][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.225257][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.415723][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.446741][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.735166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.947482][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.972175][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 183.972188][ T29] audit: type=1400 audit(1726088947.980:15139): avc: denied { create } for pid=10620 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 183.998485][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.035150][ T29] audit: type=1400 audit(1726088947.980:15140): avc: denied { create } for pid=10620 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 184.128417][ T29] audit: type=1326 audit(1726088948.140:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x0 [ 184.378849][ T29] audit: type=1400 audit(1726088948.390:15142): avc: denied { create } for pid=10632 comm="syz.3.1604" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.385367][T10633] block device autoloading is deprecated and will be removed. [ 184.399862][ T29] audit: type=1400 audit(1726088948.390:15143): avc: denied { write } for pid=10632 comm="syz.3.1604" name="file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.429885][ T29] audit: type=1400 audit(1726088948.390:15144): avc: denied { open } for pid=10632 comm="syz.3.1604" path="/37/file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.527612][ T29] audit: type=1400 audit(1726088948.500:15145): avc: denied { setopt } for pid=10632 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.547474][ T29] audit: type=1400 audit(1726088948.510:15146): avc: denied { unlink } for pid=9086 comm="syz-executor" name="file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.595868][T10638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.618734][T10638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.775177][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.970737][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.004503][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.307297][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.345261][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.458555][ T29] audit: type=1400 audit(1726088949.460:15147): avc: denied { create } for pid=10670 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.815166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.120916][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.151750][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.456662][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.487485][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.656583][ T29] audit: type=1326 audit(1726088950.670:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd489f3def9 code=0x7ffc0000 [ 186.716537][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.746681][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.865167][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.876391][T10714] team0: Port device wg2 removed [ 186.962009][T10716] team0: Port device wg2 added [ 187.895193][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.057049][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.080848][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.096909][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.104886][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.380170][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.407257][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.945214][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.026459][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 189.026474][ T29] audit: type=1400 audit(1726088953.030:15172): avc: denied { write } for pid=10769 comm="syz.0.1651" path="socket:[29439]" dev="sockfs" ino=29439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 189.097101][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.104423][ T29] audit: type=1400 audit(1726088953.100:15173): avc: denied { read write } for pid=10769 comm="syz.0.1651" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.104539][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.128227][ T29] audit: type=1400 audit(1726088953.100:15174): avc: denied { open } for pid=10769 comm="syz.0.1651" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.135564][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.167364][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.174849][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.182325][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.189831][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.197342][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.204719][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.212150][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.219666][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.227078][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.234544][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.241950][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.248741][T10773] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.249494][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.264177][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.271737][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.279249][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.286664][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.294129][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.301552][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.309061][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.316462][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.323843][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.331250][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.338703][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.346156][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.353552][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.353580][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.353602][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.353624][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.353643][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 189.393719][ T29] audit: type=1400 audit(1726088953.250:15175): avc: denied { mount } for pid=10769 comm="syz.0.1651" name="/" dev="gadgetfs" ino=29447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 189.975271][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.077599][ T8] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 190.228349][ T29] audit: type=1400 audit(1726088954.240:15176): avc: denied { unmount } for pid=4273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.406348][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.429208][ T29] audit: type=1400 audit(1726088954.440:15177): avc: denied { setopt } for pid=10797 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.455272][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.516967][ T29] audit: type=1400 audit(1726088954.490:15178): avc: denied { write } for pid=10797 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.597749][ T29] audit: type=1400 audit(1726088954.610:15179): avc: denied { mounton } for pid=10811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 190.631137][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.640562][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.669877][T10811] lo speed is unknown, defaulting to 1000 [ 190.675994][T10811] gre0 speed is unknown, defaulting to 1000 [ 190.749656][T10811] chnl_net:caif_netlink_parms(): no params data found [ 190.784476][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.791763][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.799114][T10811] bridge_slave_0: entered allmulticast mode [ 190.806009][T10811] bridge_slave_0: entered promiscuous mode [ 190.813179][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.820271][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.827492][T10811] bridge_slave_1: entered allmulticast mode [ 190.833981][T10811] bridge_slave_1: entered promiscuous mode [ 190.853191][T10495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.873610][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.884203][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.901488][T10495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.916946][T10507] ================================================================== [ 190.925041][T10507] BUG: KCSAN: data-race in alloc_pid / copy_process [ 190.931627][T10507] [ 190.933935][T10507] read-write to 0xffffffff8665d8f8 of 4 bytes by task 59 on cpu 1: [ 190.941827][T10507] alloc_pid+0x542/0x6f0 [ 190.946060][T10507] copy_process+0xff8/0x1f90 [ 190.950637][T10507] kernel_clone+0x167/0x5e0 [ 190.955125][T10507] user_mode_thread+0x7d/0xb0 [ 190.959802][T10507] call_usermodehelper_exec_work+0x41/0x150 [ 190.965698][T10507] process_scheduled_works+0x483/0x9a0 [ 190.971177][T10507] worker_thread+0x526/0x6e0 [ 190.975764][T10507] kthread+0x1d1/0x210 [ 190.979817][T10507] ret_from_fork+0x4b/0x60 [ 190.984311][T10507] ret_from_fork_asm+0x1a/0x30 [ 190.989071][T10507] [ 190.991376][T10507] read to 0xffffffff8665d8f8 of 4 bytes by task 10507 on cpu 0: [ 190.999093][T10507] copy_process+0x15e3/0x1f90 [ 191.003755][T10507] kernel_clone+0x167/0x5e0 [ 191.008243][T10507] user_mode_thread+0x7d/0xb0 [ 191.012927][T10507] call_usermodehelper_exec_work+0x41/0x150 [ 191.018838][T10507] process_scheduled_works+0x483/0x9a0 [ 191.024287][T10507] worker_thread+0x526/0x6e0 [ 191.028878][T10507] kthread+0x1d1/0x210 [ 191.032931][T10507] ret_from_fork+0x4b/0x60 [ 191.037370][T10507] ret_from_fork_asm+0x1a/0x30 [ 191.042123][T10507] [ 191.044427][T10507] value changed: 0x800000e1 -> 0x800000e2 [ 191.050123][T10507] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 191.052426][T10507] Reported by Kernel Concurrency Sanitizer on: [ 191.058552][T10507] CPU: 0 UID: 0 PID: 10507 Comm: kworker/u8:13 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 191.069572][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.079627][T10507] Workqueue: events_unbound call_usermodehelper_exec_work [ 191.086748][T10507] ================================================================== [ 191.095189][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.104698][ T29] audit: type=1400 audit(1726088955.110:15180): avc: denied { write } for pid=3248 comm="syz-executor" path="pipe:[1589]" dev="pipefs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 191.106441][T10811] team0: Port device team_slave_0 added [ 191.148465][T10495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.160997][T10811] team0: Port device team_slave_1 added [ 191.179834][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.187080][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.213048][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.262167][T10495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.422075][T10495] bond0 (unregistering): Released all slaves [ 191.611077][T10495] hsr_slave_0: left promiscuous mode [ 191.636779][T10495] hsr_slave_1: left promiscuous mode [ 191.653216][T10495] veth1_macvtap: left promiscuous mode [ 191.658829][T10495] veth0_macvtap: left promiscuous mode [ 191.664435][T10495] veth1_vlan: left promiscuous mode [ 191.670148][T10495] veth0_vlan: left allmulticast mode [ 191.675494][T10495] veth0_vlan: left promiscuous mode [ 191.798800][T10495] team0 (unregistering): Port device wg2 removed [ 192.029193][T10495] IPVS: stop unused estimator thread 0... [ 192.080471][T10495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.135196][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.145151][T10495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.188669][T10495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.229042][T10495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.287836][T10495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.318660][T10495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.368442][T10495] team0: Port device netdevsim1 removed [ 192.377047][T10495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.428278][T10495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.506963][T10495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.569486][T10495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.608622][T10495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.658643][T10495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.717724][T10495] bridge_slave_1: left allmulticast mode [ 192.723404][T10495] bridge_slave_1: left promiscuous mode [ 192.729119][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.737487][T10495] bridge_slave_0: left allmulticast mode [ 192.743202][T10495] bridge_slave_0: left promiscuous mode [ 192.748976][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.757803][T10495] bridge_slave_1: left allmulticast mode [ 192.763525][T10495] bridge_slave_1: left promiscuous mode [ 192.769262][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.777205][T10495] bridge_slave_0: left allmulticast mode [ 192.782989][T10495] bridge_slave_0: left promiscuous mode [ 192.788680][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.796767][T10495] bridge_slave_1: left allmulticast mode [ 192.802424][T10495] bridge_slave_1: left promiscuous mode [ 192.808181][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.815836][T10495] bridge_slave_0: left allmulticast mode [ 192.821463][T10495] bridge_slave_0: left promiscuous mode [ 192.827106][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.835000][T10495] bridge_slave_1: left allmulticast mode [ 192.840666][T10495] bridge_slave_1: left promiscuous mode [ 192.846387][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.853911][T10495] bridge_slave_0: left allmulticast mode [ 192.859601][T10495] bridge_slave_0: left promiscuous mode [ 192.865403][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.175250][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.257496][T10495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.267854][T10495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.277880][T10495] bond0 (unregistering): Released all slaves [ 193.286964][T10495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.297392][T10495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.307517][T10495] bond0 (unregistering): Released all slaves [ 193.316252][T10495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.326667][T10495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.336804][T10495] bond0 (unregistering): Released all slaves [ 193.346313][T10495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.356357][T10495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.366131][T10495] bond0 (unregistering): Released all slaves [ 193.398774][T10495] tipc: Disabling bearer [ 193.403840][T10495] tipc: Left network mode [ 193.497922][ T29] audit: type=1400 audit(1726088957.500:15181): avc: denied { sys_chroot } for pid=11307 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 193.630834][T10495] hsr_slave_0: left promiscuous mode [ 193.638031][T10495] hsr_slave_1: left promiscuous mode [ 193.643797][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.651341][T10495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.661492][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.669111][T10495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.680206][T10495] hsr_slave_0: left promiscuous mode [ 193.685970][T10495] hsr_slave_1: left promiscuous mode [ 193.691758][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.699216][T10495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.708535][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.715972][T10495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.724673][T10495] hsr_slave_0: left promiscuous mode [ 193.731545][T10495] hsr_slave_1: left promiscuous mode [ 193.737479][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.744850][T10495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.752645][T10495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.760164][T10495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.767982][T10495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.778992][T10495] veth1_macvtap: left promiscuous mode [ 193.784538][T10495] veth0_macvtap: left promiscuous mode [ 193.790079][T10495] veth1_vlan: left promiscuous mode [ 193.795343][T10495] veth0_vlan: left promiscuous mode [ 193.800963][T10495] veth1_macvtap: left promiscuous mode [ 193.806523][T10495] veth0_macvtap: left promiscuous mode [ 193.812109][T10495] veth1_vlan: left promiscuous mode [ 193.817460][T10495] veth0_vlan: left allmulticast mode [ 193.822759][T10495] veth0_vlan: left promiscuous mode [ 193.828590][T10495] veth1_macvtap: left promiscuous mode [ 193.834064][T10495] veth0_macvtap: left promiscuous mode [ 193.839600][T10495] veth1_vlan: left promiscuous mode [ 193.844853][T10495] veth0_vlan: left promiscuous mode [ 194.000923][T10495] team0 (unregistering): Port device team_slave_1 removed [ 194.010703][T10495] team0 (unregistering): Port device team_slave_0 removed [ 194.066917][T10495] team0 (unregistering): Port device team_slave_1 removed [ 194.076864][T10495] team0 (unregistering): Port device team_slave_0 removed [ 194.136119][T10495] team0 (unregistering): Port device team_slave_1 removed [ 194.146567][T10495] team0 (unregistering): Port device team_slave_0 removed [ 194.181310][T10495] team0 (unregistering): Port device team_slave_1 removed [ 194.191418][T10495] team0 (unregistering): Port device team_slave_0 removed [ 194.931355][T10495] IPVS: stop unused estimator thread 0...