last executing test programs: 5m57.502209197s ago: executing program 0 (id=296): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x40000000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x8) write(r3, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x4}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 5m57.387384338s ago: executing program 0 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000840)=""/242) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) unshare(0x2c020400) listen(r8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m56.353508186s ago: executing program 0 (id=306): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18) openat(r7, &(0x7f0000000040)='./file0\x00', 0x0, 0x18) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xee00, 0xee01) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8}) 5m56.236875947s ago: executing program 0 (id=298): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x804400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cD3iq+SFu1M0tg2uCgVxF1BrfsYkkkImWRCZtI2oZQU/wBBRBeuXLkR/AME6cZ9EQq6FxGl2FYXLtSRO3PHxnQmGV4nM+3k84HTe+6P3O/3dDq399x7yAng1LoQEbciYiQiLkdEPtuey0rsN0t63MsXD5bSkkS9fudvSSTZtta5kmx5Pvux8Yj4bnJgxwHV3b31xXK5tJ2tF2sbW8Xq7t6VtY3F1dJqaXNubvb6/I35a/MzPWvrzW/++Sc//MW3bv7mq/f+uPDXSw/TtCazfQfb0UvNpo81/i5aRiNi+ySCDcBI1p6xLo8/e8L5AABwtPQe/7MR8aXG/X8+Rhp3cwAAAMAwqScR/0oi6gAAAMDQyjXGwCa5QjYWYDJyuUKhOYb383EuV65Ua19ZqexsLjfHyk7FWG5lrVyaycYKT8VYkq7PNuqv1q8eWp+LiPcj4sf5iWTlbJQKS5Xy8qAffgAAAMApcf5Q//8f+Wb/HwAAABgyU4NOAAAAADhx+v8AAAAw/Dr2/xOTAQAAAMAQ+Pbt22mpt+a/Xr67u7NeuXtluVRdL2zsLBWWKttbhdVKZbVcKixVNo47X7lS2fpabO7cL9ZK1Vqxuru3sFHZ2awtNOb1Xih1O080AAAA0Dvvf/z4D0lE7H99olFSZ7J9+uow3HLHHzJxoJ6cZC5Af40MOgFgYD7dAF/DgmEYHNfHf16v9ykTYFCO69iPd9rxpPe5AAAAJ2P6C53f/wPDrYv3/23c6nkeQP95/w+nlzf5cHoZ4w+82ft/g4QAAOBdMNkoSa6QvQucjFyuUIh4rzEtwFiyslYuzUTEZyLi9/mxs+n67KCTBgAAAAAAAAAAAAAAAAAAAAAAAIB3TL2eRP2wM69vAgAAAN5dEbm/JNn8X9P5i5OHnw+cSf6Zbywj4t7P7vz0/mKttj2bbn+efzVrWLb9at8fXwAAAACp3/7/aquf3urHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP1ZPmcunliwdL/Qz87BsRMRWRxm2V5p7RGG8sx2MsIs79PYnRAz+X5jvSg/j7jyLig3bxkzStmMqyOBw/FxETA45/vgfx4TR7nF5/brX7/uXiQmPZ/vs3mpU39exCp+tf7n/Xv5EO17/3uozx4dNfFTvGfxTx4Wj7608rftIh/iddxv/+9/b2Ou2r/zxiOtrHPxirWNvYKlZ3966sbSyullZLm3Nzs9fnb8xfm58prqyVS9mfbWP86Iu//s9R7T/XIf7UMe2/2GX7//30/ovPvbb14dVW/EuftP/8Pzgifvpv4svZ/wPp/ulWfb9ZP+ijX/7uo6Pav9yh/cd9/pe6bP/l7/zgT10eCgD0QXV3b32xXC5tH1l5Escf079K6z7kbcknvRdKKzf7F7T16KGXZ/44Pd+JJj8Rb8XnpdJNZYAXJQAA4ES8uukfdCYAAAAAAAAAAAAAAAAAAABwevXj14kNuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN34bwAAAP//tfDGOw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r0}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) 5m55.703992147s ago: executing program 0 (id=310): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000008c0)='asymmetric\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)="1092ad558c5b794f09573df2b79328c1eebaebf3c374f58430995e4153e077c50bced18e09c2296044c885f7160cb36eb801fd527a1a8d01a7c01f9079e145e66328fe7d1151425fccfb63aaf63697739fcbe04cb82982a5bd408ae0e6c8e4560538034e563c37a9df7512fd7424634e10be73886518eeec46cea294ed218ed4edd260a8701728e3423e1871c8ea9351c8a12d5064b76db8c1109ae76c40479a50f7b0fbb812e794718fbd4da105a7d218c5bd75c6352cc21a8456663c17cdbeeab2e7cd40c33af447ce88537193c50e7324b4eae2", 0xd5, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/108, 0x6c}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file2\x00', 0x40) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000006c0)={0x0, 0xb409, 0x3180, 0x1, 0x30b, 0x0, r1}, &(0x7f0000000680)=0x0, &(0x7f0000000340)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1, 0x9, 0x1, 0x3, 0x40, 0xcfd, 0xbc}, &(0x7f0000000880)=0x9c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) fcntl$notify(r6, 0x402, 0x1) getdents64(r6, &(0x7f0000000180)=""/183, 0xb7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 5m55.111772843s ago: executing program 0 (id=301): socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10004, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) writev(r0, 0x0, 0x0) sync() ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5m55.111114974s ago: executing program 32 (id=301): socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10004, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) writev(r0, 0x0, 0x0) sync() ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.876564522s ago: executing program 2 (id=3040): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x88800) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) read(r1, &(0x7f0000000180)=""/65, 0x41) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000900)="b745cdd59e12", 0x6}], 0x1, 0x4000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x8, 0x0, 0x0, 0x7999}, 0x8, 0x6da00000, 0x0, 0x48000000, 0x0, 0x3, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) close(r4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x6}, 0x10) 3.742614535s ago: executing program 2 (id=3041): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x15, &(0x7f0000000000)={0x17, 0x3, 0x80}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1921d91d43a", @ANYRES16=r5, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f00000002c0)=""/126) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 3.560481592s ago: executing program 4 (id=3043): syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b58000000000000000000000000000000000000f0117280b575ad18f193ba592068edf8c4e7497cceb7a20078a774c3d70b3919f4558b69ab1ea142f1a768e37aa2e8c34dabef66b5622fa75a7072773e1ba6f3af2e021b1d494030fa8dc70db9df8a645bd16604704c9d475a76605dd11cf49eab64238e3d62a78eb58fde78fe0f3735f9af17f9c80234b95eaf244b1dc4cff394d80d61461a2c4b909b3851387202bdf868837d03952ac237ec439801d4d313b24578b35ef3ff35537a9643dbba7a983d7ecd24e5dd8add98d0c3aa785946acba12fa53692631c8e1d90c8d7aec0705a9a4b92c48822947060b8a57c2baaabca57b5b49", @ANYRES32=0x0, @ANYBLOB="00000000000200"/26], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080008000000007b8af8ff00000000bf030000204036db58b0b7036fa28bcd593cc4d9ca392a4c0d858b0bdf52fe276d89f70a62c24ef12dc3249d08f70000b704eb200000000085"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x6e}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) socket$kcm(0x2, 0x922000000001, 0x106) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$packet(0x11, 0x3, 0x300) 3.359623872s ago: executing program 1 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x88c, 0x30, 0x937, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0x0, 0x0, 0x1, 0x3, 0x2, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x15, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0xb, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x6, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x4, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat(r1, &(0x7f0000000940)='./bus\x00', 0x480, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000900)={&(0x7f0000000400), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000170a010200000000000000000a0000080900020073797a31000000000c0005400000008179f500000000020800074000"], 0x34}}, 0x7e63ae424bd49347) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000380)={0x8, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f00000000c0)}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000780)=""/211, 0xd3}], &(0x7f0000000280)=[0x8, 0x5, 0x5, 0xe1b, 0x3, 0x2, 0xb]}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005fd21ea5bc08aafac0deabe5ea6243dbd4e381ce793456d89e63d670844b85311317c90e85cd8bf090ae7feb0c492266d7cb156ec13f767231f1b831643f56177e721d0dc80f84c6624bab2e5f36f7e638618b3b71a3915bc80e875a3bb27ae7efa951ae3416db404ad920ec68e13f8b7af53afdf20555ab633aae1a3e05346ea272b43d406c609c41b97443b022da9f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f0000000000)=""/177) 3.136512253s ago: executing program 1 (id=3045): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xcf5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x8d, 0x8, 0x10, 0x9}, 0x54, &(0x7f0000000340)={0x5, 0xf, 0x54, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x5, 0x0, 0x2b55}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cbb4badea8191f5dda87e3020436c005"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x63, 0xfc, 0x6, 0x5, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x7f, 0x3, 0x7ff}, @ssp_cap={0x18, 0x10, 0xa, 0xfe, 0x3, 0x2, 0x871e, 0x12a, [0xf, 0xff00c0, 0xf]}]}, 0x4, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "23ba"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "68a0251e58b236956ed396006f81d0adbb244c2ef3dd095647562e331583dd2459fabad9be463a85cc7291ac07a254604c2e29d23ee220ee3023574616245036e7594f157ba44304beaa9d078de72e5677036086f23b8df2942395888e6e5794ffe46b17255e98de1c413b2f2b0375a1518d3fd46fb164f51acd8644a7c52bf29fb2c3d792ed05dd6d486ccbab7c5c46771585d700ffa2ca56cd4ebb1525df46d9fc4c83b379d1d7065cf4f724bcd9eae1cd76d1455a291e604550eb395a34b1430902d876c6c19d59863a1683ddb9dac0cd83671e6ca63cd4ac7b39dbcb6774ff09436b2e3dd535925f2026872aed"}}, {0xd5, &(0x7f0000000ac0)=@string={0xd5, 0x3, "6b5197c618c5372123da25687de4c1c4ac3e191817a0252c7fb58d9190dcdf6aba1966d8a1b4fd3b0e187f01409a47c6a72db7772910f26526ab404bdc137bfdfb55ea8bee9d92225feb98e8d9a3b3feeed0b404bd60f2bc0db05f1577ecc7be20ced860bd7a0e1937f8a4bd2be38b4bfd12ea61471039d45be9525e9ac5f783092b63e241de0c32f28240dd72a7620f0a88298f0d0f392b61cc8bc830295fb7b5cbc23b89cd61e68be27b2f135d941f534cfce99ef0d574572690127286452ce36c289e5e7158a13bac94693bdc148fc534bd"}}, {0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "0ae092b0c609087f1309040845f154a4e18d68ab7dc01bed8385a27a9bc99163b2be7c7b58e8a7b24e18876519ab25561feea16f8bbd7846fe3cca43d060ec2f545574f57796cb73d6402d3d76a8f117d5f5c0"}}]}) syz_usb_control_io(r2, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x40, 0xc, 0x98, {0x98, 0xb, "fa282b855ab959187d1712e617d3046ece91110f88b9c851794f30ba3edb1b40a89d3f6ce9dfc776b89480d0424f65e9aeb370b83a94d6a02aa0d0354deda917bf31667f42851cc2af89787533590fc6f9336a68737210d1a716be1a118edaef7dc1855d02c57e241257f15c51420406bba0ac87cc3e2136bbc81be8fe7799b3783cfbb2846f1e7359979ff00a6e1fa84db65003032c"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x37, @string={0x37, 0x3, "d6a54fe27b5f8db88217c85b01d5848d6856aafcbbfa57e7d4c4e7f1a802aab6d68c9aeabb50f1fd2bda487edc5a05254d44983913"}}, &(0x7f0000000980)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x5, 0x5, "9622985c", "a2852055"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x10, 0x6, 0x2, 0x1d, 0xd759, 0x6}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x40, 0xd, 0x93, "7cb044dd9fbf0601f16678b2ee7330a29b93ae774899430cb9cc41074da26018303bb53261bb2dfcf021ffb696e047552418ea09dbfb87b52445e5c7d39e0a0d1c94dd1ed725712807a6c2b1675c7e0f384e9db94f55bccdaaa976af9cdbe57e5bf0284f223abeafe5e811f32bb1c237e918d627a743fae020763ab3a2113121d29286114bc08ba532325c5f85ac9d37917176"}, 0x0, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf000]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000001000)={0x40, 0xb, 0x2, "6091"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001080)={0x40, 0x13, 0x6, @local}, &(0x7f00000010c0)={0x40, 0x17, 0x6}, &(0x7f0000001100)={0x40, 0x19, 0x2, "2ddf"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x41cfaa655c5b4876}, 0xc) futimesat(0xffffffffffffffff, 0x0, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) socket(0x21, 0x5, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.915284634s ago: executing program 5 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80c2, 0x41012}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x0, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r5, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x200000}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000100)="e6a0d6907dc2f6", &(0x7f0000000440)=""/183}, 0x20) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$TCSETSW2(r7, 0x5453, 0x0) 2.899625355s ago: executing program 4 (id=3047): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) fcntl$getown(r3, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) 2.553919768s ago: executing program 2 (id=3049): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) tgkill(r5, r9, 0x8) 2.518615471s ago: executing program 4 (id=3050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x8, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfff, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r4, 0x0, 0x1, 0x4}}, 0x20) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0) close(r5) r7 = socket(0x11, 0x2, 0x800001) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000240)="f2f64405eeca36ed9c5e40", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.447183308s ago: executing program 4 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) getuid() r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="834ec1d449594140ec7cd849b7c8102c41e3f0dca515470324ad4b0aa65364316fe674110b7c727744b2f37a93b77b35ccb8e87c616bc84d3297853814466c08ba6cae359bb1ce46140003c076f89f4cb267d0092e9c9634c7f7a2d05607208792276023dc797dbe05", @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="51ed0b6e23267ed03d74bcc66308f1fbd562cdc245173478935ca1d1bc30029915b26caef9b72fb0de1a8be170931bc86650534531c7347e69d84140b4c41e5afc6ea7292657de0dc912fb7571f06f1d5a0eb6036265b5720207f761c09a83177a8e177a0c00", @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4005) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000006800010003001000fbffff7f00000000000000000c000200010000001100000014000c800800020009000000060001000a0000000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) 2.272687835s ago: executing program 1 (id=3052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x2, 0x10050, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x8}, 0x248, 0x10000, 0x1, 0x1, 0x8, 0xacc0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x2, 0x1ff, 0x0, 0x3c, 0x5}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x50) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280)=@buf) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf250300000005000500cc00006405000500040000000500030005000000180001801400020064766d72703000"/62], 0x4c}}, 0x20040040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4008044) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) 2.055981565s ago: executing program 1 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.00402326s ago: executing program 3 (id=3054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000580)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000458c9effa3343dd4cda187395b10126e305190504927ccf52a2e7a6afcea85c943af", @ANYRES16=r6, @ANYBLOB="000428bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00866c0000"], 0x38}, 0x1, 0x0, 0x0, 0xa014}, 0x40000) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x8200, 0x5a) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, 0x0, 0x801) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) 1.289691718s ago: executing program 5 (id=3055): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000300fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd5}], 0x1}, 0x0) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a400000009000000020000000000001105000000ffffffff0800000000000011040000000000000006000000000000100c00000d0600000009000013020000000900000000000000090000000b000000090000000d0000000e0000001e91a744890000000c00000080000000350700000400000086000000020000000c000000ff030000ffff000010000000ffff000005000000020000000f000000010000000b0000000600000030000000005f61615f30003000"], &(0x7f00000001c0)=""/68, 0xc5, 0x44, 0x1, 0x1}, 0x28) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r4, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r7, r7, 0x0, 0x2) r8 = syz_io_uring_setup(0x2f90, 0x0, 0x0, 0x0) r9 = epoll_create(0xaf2) epoll_pwait2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB='\t\x00\n\x00', @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x20000004, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0xe, 0x6, @random="c208000e0003"}, 0x14) 1.199604786s ago: executing program 2 (id=3056): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 'vcan0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000c840)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="ebf22597", 0x4}], 0x1}}], 0x1, 0x24008080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r6, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r10}, 0x62) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.119171574s ago: executing program 4 (id=3057): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) get_robust_list(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='mm_page_free\x00', r1, 0x0, 0xe17}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) setitimer(0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0xe3) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r9 = dup(r8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r9}, 0x18) close_range(r4, r7, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x5, 0xff, 0x0, 0x8}]}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) 1.114834414s ago: executing program 5 (id=3058): socket$inet(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r2}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200, 0x1002, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000005f15c0d21d58451a684ca7571315ad93"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0x0, 0x0, 0x7, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x4, @perf_config_ext={0x0, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x40}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x101) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffff9}]}, 0x10) 880.803826ms ago: executing program 1 (id=3059): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffe6f, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x8000000) semget$private(0x0, 0x1, 0xb4) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x800200a0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000300100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 816.971062ms ago: executing program 5 (id=3060): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) fcntl$getown(r3, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) 654.387738ms ago: executing program 5 (id=3061): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000100000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffeff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00ffffffff00000000"]}, 0x138) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e74d65d1285af96d1f7257bc733ebfb70870326bc85f5293fadd983c3606246abb6900490250a4342112654bdd5e237f760762525ded3bac525e47f53cc0272e7ff989282321fd992428009c5e2675337b5834bb"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) close(0xffffffffffffffff) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000002100)={0x2, 0x4e21, @multicast2}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='xen_cpu_set_ldt\x00'}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fc"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4800, 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001100)=0xc) 653.892858ms ago: executing program 3 (id=3062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0x6, {{0x21, 0x4, 0x1, 0x4, 0x84, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0xb, 0x6b, [@private=0xa010101, @private=0xa010101]}, @timestamp={0x44, 0x18, 0xe3, 0x0, 0x0, [0x8, 0x96b, 0xffe, 0xefda, 0x8]}, @rr={0x7, 0x27, 0xaf, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x17, 0x16, [@local, @private=0xa010101, @loopback, @multicast2, @rand_addr=0x64010102]}, @generic={0xd, 0xb, "fc3407d0de05a483ae"}, @end]}}}}}) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e24, 0xe4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000540)={@private0, r4}, 0x14) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000f7ffffffffffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="010000000800"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0x100000000}, 0x18) r11 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r13, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 616.497621ms ago: executing program 3 (id=3063): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = getpgrp(0x0) tkill(r5, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x4}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) waitid(0x0, r8, 0x0, 0x8, 0xfffffffffffffffd) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 575.046275ms ago: executing program 1 (id=3064): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x975, 0x1c080, 0x0, 0x28b, 0x0, r0}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) ftruncate(r4, 0x2007ffb) sendfile(r6, r4, 0x0, 0x1000000200fff) r7 = socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYRES64=0x0, @ANYBLOB="2944c739639200a9799900265ce1bc4e12213d54b5fc498c2cbd624288d4af05ddbcdca5fbb2dfbebd3f4a7adc042fc8464f50031afc5721ba2afde6225b0dab806898e7edde4ba628156fbf127195eabe25734b499f3c9c", @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r10, @ANYBLOB="020827bd7000ffdbdf250700000006001c1f9a002d00"], 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x2004c800) 574.324925ms ago: executing program 5 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80c2, 0x41012}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_ALT_IFNAME={0x0, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r5, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x200000}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000100)="e6a0d6907dc2f6", &(0x7f0000000440)=""/183}, 0x20) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$TCSETSW2(r7, 0x5453, 0x0) 539.513699ms ago: executing program 3 (id=3066): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="3cc75bdc07b49a8c85a31b9a8e379d7ea9bbd5fb0133cfca6c99023a5b73f68ec83e77febbb09ab68f94802c1e1f6749c3c2ae1e2f2194197f9d21319c47b6801504c0bca906a81191af22d51dfab12b06c1e39986e8184a816a4058d40fe47b5bb31750f527df413ba08c685fff376fb0edab7303290e610c23e69e2156d0bd8747790ea4bc2afa2e296e822438e02f65a4ef0370fc4cc53e23cfd7971d063fe60565ba1ecbfd069c5a65e4"], 0x24}}, 0x0) tgkill(r5, r9, 0x8) 234.795538ms ago: executing program 4 (id=3067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, r0, 0x0, 0x7f, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r3, 0x1000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r11], 0x4c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r7, 0x3) 222.812089ms ago: executing program 2 (id=3068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r8, 0x111, 0x3, 0x0, &(0x7f0000000080)) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8081000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 193.886682ms ago: executing program 3 (id=3069): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={0xffffffffffffffff, 0x2000000}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) fchdir(r6) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x90) 85.643672ms ago: executing program 2 (id=3070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3071): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x4}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)={0x3}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_blocks}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='contention_end\x00', r5}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): 5 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.885961][ T29] audit: type=1326 audit(844.865:41001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.886085][ T29] audit: type=1326 audit(844.865:41002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.886206][ T29] audit: type=1326 audit(844.865:41003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.886473][ T29] audit: type=1326 audit(844.865:41004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.886686][ T29] audit: type=1326 audit(844.865:41005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.886886][ T29] audit: type=1326 audit(844.865:41006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.887061][ T29] audit: type=1326 audit(844.865:41007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.5.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 331.906127][T12347] wireguard0: entered promiscuous mode [ 331.906147][T12347] wireguard0: entered allmulticast mode [ 331.988023][T12352] xt_hashlimit: max too large, truncated to 1048576 [ 331.988753][T12352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.185130][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 332.302008][T12358] wireguard0: entered promiscuous mode [ 332.307504][T12358] wireguard0: entered allmulticast mode [ 332.423968][T12369] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 332.615282][T12381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12381 comm=syz.5.2288 [ 333.153658][T12391] wireguard0: entered promiscuous mode [ 333.159132][T12391] wireguard0: entered allmulticast mode [ 333.501289][T12402] netlink: 'syz.2.2296': attribute type 6 has an invalid length. [ 333.509496][T12402] netlink: 'syz.2.2296': attribute type 6 has an invalid length. [ 333.651302][T12409] wireguard0: entered promiscuous mode [ 333.656803][T12409] wireguard0: entered allmulticast mode [ 333.672130][T12411] wireguard0: entered promiscuous mode [ 333.677690][T12411] wireguard0: entered allmulticast mode [ 333.968117][T12396] netlink: 'syz.5.2294': attribute type 7 has an invalid length. [ 333.992823][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 334.270053][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2306'. [ 334.374275][T12438] wireguard2: entered promiscuous mode [ 334.379828][T12438] wireguard2: entered allmulticast mode [ 334.679759][ T3481] usb 9-1: enqueue for inactive port 0 [ 334.685361][ T3481] usb 9-1: enqueue for inactive port 0 [ 334.759751][ T3481] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 334.786637][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 335.283479][T12463] lo speed is unknown, defaulting to 1000 [ 335.321733][T12463] vcan0 speed is unknown, defaulting to 1000 [ 335.353714][T12466] __nla_validate_parse: 2 callbacks suppressed [ 335.353730][T12466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2318'. [ 335.441863][T12469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 335.448399][T12469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 335.455977][T12469] vhci_hcd vhci_hcd.0: Device attached [ 335.671381][T12481] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 335.677997][T12481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 335.685595][T12481] vhci_hcd vhci_hcd.0: Device attached [ 335.711142][T12481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 335.717838][T12481] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 335.725648][T12481] vhci_hcd vhci_hcd.0: Device attached [ 335.788916][T12487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.830514][T12469] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 335.837063][T12469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 335.844699][T12469] vhci_hcd vhci_hcd.0: Device attached [ 335.869584][T12486] wireguard0: entered promiscuous mode [ 335.875143][T12486] wireguard0: entered allmulticast mode [ 335.889672][ T3410] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 335.935932][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 335.958817][T12476] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 335.965456][T12476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.973152][T12476] vhci_hcd vhci_hcd.0: Device attached [ 336.012054][T12481] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 336.018735][T12481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.026284][T12481] vhci_hcd vhci_hcd.0: Device attached [ 336.039738][T12487] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(23) [ 336.046413][T12487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.053994][T12487] vhci_hcd vhci_hcd.0: Device attached [ 336.079228][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 336.119981][T12469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.179162][T12496] vhci_hcd: connection closed [ 336.179244][T12484] vhci_hcd: connection closed [ 336.179294][T12494] vhci_hcd: connection closed [ 336.184227][T12482] vhci_hcd: connection closed [ 336.189814][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.194099][T12477] vhci_hcd: connection closed [ 336.198117][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.198206][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.203761][T12473] vhci_hcd: connection closed [ 336.220164][T12470] vhci_hcd: connection reset by peer [ 336.237099][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.242346][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.247778][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.272210][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.277480][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.283037][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.301794][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.307074][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.312743][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.350029][T12519] wireguard1: entered promiscuous mode [ 336.355544][T12519] wireguard1: entered allmulticast mode [ 336.364373][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.368000][ T7039] usb 3-1: enqueue for inactive port 0 [ 336.369833][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.380440][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.391558][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.392522][ T7039] usb 3-1: enqueue for inactive port 0 [ 336.396859][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.402551][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2332'. [ 336.407665][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.422685][ T5289] vhci_hcd vhci_hcd.2: stop threads [ 336.427895][ T5289] vhci_hcd vhci_hcd.2: release socket [ 336.433293][ T5289] vhci_hcd vhci_hcd.2: disconnect device [ 336.499711][ T7039] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 336.530129][T12525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2333'. [ 336.542629][T12525] ipvlan2: entered promiscuous mode [ 336.554414][ T9266] Bluetooth: hci0: Frame reassembly failed (-84) [ 336.766193][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 336.842373][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 336.860360][ T29] kauditd_printk_skb: 1232 callbacks suppressed [ 336.860373][ T29] audit: type=1400 audit(850.842:42240): avc: denied { map_create } for pid=12532 comm="syz.2.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.887353][ T29] audit: type=1400 audit(850.862:42241): avc: denied { map_create } for pid=12532 comm="syz.2.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.906565][ T29] audit: type=1400 audit(850.872:42242): avc: denied { prog_load } for pid=12532 comm="syz.2.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.925614][ T29] audit: type=1400 audit(850.872:42243): avc: denied { prog_load } for pid=12532 comm="syz.2.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.944587][ T29] audit: type=1400 audit(850.872:42244): avc: denied { module_request } for pid=12532 comm="syz.2.2336" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 336.966503][ T29] audit: type=1400 audit(850.872:42245): avc: denied { sys_module } for pid=12532 comm="syz.2.2336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 336.987686][ T29] audit: type=1400 audit(850.962:42246): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 337.013731][ T29] audit: type=1400 audit(850.992:42247): avc: denied { prog_load } for pid=12538 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 337.032782][ T29] audit: type=1400 audit(850.992:42248): avc: denied { prog_load } for pid=12538 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 337.051553][ T29] audit: type=1400 audit(850.992:42249): avc: denied { read write } for pid=12538 comm="syz.2.2337" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 337.085283][T12541] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 337.269901][T12545] lo speed is unknown, defaulting to 1000 [ 337.314064][T12545] vcan0 speed is unknown, defaulting to 1000 [ 337.389955][ T4121] usb usb10-port1: attempt power cycle [ 337.565958][T12553] Process accounting resumed [ 338.051060][T12556] wireguard0: entered promiscuous mode [ 338.056566][T12556] wireguard0: entered allmulticast mode [ 338.202236][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2343'. [ 338.283580][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 338.290110][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.297673][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.336379][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 338.342911][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.350509][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.360891][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 338.367523][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.375153][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.403892][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 338.410501][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.418084][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.450080][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 338.456690][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 338.464418][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.488466][T12562] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 338.490432][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2344'. [ 338.509178][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 338.515786][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.523257][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.529857][T12562] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(20) [ 338.536546][T12562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.544090][T12562] vhci_hcd vhci_hcd.0: Device attached [ 338.550193][T12562] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 338.560906][T12580] vhci_hcd: connection closed [ 338.560914][T12578] vhci_hcd: connection closed [ 338.566227][T12573] vhci_hcd: connection closed [ 338.571762][T12571] vhci_hcd: connection closed [ 338.576842][T12568] vhci_hcd: connection closed [ 338.582006][T12565] vhci_hcd: connection closed [ 338.587126][T12563] vhci_hcd: connection closed [ 338.591931][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.602584][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.602607][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 338.608320][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.624802][ T4334] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.632153][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.637579][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.643360][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.649614][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.655227][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.661040][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.667360][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.672950][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.678748][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.687084][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.692571][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.698340][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.704754][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.710328][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.716044][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.722187][ T9266] vhci_hcd vhci_hcd.2: stop threads [ 338.727734][ T9266] vhci_hcd vhci_hcd.2: release socket [ 338.733571][ T9266] vhci_hcd vhci_hcd.2: disconnect device [ 338.936579][T12594] wireguard0: entered promiscuous mode [ 338.942177][T12594] wireguard0: entered allmulticast mode [ 339.099911][ T3734] usb usb4-port1: attempt power cycle [ 339.309884][ T4121] usb usb10-port1: unable to enumerate USB device [ 339.867304][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 339.873834][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.881447][T12642] vhci_hcd vhci_hcd.0: Device attached [ 339.906717][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 339.913275][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.920914][T12642] vhci_hcd vhci_hcd.0: Device attached [ 339.944044][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 339.950735][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.958418][T12642] vhci_hcd vhci_hcd.0: Device attached [ 339.973925][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 339.980539][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.988085][T12642] vhci_hcd vhci_hcd.0: Device attached [ 340.004024][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 340.010650][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.018318][T12642] vhci_hcd vhci_hcd.0: Device attached [ 340.052187][T12653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 340.119677][ T3481] usb 9-1: new low-speed USB device number 9 using vhci_hcd [ 340.127026][T12653] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 340.133708][T12653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.141136][T12653] vhci_hcd vhci_hcd.0: Device attached [ 340.180095][T12642] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(16) [ 340.186720][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.194250][T12642] vhci_hcd vhci_hcd.0: Device attached [ 340.210262][T12642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 340.229810][T12655] vhci_hcd: connection closed [ 340.230170][T12651] vhci_hcd: connection closed [ 340.233026][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.235054][T12649] vhci_hcd: connection closed [ 340.239735][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.245275][T12647] vhci_hcd: connection closed [ 340.249585][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.255516][T12643] vhci_hcd: connection reset by peer [ 340.265368][T12658] vhci_hcd: connection closed [ 340.271144][T12645] vhci_hcd: connection closed [ 340.299966][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.309897][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.315278][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.345229][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.350498][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.355997][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.379789][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.385059][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.390483][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.402994][T12671] __nla_validate_parse: 10 callbacks suppressed [ 340.403008][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 340.418359][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.423636][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.429029][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.449357][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.454665][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.460097][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.476025][ T9237] vhci_hcd vhci_hcd.4: stop threads [ 340.481289][ T9237] vhci_hcd vhci_hcd.4: release socket [ 340.486684][ T9237] vhci_hcd vhci_hcd.4: disconnect device [ 340.499218][T12673] wireguard0: entered promiscuous mode [ 340.504824][T12673] wireguard0: entered allmulticast mode [ 340.579975][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 340.886770][T12692] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 340.926033][ T3410] usb 5-1: enqueue for inactive port 0 [ 340.940449][ T3410] usb 5-1: enqueue for inactive port 0 [ 341.020338][ T3410] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 341.039905][ T3734] usb usb4-port1: unable to enumerate USB device [ 341.064708][T12695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2379'. [ 341.105825][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 341.121045][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 341.237768][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 341.324727][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 341.501645][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 341.569847][T12717] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 341.576385][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.583925][T12717] vhci_hcd vhci_hcd.0: Device attached [ 341.629724][T12720] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 341.636285][T12720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.643940][T12720] vhci_hcd vhci_hcd.0: Device attached [ 341.680080][T12717] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 341.686707][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.694463][T12717] vhci_hcd vhci_hcd.0: Device attached [ 341.749963][T12720] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 341.756579][T12720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.764176][T12720] vhci_hcd vhci_hcd.0: Device attached [ 341.783297][T12717] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 341.790025][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 341.797744][T12717] vhci_hcd vhci_hcd.0: Device attached [ 341.803855][T12717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 341.814609][T12717] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18) [ 341.821227][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 341.828718][T12717] vhci_hcd vhci_hcd.0: Device attached [ 341.834652][ T10] usb 3-1: new low-speed USB device number 10 using vhci_hcd [ 341.844107][T12717] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(20) [ 341.850502][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12735 comm=syz.4.2389 [ 341.850781][T12717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.871290][T12717] vhci_hcd vhci_hcd.0: Device attached [ 341.888899][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 341.888912][ T29] audit: type=1400 audit(855.862:42834): avc: denied { read write } for pid=6632 comm="syz-executor" name="loop4" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 341.893961][T12720] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 341.940762][ T29] audit: type=1400 audit(855.922:42835): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 341.979113][ T29] audit: type=1400 audit(855.952:42836): avc: denied { prog_load } for pid=12738 comm="syz.4.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 341.997987][ T29] audit: type=1400 audit(855.952:42837): avc: denied { create } for pid=12738 comm="syz.4.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 342.016954][ T29] audit: type=1400 audit(855.952:42838): avc: denied { prog_load } for pid=12738 comm="syz.4.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 342.021433][T12733] vhci_hcd: connection closed [ 342.035640][ T29] audit: type=1400 audit(855.952:42839): avc: denied { prog_load } for pid=12738 comm="syz.4.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 342.035666][ T29] audit: type=1400 audit(855.952:42840): avc: denied { append } for pid=12738 comm="syz.4.2390" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 342.039748][T12736] vhci_hcd: connection closed [ 342.045569][T12729] vhci_hcd: connection closed [ 342.080169][T12721] vhci_hcd: connection closed [ 342.088932][T12731] vhci_hcd: connection closed [ 342.092011][T12723] vhci_hcd: connection closed [ 342.092176][T12718] vhci_hcd: connection reset by peer [ 342.097632][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.118054][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.123968][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.130877][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.136319][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.142120][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.153720][ T29] audit: type=1400 audit(855.952:42841): avc: denied { allowed } for pid=12716 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 342.172652][ T29] audit: type=1400 audit(855.952:42842): avc: denied { execute } for pid=12716 comm="syz.1.2387" path="/394/cpu.stat" dev="tmpfs" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 342.195197][ T29] audit: type=1400 audit(855.982:42843): avc: denied { create } for pid=12740 comm="syz.2.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 342.260575][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.266025][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.271827][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.291573][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2392'. [ 342.330187][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.335770][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.341607][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.361655][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.367274][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.373076][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.379186][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 342.392880][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.398485][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.404280][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.450412][ T9244] vhci_hcd vhci_hcd.1: stop threads [ 342.456017][ T9244] vhci_hcd vhci_hcd.1: release socket [ 342.461892][ T9244] vhci_hcd vhci_hcd.1: disconnect device [ 342.568182][T12760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 343.151234][T12766] netlink: 'syz.1.2401': attribute type 7 has an invalid length. [ 343.238208][T12785] wireguard1: entered promiscuous mode [ 343.243766][T12785] wireguard1: entered allmulticast mode [ 343.745533][T12808] lo speed is unknown, defaulting to 1000 [ 343.782712][T12808] vcan0 speed is unknown, defaulting to 1000 [ 343.807951][ T1039] usb usb6-port1: attempt power cycle [ 344.216569][T12822] wireguard0: entered promiscuous mode [ 344.222157][T12822] wireguard0: entered allmulticast mode [ 344.897199][T12849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12849 comm=syz.2.2429 [ 345.169808][ T3481] usb 9-1: enqueue for inactive port 0 [ 345.179276][ T3481] usb 9-1: enqueue for inactive port 0 [ 345.259697][ T3481] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 345.442063][T12864] __nla_validate_parse: 24 callbacks suppressed [ 345.442088][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 345.547206][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'. [ 345.574979][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 345.691358][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2438'. [ 345.720076][ T1039] usb usb6-port1: unable to enumerate USB device [ 345.824743][T12885] wireguard0: entered promiscuous mode [ 345.830267][T12885] wireguard0: entered allmulticast mode [ 345.913137][T12892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12892 comm=syz.3.2442 [ 345.950257][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 346.042296][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2448'. [ 346.058774][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 346.186984][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'. [ 346.454284][T12918] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 346.467499][T12918] bridge0: entered promiscuous mode [ 346.472882][T12918] macsec0: entered promiscuous mode [ 346.479095][T12918] bridge0: port 1(macsec0) entered blocking state [ 346.485791][T12918] bridge0: port 1(macsec0) entered disabled state [ 346.492711][T12918] macsec0: entered allmulticast mode [ 346.498590][T12918] macsec0: left allmulticast mode [ 346.504597][T12918] bridge0: left promiscuous mode [ 346.550653][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 346.585114][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'. [ 346.595267][T12931] netlink: 'syz.4.2459': attribute type 6 has an invalid length. [ 346.603490][T12931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12931 comm=syz.4.2459 [ 346.686727][T12933] netlink: 'syz.2.2461': attribute type 10 has an invalid length. [ 346.697262][T12936] geneve2: entered promiscuous mode [ 346.702532][T12936] geneve2: entered allmulticast mode [ 346.710056][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.718900][ T9244] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 346.719938][T12933] bond0: (slave team0): Enslaving as an active interface with an up link [ 346.737861][ T9243] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.746340][ T9243] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.759898][ T9243] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.772723][T12939] ipvlan2: entered promiscuous mode [ 346.779320][ T9243] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.919741][ T10] usb 3-1: enqueue for inactive port 0 [ 346.925850][ T10] usb 3-1: enqueue for inactive port 0 [ 346.937700][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 346.937714][ T29] audit: type=1326 audit(860.912:44030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.967013][ T29] audit: type=1326 audit(860.932:44031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.967176][T12942] wireguard2: entered promiscuous mode [ 346.990014][ T29] audit: type=1400 audit(860.932:44032): avc: denied { open } for pid=12941 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 346.990040][ T29] audit: type=1326 audit(860.932:44033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990072][ T29] audit: type=1326 audit(860.932:44034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990092][ T29] audit: type=1326 audit(860.932:44035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990115][ T29] audit: type=1326 audit(860.932:44036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990205][ T29] audit: type=1326 audit(860.932:44037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990229][ T29] audit: type=1326 audit(860.932:44038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 346.990252][ T29] audit: type=1326 audit(860.932:44039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 347.178050][T12942] wireguard2: entered allmulticast mode [ 347.185538][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 347.533674][T12971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12971 comm=syz.1.2474 [ 348.099920][ T3488] usb usb10-port1: attempt power cycle [ 348.328961][T12985] wireguard0: entered promiscuous mode [ 348.334482][T12985] wireguard0: entered allmulticast mode [ 348.522738][T12989] veth0: entered promiscuous mode [ 348.527849][T12989] veth0: entered allmulticast mode [ 348.610506][T12993] lo speed is unknown, defaulting to 1000 [ 348.649980][T12993] vcan0 speed is unknown, defaulting to 1000 [ 349.536674][T13018] netlink: 'syz.4.2490': attribute type 13 has an invalid length. [ 349.550089][T13018] veth0_to_batadv: left allmulticast mode [ 349.563923][ T9244] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 349.580868][ T9244] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 349.597499][ T9244] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 349.606930][ T9244] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 349.670954][T13021] wireguard0: entered promiscuous mode [ 349.676458][T13021] wireguard0: entered allmulticast mode [ 349.789984][ T3382] usb usb4-port1: attempt power cycle [ 350.160688][T13036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.214840][ T3488] usb usb10-port1: unable to enumerate USB device [ 350.238170][T13037] wireguard0: entered promiscuous mode [ 350.243780][T13037] wireguard0: entered allmulticast mode [ 350.394917][T13044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=13044 comm=syz.3.2498 [ 350.605023][T13054] __nla_validate_parse: 14 callbacks suppressed [ 350.605041][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2502'. [ 350.651136][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 351.008390][T13062] wireguard1: entered promiscuous mode [ 351.013983][T13062] wireguard1: entered allmulticast mode [ 351.320720][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 351.346000][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 351.525891][T13085] wireguard0: entered promiscuous mode [ 351.531421][T13085] wireguard0: entered allmulticast mode [ 351.622241][T13089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34320 sclass=netlink_route_socket pid=13089 comm=syz.5.2510 [ 352.454507][ T3382] usb usb4-port1: unable to enumerate USB device [ 352.570014][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 352.570032][ T29] audit: type=1400 audit(865.762:44792): avc: denied { create } for pid=13090 comm="syz.3.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 352.647251][ T29] audit: type=1400 audit(866.622:44793): avc: denied { open } for pid=13093 comm="syz.5.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 352.710086][ T29] audit: type=1326 audit(866.622:44794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.733120][ T29] audit: type=1326 audit(866.622:44795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.756161][ T29] audit: type=1326 audit(866.622:44796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.779139][ T29] audit: type=1326 audit(866.622:44797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.802572][ T29] audit: type=1326 audit(866.622:44798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.825685][ T29] audit: type=1326 audit(866.622:44799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.848635][ T29] audit: type=1326 audit(866.622:44800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 352.871582][ T29] audit: type=1326 audit(866.622:44801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.5.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d5feaf749 code=0x7ffc0000 [ 353.000842][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.027209][T13095] wireguard0: entered promiscuous mode [ 353.032815][T13095] wireguard0: entered allmulticast mode [ 353.043237][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.133417][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 353.248663][T13106] lo speed is unknown, defaulting to 1000 [ 353.327413][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2520'. [ 353.380446][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2520'. [ 353.413412][T13106] vcan0 speed is unknown, defaulting to 1000 [ 354.528326][T13130] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 354.540836][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'. [ 354.582735][T13130] bridge0: entered promiscuous mode [ 354.582768][T13130] macsec0: entered promiscuous mode [ 354.583226][T13130] bridge0: port 2(macsec0) entered blocking state [ 354.583307][T13130] bridge0: port 2(macsec0) entered disabled state [ 354.583380][T13130] macsec0: entered allmulticast mode [ 354.584047][T13130] macsec0: left allmulticast mode [ 354.584545][T13130] bridge0: left promiscuous mode [ 355.045336][T13141] wireguard0: entered promiscuous mode [ 355.050879][T13141] wireguard0: entered allmulticast mode [ 356.127366][T13178] wireguard0: entered promiscuous mode [ 356.133009][T13178] wireguard0: entered allmulticast mode [ 356.260255][T13184] __nla_validate_parse: 3 callbacks suppressed [ 356.260324][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 356.313707][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 356.337669][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2546'. [ 356.403836][T13193] wireguard2: entered promiscuous mode [ 356.409409][T13193] wireguard2: entered allmulticast mode [ 356.577050][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2549'. [ 356.902798][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'. [ 356.984543][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 357.759721][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 357.759739][ T29] audit: type=1400 audit(871.732:45390): avc: denied { map_create } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.784721][ T29] audit: type=1400 audit(871.732:45391): avc: denied { prog_load } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.803482][ T29] audit: type=1400 audit(871.732:45392): avc: denied { prog_load } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.822107][ T29] audit: type=1400 audit(871.732:45393): avc: denied { execmem } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 357.899405][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 357.959865][ T29] audit: type=1400 audit(871.822:45394): avc: denied { prog_load } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.978560][ T29] audit: type=1400 audit(871.862:45395): avc: denied { create } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 357.998638][ T29] audit: type=1400 audit(871.862:45396): avc: denied { create } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 358.017775][ T29] audit: type=1400 audit(871.862:45397): avc: denied { create } for pid=13226 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 358.037858][ T29] audit: type=1400 audit(871.872:45398): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 358.060699][ T29] audit: type=1400 audit(871.872:45399): avc: denied { read } for pid=13229 comm="syz.2.2555" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 358.208902][T13232] lo speed is unknown, defaulting to 1000 [ 358.361741][T13232] vcan0 speed is unknown, defaulting to 1000 [ 358.371550][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 358.565403][T13247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13247 comm=syz.4.2562 [ 358.634745][T13249] wireguard2: entered promiscuous mode [ 358.640326][T13249] wireguard2: entered allmulticast mode [ 358.663471][T13252] wireguard0: entered promiscuous mode [ 358.668974][T13252] wireguard0: entered allmulticast mode [ 358.890081][T13256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 358.896620][T13256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 358.904062][T13256] vhci_hcd vhci_hcd.0: Device attached [ 358.910278][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2565'. [ 358.924241][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 359.096726][T13259] vhci_hcd: connection closed [ 359.096915][ T9238] vhci_hcd vhci_hcd.2: stop threads [ 359.106918][ T9238] vhci_hcd vhci_hcd.2: release socket [ 359.112362][ T9238] vhci_hcd vhci_hcd.2: disconnect device [ 359.118030][ T3382] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 360.317138][T13290] wireguard0: entered promiscuous mode [ 360.322682][T13290] wireguard0: entered allmulticast mode [ 360.399247][T13293] wireguard2: entered promiscuous mode [ 360.404881][T13293] wireguard2: entered allmulticast mode [ 361.270421][T13311] __nla_validate_parse: 6 callbacks suppressed [ 361.270471][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 361.353425][T13324] lo speed is unknown, defaulting to 1000 [ 361.401812][T13324] vcan0 speed is unknown, defaulting to 1000 [ 361.522791][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2587'. [ 361.751783][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 361.827649][T13333] wireguard2: entered promiscuous mode [ 361.833304][T13333] wireguard2: entered allmulticast mode [ 362.169767][T13346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 362.176308][T13346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.183797][T13346] vhci_hcd vhci_hcd.0: Device attached [ 362.196046][T13350] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 362.234716][T13347] vhci_hcd: connection closed [ 362.234890][ T9231] vhci_hcd vhci_hcd.2: stop threads [ 362.244861][ T9231] vhci_hcd vhci_hcd.2: release socket [ 362.250239][ T9231] vhci_hcd vhci_hcd.2: disconnect device [ 362.320309][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2594'. [ 362.360541][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 362.426922][T13357] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 362.764307][T13363] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 362.771114][T13363] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 362.793266][T13363] 0ªî{X¹¦: entered promiscuous mode [ 362.805651][T13363] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 362.812416][T13363] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 362.832996][ T29] kauditd_printk_skb: 4262 callbacks suppressed [ 362.833082][ T29] audit: type=1400 audit(876.812:49659): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 362.870072][ T29] audit: type=1400 audit(876.842:49660): avc: denied { prog_load } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.888834][ T29] audit: type=1400 audit(876.842:49661): avc: denied { map_create } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.907644][ T29] audit: type=1400 audit(876.842:49662): avc: denied { map_create } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.926453][ T29] audit: type=1400 audit(876.842:49663): avc: denied { prog_load } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.945136][ T29] audit: type=1400 audit(876.842:49664): avc: denied { map_create } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.963833][ T29] audit: type=1400 audit(876.842:49665): avc: denied { prog_load } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 362.990727][ T29] audit: type=1400 audit(876.852:49666): avc: denied { read write } for pid=13364 comm="syz.2.2599" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 363.013426][ T29] audit: type=1400 audit(876.852:49667): avc: denied { create } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 363.033628][ T29] audit: type=1400 audit(876.852:49668): avc: denied { prog_load } for pid=13364 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 363.374299][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2600'. [ 363.970725][T13375] netlink: 'syz.2.2603': attribute type 13 has an invalid length. [ 363.986607][T13375] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 364.024701][T13375] tipc: Resetting bearer [ 364.222756][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'. [ 364.424678][T13388] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2609'. [ 364.433801][T13388] 1ªX¹¦À: renamed from 60ªX¹¦À [ 364.440635][T13388] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 365.023875][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 365.551863][T13395] bond2 (unregistering): Released all slaves [ 365.833928][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.857074][T13409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.880159][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2615'. [ 366.576592][T13426] __nla_validate_parse: 3 callbacks suppressed [ 366.576607][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 366.729713][T13431] wireguard0: entered promiscuous mode [ 366.735236][T13431] wireguard0: entered allmulticast mode [ 367.013913][T13436] team0 (unregistering): Port device team_slave_0 removed [ 367.220907][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2631'. [ 367.234444][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2631'. [ 367.274014][T13458] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 367.281980][T13458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2634'. [ 367.422322][T13471] wireguard1: entered promiscuous mode [ 367.427867][T13471] wireguard1: entered allmulticast mode [ 367.604567][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 367.895997][ T29] kauditd_printk_skb: 862 callbacks suppressed [ 367.896013][ T29] audit: type=1400 audit(881.872:50531): avc: denied { prog_load } for pid=13482 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 367.981869][T13483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2644'. [ 367.991076][ T29] audit: type=1400 audit(881.962:50532): avc: denied { map_create } for pid=13482 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.009892][ T29] audit: type=1400 audit(881.962:50533): avc: denied { prog_load } for pid=13482 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.030386][T13483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2644'. [ 368.068953][ T29] audit: type=1400 audit(882.002:50534): avc: denied { create } for pid=13482 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 368.088059][ T29] audit: type=1400 audit(882.012:50535): avc: denied { create } for pid=13482 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 368.108060][ T29] audit: type=1400 audit(882.032:50536): avc: denied { prog_load } for pid=13484 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.126673][ T29] audit: type=1400 audit(882.032:50537): avc: denied { create } for pid=13484 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 368.146879][ T29] audit: type=1400 audit(882.032:50538): avc: denied { create } for pid=13484 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 368.166939][ T29] audit: type=1400 audit(882.032:50539): avc: denied { prog_load } for pid=13484 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.170503][T13485] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2645'. [ 368.185566][ T29] audit: type=1400 audit(882.032:50540): avc: denied { open } for pid=13484 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 368.221447][T13456] Process accounting paused [ 368.256973][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2646'. [ 368.267893][T13485] 0ªX¹¦À: renamed from caif0 [ 368.295922][T13485] 0ªX¹¦À: entered allmulticast mode [ 368.301187][T13485] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 368.320124][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 368.324209][T13491] netlink: 'syz.4.2647': attribute type 5 has an invalid length. [ 370.006936][T13538] netlink: 'syz.1.2662': attribute type 10 has an invalid length. [ 370.072866][T13535] gretap0: entered promiscuous mode [ 370.239961][T13548] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 370.269475][T13554] netlink: 'syz.1.2669': attribute type 13 has an invalid length. [ 370.373494][ T9244] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.386579][ T9244] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.410551][ T9244] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.419051][T13550] lo speed is unknown, defaulting to 1000 [ 370.437517][ T9244] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.497765][T13550] vcan0 speed is unknown, defaulting to 1000 [ 370.903813][T13588] netlink: 'syz.5.2682': attribute type 10 has an invalid length. [ 371.508102][T13612] wireguard1: entered promiscuous mode [ 371.513637][T13612] wireguard1: entered allmulticast mode [ 371.605603][T13611] lo speed is unknown, defaulting to 1000 [ 371.676862][T13611] vcan0 speed is unknown, defaulting to 1000 [ 371.794536][T13618] __nla_validate_parse: 21 callbacks suppressed [ 371.794553][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 372.321460][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 372.438178][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'. [ 372.460140][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 372.594760][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'. [ 372.767139][T13651] wireguard0: entered promiscuous mode [ 372.772692][T13651] wireguard0: entered allmulticast mode [ 372.936869][ T29] kauditd_printk_skb: 1130 callbacks suppressed [ 372.936961][ T29] audit: type=1400 audit(886.912:51671): avc: denied { map_create } for pid=13655 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.987204][ T29] audit: type=1400 audit(886.922:51672): avc: denied { prog_load } for pid=13653 comm="syz.4.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.990664][T13658] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.005969][ T29] audit: type=1400 audit(886.942:51673): avc: denied { prog_load } for pid=13653 comm="syz.4.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 373.012405][T13658] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 373.031000][ T29] audit: type=1326 audit(886.942:51674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 373.038585][T13658] audit: backlog limit exceeded [ 373.066676][ T29] audit: type=1326 audit(886.942:51675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 373.089670][ T29] audit: type=1326 audit(886.942:51676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 373.112985][ T29] audit: type=1326 audit(886.942:51677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 373.145075][T13662] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 373.153132][T13662] sit0: left promiscuous mode [ 373.161044][T13662] veth2: left promiscuous mode [ 373.165827][T13662] veth2: left allmulticast mode [ 373.170921][T13662] veth4: left promiscuous mode [ 373.175723][T13662] veth4: left allmulticast mode [ 373.180652][T13662] veth5: left promiscuous mode [ 373.185642][T13662] gretap1: left promiscuous mode [ 373.190633][T13662] macvtap1: left allmulticast mode [ 373.196300][T13662] geneve2: left promiscuous mode [ 373.201258][T13662] geneve2: left allmulticast mode [ 373.220627][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2706'. [ 373.234601][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 373.327569][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2709'. [ 374.203812][T13684] wireguard0: entered promiscuous mode [ 374.209311][T13684] wireguard0: entered allmulticast mode [ 374.396493][T13689] netlink: 'syz.3.2713': attribute type 13 has an invalid length. [ 374.433675][T13689] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 374.543841][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'. [ 374.571973][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 374.601185][ T3734] lo speed is unknown, defaulting to 1000 [ 374.601620][ T3488] syb2: Port: 1 Link DOWN [ 374.606925][ T3734] syz2: Port: 1 Link DOWN [ 374.898787][T13717] bond2 (unregistering): Released all slaves [ 375.134396][T13727] wireguard0: entered promiscuous mode [ 375.139929][T13727] wireguard0: entered allmulticast mode [ 375.381291][T13733] lo speed is unknown, defaulting to 1000 [ 375.711553][T13733] vcan0 speed is unknown, defaulting to 1000 [ 375.784614][T13758] 0ªî{X¹¦: left promiscuous mode [ 375.789859][T13758] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 376.230017][T13758] team0: Port device team_slave_0 removed [ 376.241704][T13758] bond0: (slave ip6gretap1): Removing an active aggregator [ 376.257326][T13758] bond0: (slave ip6gretap1): Releasing backup interface [ 377.175990][T13785] __nla_validate_parse: 6 callbacks suppressed [ 377.176005][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2745'. [ 377.212624][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 377.223979][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 377.257995][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 377.343677][T13790] macvlan3: entered promiscuous mode [ 377.354002][T13790] macvlan4: entered promiscuous mode [ 377.414083][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 377.939925][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 377.939941][ T29] audit: type=1400 audit(891.922:52352): avc: denied { read write } for pid=13806 comm="syz.4.2751" name="loop4" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 378.008903][ T29] audit: type=1400 audit(891.982:52353): avc: denied { create } for pid=13809 comm="syz.1.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 378.046139][ T29] audit: type=1400 audit(892.012:52354): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 378.069075][ T29] audit: type=1400 audit(892.022:52355): avc: denied { map_create } for pid=13811 comm="syz.2.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.087878][ T29] audit: type=1400 audit(892.022:52356): avc: denied { prog_load } for pid=13809 comm="syz.1.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.089054][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 378.129419][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'. [ 378.162138][ T29] audit: type=1400 audit(892.022:52357): avc: denied { map_create } for pid=13809 comm="syz.1.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.180924][ T29] audit: type=1400 audit(892.022:52358): avc: denied { prog_load } for pid=13809 comm="syz.1.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.199601][ T29] audit: type=1400 audit(892.072:52359): avc: denied { read write } for pid=13811 comm="syz.2.2753" name="loop2" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 378.222434][ T29] audit: type=1400 audit(892.072:52360): avc: denied { read write } for pid=13809 comm="syz.1.2752" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 378.246047][ T29] audit: type=1400 audit(892.072:52361): avc: denied { module_request } for pid=13809 comm="syz.1.2752" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 378.259716][T13822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2757'. [ 378.287385][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 378.326748][T13819] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.741041][T13839] netlink: '+}[@': attribute type 10 has an invalid length. [ 378.790817][T13839] team0: Port device dummy0 added [ 379.100323][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2764'. [ 380.075165][T13865] lo speed is unknown, defaulting to 1000 [ 380.133253][T13865] vcan0 speed is unknown, defaulting to 1000 [ 381.070972][T13911] x_tables: duplicate underflow at hook 1 [ 381.267116][T13900] sch_fq: defrate 0 ignored. [ 381.679762][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 381.686312][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.693887][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.710164][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 381.717215][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.724837][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.731216][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 381.738153][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.745770][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.752031][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 381.758634][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.766155][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.772613][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 381.779268][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 381.786995][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.793222][T13957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.802865][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 381.809468][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.816875][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.847682][T13957] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(23) [ 381.854379][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.861929][T13957] vhci_hcd vhci_hcd.0: Device attached [ 381.880148][T13957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.893275][T13977] vhci_hcd: connection closed [ 381.893402][T13965] vhci_hcd: connection closed [ 381.893437][T13963] vhci_hcd: connection closed [ 381.898175][ T58] vhci_hcd vhci_hcd.1: stop threads [ 381.903138][T13958] vhci_hcd: connection closed [ 381.907508][ T58] vhci_hcd vhci_hcd.1: release socket [ 381.912979][T13967] vhci_hcd: connection closed [ 381.917377][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 381.919799][T13970] vhci_hcd: connection closed [ 381.923323][T13973] vhci_hcd: connection closed [ 381.939744][ T3382] usb 3-1: new low-speed USB device number 11 using vhci_hcd [ 381.964885][T13960] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 381.970931][ T58] vhci_hcd vhci_hcd.1: stop threads [ 381.976156][ T58] vhci_hcd vhci_hcd.1: release socket [ 381.981575][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 381.999435][ T58] vhci_hcd vhci_hcd.1: stop threads [ 382.004840][ T58] vhci_hcd vhci_hcd.1: release socket [ 382.010353][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 382.026108][T13981] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 382.028124][ T58] vhci_hcd vhci_hcd.1: stop threads [ 382.038784][ T58] vhci_hcd vhci_hcd.1: release socket [ 382.044196][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 382.059349][ T1039] IPVS: starting estimator thread 0... [ 382.074393][ T58] vhci_hcd vhci_hcd.1: stop threads [ 382.079671][ T58] vhci_hcd vhci_hcd.1: release socket [ 382.085142][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 382.110090][ T58] vhci_hcd vhci_hcd.1: stop threads [ 382.115312][ T58] vhci_hcd vhci_hcd.1: release socket [ 382.120741][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 382.137411][ T58] vhci_hcd vhci_hcd.1: stop threads [ 382.142731][ T58] vhci_hcd vhci_hcd.1: release socket [ 382.148168][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 382.219874][T13991] IPVS: using max 2880 ests per chain, 144000 per kthread [ 382.548984][T14010] __nla_validate_parse: 7 callbacks suppressed [ 382.549009][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2783'. [ 382.894100][T14017] loop4: detected capacity change from 0 to 512 [ 382.902489][T14017] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 382.911631][T14017] EXT4-fs (loop4): 1 truncate cleaned up [ 382.917711][T14017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.938742][T14017] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 382.947311][T14017] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2785: Logical block already allocated [ 382.959148][T14017] EXT4-fs (loop4): Remounting filesystem read-only [ 382.962179][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 382.962193][ T29] audit: type=1326 audit(896.942:52783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8f83a65e7 code=0x7ffc0000 [ 382.996836][T14021] rdma_rxe: rxe_newlink: failed to add bond0 [ 383.034097][ T29] audit: type=1326 audit(896.972:52784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8f834b829 code=0x7ffc0000 [ 383.057070][ T29] audit: type=1326 audit(896.972:52785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8f83a65e7 code=0x7ffc0000 [ 383.079983][ T29] audit: type=1326 audit(896.972:52786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8f834b829 code=0x7ffc0000 [ 383.103005][ T29] audit: type=1326 audit(896.972:52787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd8f83af749 code=0x7ffc0000 [ 383.125963][ T29] audit: type=1400 audit(896.972:52788): avc: denied { create } for pid=14018 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.144937][ T29] audit: type=1400 audit(896.972:52789): avc: denied { getopt } for pid=14018 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.164007][ T29] audit: type=1400 audit(896.972:52790): avc: denied { create } for pid=14018 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 383.183732][ T29] audit: type=1400 audit(896.972:52791): avc: denied { write } for pid=14018 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 383.203460][ T29] audit: type=1326 audit(896.982:52792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14009 comm="syz.1.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8f83a65e7 code=0x7ffc0000 [ 383.282384][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 383.294119][T14029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.374758][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 383.701487][T14017] Set syz1 is full, maxelem 65536 reached [ 383.755300][ T6632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.782507][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 383.789025][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.796806][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.808072][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 383.814759][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.822561][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.829667][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 383.836309][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 383.844180][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.855438][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 383.862046][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.869598][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.876166][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 383.882811][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 383.890540][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.896668][T14048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.905572][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 383.912151][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.920055][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.927076][T14048] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23) [ 383.933679][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.941472][T14048] vhci_hcd vhci_hcd.0: Device attached [ 383.948237][T14048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.957808][T14058] serio: Serial port ptm2 [ 383.966859][T14064] vhci_hcd: connection closed [ 383.966866][T14062] vhci_hcd: connection closed [ 383.967490][T14056] vhci_hcd: connection closed [ 383.971671][T14060] vhci_hcd: connection closed [ 383.971878][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 383.971895][ T9259] vhci_hcd vhci_hcd.4: release socket [ 383.971914][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 383.972332][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 383.989693][T14053] vhci_hcd: connection closed [ 383.991372][ T9259] vhci_hcd vhci_hcd.4: release socket [ 383.991396][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 383.992128][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 383.997614][T14051] vhci_hcd: connection closed [ 384.002674][ T9259] vhci_hcd vhci_hcd.4: release socket [ 384.002693][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 384.003000][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 384.003014][ T9259] vhci_hcd vhci_hcd.4: release socket [ 384.010240][T14049] vhci_hcd: connection closed [ 384.012902][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 384.035355][T14066] loop2: detected capacity change from 0 to 1024 [ 384.035845][T14066] EXT4-fs: Ignoring removed orlov option [ 384.042737][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 384.046890][T14066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.059856][ T1039] usb 9-1: new low-speed USB device number 10 using vhci_hcd [ 384.063307][ T9259] vhci_hcd vhci_hcd.4: release socket [ 384.097473][T14069] netlink: 'syz.5.2796': attribute type 3 has an invalid length. [ 384.101873][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 384.117749][T14050] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 384.121681][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 384.132730][ T9259] vhci_hcd vhci_hcd.4: release socket [ 384.136925][T14066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.138470][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 384.157491][ T9259] vhci_hcd vhci_hcd.4: stop threads [ 384.162992][ T9259] vhci_hcd vhci_hcd.4: release socket [ 384.168775][ T9259] vhci_hcd vhci_hcd.4: disconnect device [ 384.296522][T14075] netlink: 'syz.3.2797': attribute type 3 has an invalid length. [ 384.678267][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.686994][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.704230][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 384.777812][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.796518][T14086] loop2: detected capacity change from 0 to 512 [ 384.803659][T14086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.813467][T14086] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2800: invalid block [ 384.825611][T14086] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2800: invalid indirect mapped block 4294967295 (level 1) [ 384.850023][T14086] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2800: invalid indirect mapped block 4294967295 (level 1) [ 384.865056][T14086] EXT4-fs (loop2): 2 truncates cleaned up [ 384.871820][T14086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.019690][T14091] lo speed is unknown, defaulting to 1000 [ 385.080062][T14091] vcan0 speed is unknown, defaulting to 1000 [ 385.166842][T14092] loop4: detected capacity change from 0 to 128 [ 385.343044][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.739298][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 386.213386][T14123] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 386.219956][T14123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.227466][T14123] vhci_hcd vhci_hcd.0: Device attached [ 386.294943][T14127] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 386.301650][T14127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.309243][T14127] vhci_hcd vhci_hcd.0: Device attached [ 386.419376][T14123] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 386.426005][T14123] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 386.433616][T14123] vhci_hcd vhci_hcd.0: Device attached [ 386.458695][T14134] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 386.465315][T14134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.472833][T14134] vhci_hcd vhci_hcd.0: Device attached [ 386.483048][T14123] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 386.489658][T14123] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 386.497341][T14123] vhci_hcd vhci_hcd.0: Device attached [ 386.503492][T14123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.520124][T14123] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 386.526762][T14123] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 386.534209][T14123] vhci_hcd vhci_hcd.0: Device attached [ 386.549809][T14123] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(23) [ 386.556434][T14123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.564023][T14123] vhci_hcd vhci_hcd.0: Device attached [ 386.575928][T14123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.591305][T14142] vhci_hcd: connection closed [ 386.591335][T14139] vhci_hcd: connection closed [ 386.591463][T14137] vhci_hcd: connection closed [ 386.599763][T14128] vhci_hcd: connection closed [ 386.601141][T14135] vhci_hcd: connection closed [ 386.610376][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.620275][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.625660][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.629770][T14124] vhci_hcd: connection closed [ 386.631457][T14132] vhci_hcd: connection closed [ 386.637740][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.647753][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.653157][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.679534][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.684861][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.690271][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.703034][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.708343][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.713742][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.730646][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.735970][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.741510][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.763754][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.769088][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.774501][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.804296][ T9231] vhci_hcd vhci_hcd.1: stop threads [ 386.809543][ T9231] vhci_hcd vhci_hcd.1: release socket [ 386.815078][ T9231] vhci_hcd vhci_hcd.1: disconnect device [ 386.999801][ T3382] usb 3-1: enqueue for inactive port 0 [ 387.009677][ T3382] usb 3-1: enqueue for inactive port 0 [ 387.079715][ T3382] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 387.268306][T14200] serio: Serial port ptm2 [ 387.479228][T14250] netlink: 'syz.1.2814': attribute type 3 has an invalid length. [ 388.609576][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.640772][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.670171][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 388.670186][ T29] audit: type=1400 audit(902.652:53156): avc: denied { append } for pid=14262 comm="syz.1.2819" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 388.713047][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 388.809138][T14261] loop2: detected capacity change from 0 to 4096 [ 388.827785][T14261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.848667][ T29] audit: type=1400 audit(902.822:53157): avc: denied { create } for pid=14260 comm="syz.2.2817" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.921769][ T29] audit: type=1400 audit(902.902:53158): avc: denied { write } for pid=14260 comm="syz.2.2817" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.301302][ T29] audit: type=1400 audit(903.272:53159): avc: denied { ioctl } for pid=14274 comm="syz.1.2821" path="socket:[44383]" dev="sockfs" ino=44383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 389.350141][T14278] netlink: 'syz.1.2821': attribute type 10 has an invalid length. [ 389.378147][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 389.410360][ T29] audit: type=1400 audit(903.392:53160): avc: denied { read } for pid=14274 comm="syz.1.2821" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.434183][ T29] audit: type=1400 audit(903.392:53161): avc: denied { open } for pid=14274 comm="syz.1.2821" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.499354][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.630502][ T1039] usb 9-1: enqueue for inactive port 0 [ 389.636014][ T1039] usb 9-1: enqueue for inactive port 0 [ 389.652972][ T29] audit: type=1400 audit(903.452:53162): avc: denied { ioctl } for pid=14274 comm="syz.1.2821" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.711473][ T1039] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 389.712593][T14283] netlink: 'syz.1.2823': attribute type 3 has an invalid length. [ 389.727860][ T29] audit: type=1326 audit(903.692:53163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f83af749 code=0x7ffc0000 [ 389.750952][ T29] audit: type=1326 audit(903.692:53164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f83af749 code=0x7ffc0000 [ 389.773210][T14291] macvlan2: entered promiscuous mode [ 389.773936][ T29] audit: type=1326 audit(903.692:53165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd8f83af749 code=0x7ffc0000 [ 389.805571][T14280] loop2: detected capacity change from 0 to 512 [ 389.812662][T14280] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 389.820752][T14291] macvlan3: entered promiscuous mode [ 389.876085][T14293] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 389.887794][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 389.924875][T14293] bridge0 (unregistering): left allmulticast mode [ 390.441280][T14301] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 390.761389][T14314] lo speed is unknown, defaulting to 1000 [ 390.801250][T14314] vcan0 speed is unknown, defaulting to 1000 [ 391.572589][T14303] serio: Serial port ptm2 [ 391.862885][T14310] wireguard2: entered promiscuous mode [ 391.868564][T14310] wireguard2: entered allmulticast mode [ 392.232996][ T4121] usb usb4-port1: attempt power cycle [ 392.342229][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 392.712800][T14329] wireguard0: entered promiscuous mode [ 392.718373][T14329] wireguard0: entered allmulticast mode [ 392.788631][T14334] .`: (slave bond_slave_0): Releasing backup interface [ 393.016971][T14342] lo speed is unknown, defaulting to 1000 [ 393.089742][T14347] loop2: detected capacity change from 0 to 1024 [ 393.182725][T14347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.251201][T14342] vcan0 speed is unknown, defaulting to 1000 [ 394.144414][T14355] lo speed is unknown, defaulting to 1000 [ 394.262605][T14360] wireguard1: entered promiscuous mode [ 394.268132][T14360] wireguard1: entered allmulticast mode [ 394.326928][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 394.326940][ T29] audit: type=1326 audit(908.302:53285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.432021][ T29] audit: type=1326 audit(908.342:53286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.454956][ T29] audit: type=1326 audit(908.342:53287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.477944][ T29] audit: type=1326 audit(908.342:53288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.500887][ T29] audit: type=1326 audit(908.342:53289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.523927][ T29] audit: type=1326 audit(908.342:53290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.546909][ T29] audit: type=1326 audit(908.342:53291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.569886][ T29] audit: type=1326 audit(908.342:53292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.592832][ T29] audit: type=1326 audit(908.342:53293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.615875][ T29] audit: type=1326 audit(908.342:53294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.4.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ebd1f749 code=0x7ffc0000 [ 394.691932][T14355] vcan0 speed is unknown, defaulting to 1000 [ 394.880260][ T4121] usb usb4-port1: unable to enumerate USB device [ 394.891034][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.898789][T14369] netlink: 'syz.4.2842': attribute type 3 has an invalid length. [ 394.935289][T14373] loop2: detected capacity change from 0 to 128 [ 394.950153][T14373] veth0: entered promiscuous mode [ 394.955583][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 394.976200][T14373] veth0 (unregistering): left promiscuous mode [ 394.993764][T14374] tipc: Enabling of bearer rejected, failed to enable media [ 395.012045][T14376] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 395.019929][T14376] FAT-fs (loop2): Filesystem has been set read-only [ 395.159041][T14379] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 395.342000][T14376] bio_check_eod: 20 callbacks suppressed [ 395.342018][T14376] ÿ: attempt to access beyond end of device [ 395.342018][T14376] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 395.360623][T14376] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 395.378012][T14376] ÿ: attempt to access beyond end of device [ 395.378012][T14376] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 395.391029][T14376] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 395.533810][T14385] wireguard2: entered promiscuous mode [ 395.539344][T14385] wireguard2: entered allmulticast mode [ 395.630926][T14390] wireguard0: entered promiscuous mode [ 395.636430][T14390] wireguard0: entered allmulticast mode [ 396.697212][T14409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2852'. [ 396.728432][T14409] loop2: detected capacity change from 0 to 512 [ 396.748828][T14409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.769093][T14409] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2852: invalid block [ 396.781682][T14409] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2852: invalid indirect mapped block 4294967295 (level 1) [ 396.796199][T14409] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2852: invalid indirect mapped block 4294967295 (level 1) [ 396.822106][T14409] EXT4-fs (loop2): 2 truncates cleaned up [ 396.831304][T14409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.865909][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 396.913534][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.078815][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.097498][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.118691][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 397.370201][ T3382] usb usb6-port1: attempt power cycle [ 397.683878][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 397.813127][T14432] wireguard0: entered promiscuous mode [ 397.818650][T14432] wireguard0: entered allmulticast mode [ 398.033928][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2861'. [ 398.551191][T14424] Process accounting resumed [ 398.573260][T14468] loop2: detected capacity change from 0 to 128 [ 398.640395][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 398.997161][T14549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2866'. [ 399.037192][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 399.220173][ T3382] usb usb6-port1: unable to enumerate USB device [ 399.321215][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2867'. [ 399.432240][T14584] loop2: detected capacity change from 0 to 128 [ 399.451403][ T29] kauditd_printk_skb: 4239 callbacks suppressed [ 399.451415][ T29] audit: type=1326 audit(913.432:57534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.526695][ T29] audit: type=1326 audit(913.432:57535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.549824][ T29] audit: type=1326 audit(913.432:57536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.573098][ T29] audit: type=1326 audit(913.462:57537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.596164][ T29] audit: type=1326 audit(913.462:57538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.619389][ T29] audit: type=1326 audit(913.462:57539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.642482][ T29] audit: type=1326 audit(913.472:57540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.665448][ T29] audit: type=1326 audit(913.472:57541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.688455][ T29] audit: type=1326 audit(913.472:57542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.711464][ T29] audit: type=1326 audit(913.472:57543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14583 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 399.970592][T14601] netlink: 'syz.4.2872': attribute type 3 has an invalid length. [ 400.042360][T14593] __nla_validate_parse: 3 callbacks suppressed [ 400.042375][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2870'. [ 400.748329][T14613] loop2: detected capacity change from 0 to 2048 [ 401.049376][T14625] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 401.585652][T14632] netlink: 'syz.3.2879': attribute type 4 has an invalid length. [ 401.595060][T14632] netlink: 'syz.3.2879': attribute type 4 has an invalid length. [ 401.605340][ T3382] lo speed is unknown, defaulting to 1000 [ 401.611139][ T3382] syz2: Port: 1 Link ACTIVE [ 401.669621][T14641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2881'. [ 401.737510][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2883'. [ 401.903044][T14658] gtp0: entered promiscuous mode [ 401.913378][T14658] netlink: 'syz.3.2885': attribute type 30 has an invalid length. [ 401.990556][T14655] siw: device registration error -23 [ 402.180043][ T3734] usb usb6-port1: attempt power cycle [ 402.215910][T14675] netlink: 'syz.4.2888': attribute type 10 has an invalid length. [ 402.234835][T14675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.251041][T14675] team0: Port device bond0 added [ 402.261831][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 402.282415][T14675] team0 (unregistering): Port device team_slave_0 removed [ 402.291369][T14675] team0 (unregistering): Port device bond0 removed [ 402.372881][T14675] 9p: Bad value for 'wfdno' [ 402.985203][T14694] veth4: entered promiscuous mode [ 402.990317][T14694] veth4: entered allmulticast mode [ 403.021009][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2894'. [ 403.358986][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2895'. [ 404.109919][ T3734] usb usb6-port1: unable to enumerate USB device [ 404.116866][T14605] vhci_hcd vhci_hcd.2: invalid port number 96 [ 404.122975][T14605] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 404.547090][T14723] siw: device registration error -23 [ 404.558257][ T3734] IPVS: starting estimator thread 0... [ 404.614179][ T29] kauditd_printk_skb: 1402 callbacks suppressed [ 404.614193][ T29] audit: type=1326 audit(918.592:58946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.669689][T14739] IPVS: using max 2400 ests per chain, 120000 per kthread [ 404.720398][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 404.725982][ T29] audit: type=1326 audit(918.622:58947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.752840][ T29] audit: type=1326 audit(918.622:58948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.776249][ T29] audit: type=1326 audit(918.622:58949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.799762][ T29] audit: type=1326 audit(918.622:58950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.823136][ T29] audit: type=1326 audit(918.622:58951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.846432][ T29] audit: type=1326 audit(918.622:58952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.869905][ T29] audit: type=1326 audit(918.622:58953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.893268][ T29] audit: type=1326 audit(918.622:58954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 404.916763][ T29] audit: type=1326 audit(918.622:58955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14743 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 405.145798][T14757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2906'. [ 405.458351][T14764] netlink: 'syz.2.2907': attribute type 10 has an invalid length. [ 405.536780][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2907'. [ 405.607031][T14764] team0: Device bond0 is already an upper device of the team interface [ 405.701490][T14768] bond0: (slave team0): Releasing backup interface [ 405.979255][T14768] team0 (unregistering): Port device team_slave_0 removed [ 406.031508][T14768] team0 (unregistering): Port device dummy0 removed [ 406.437205][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 407.599049][T14795] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 407.605651][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.613418][T14795] vhci_hcd vhci_hcd.0: Device attached [ 407.659151][T14799] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 407.665755][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.673350][T14799] vhci_hcd vhci_hcd.0: Device attached [ 407.710188][T14795] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 407.716832][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 407.724793][T14795] vhci_hcd vhci_hcd.0: Device attached [ 407.761106][T14799] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 407.767728][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.775243][T14799] vhci_hcd vhci_hcd.0: Device attached [ 407.807573][T14795] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 407.814195][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 407.821899][T14795] vhci_hcd vhci_hcd.0: Device attached [ 407.854512][T14795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 407.864096][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 407.873011][T14809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2925'. [ 407.892827][T14795] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(23) [ 407.893090][ T3734] usb 3-1: new low-speed USB device number 12 using vhci_hcd [ 407.899480][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.914277][T14795] vhci_hcd vhci_hcd.0: Device attached [ 407.920641][T14809] bridge3: entered promiscuous mode [ 407.925845][T14809] bridge3: entered allmulticast mode [ 407.950877][T14799] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(26) [ 407.957273][T14819] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 407.957505][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.972907][T14799] vhci_hcd vhci_hcd.0: Device attached [ 407.975315][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 407.996782][T14795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.022938][T14815] vhci_hcd: connection closed [ 408.023011][T14813] vhci_hcd: connection closed [ 408.028241][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.028844][T14796] vhci_hcd: connection reset by peer [ 408.032971][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.048826][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.054561][T14800] vhci_hcd: connection closed [ 408.054841][T14804] vhci_hcd: connection closed [ 408.059760][T14802] vhci_hcd: connection closed [ 408.064517][T14806] vhci_hcd: connection closed [ 408.096633][T14819] 9p: Bad value for 'rfdno' [ 408.109946][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.115158][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.120626][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.149614][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.154858][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.160350][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.170035][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2919'. [ 408.179890][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.185162][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.190614][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.208364][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.213664][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.219115][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.242758][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.247993][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.253422][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.269822][ T9239] vhci_hcd vhci_hcd.1: stop threads [ 408.275050][ T9239] vhci_hcd vhci_hcd.1: release socket [ 408.280521][ T9239] vhci_hcd vhci_hcd.1: disconnect device [ 408.350266][T14834] wireguard0: entered promiscuous mode [ 408.355788][T14834] wireguard0: entered allmulticast mode [ 408.643921][T14838] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 408.678702][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 408.699603][T14844] wireguard1: entered promiscuous mode [ 408.705102][T14844] wireguard1: entered allmulticast mode [ 408.956371][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 409.477295][T14878] siw: device registration error -23 [ 409.860859][T14892] veth8: entered promiscuous mode [ 409.866000][T14892] veth8: entered allmulticast mode [ 409.880474][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 409.977772][ T29] kauditd_printk_skb: 2905 callbacks suppressed [ 409.977786][ T29] audit: type=1326 audit(923.952:61861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.060033][T14902] wireguard0: entered promiscuous mode [ 410.065532][T14902] wireguard0: entered allmulticast mode [ 410.081414][ T29] audit: type=1326 audit(923.992:61862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.104556][ T29] audit: type=1326 audit(923.992:61863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.127638][ T29] audit: type=1326 audit(923.992:61864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.150729][ T29] audit: type=1326 audit(924.002:61865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.173770][ T29] audit: type=1326 audit(924.002:61866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.196746][ T29] audit: type=1326 audit(924.002:61867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.219843][ T29] audit: type=1326 audit(924.002:61868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.242779][ T29] audit: type=1326 audit(924.002:61869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.265861][ T29] audit: type=1326 audit(924.002:61870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.3.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 410.523400][T14910] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 410.530048][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.537775][T14910] vhci_hcd vhci_hcd.0: Device attached [ 410.544636][T14903] lo speed is unknown, defaulting to 1000 [ 410.554564][T14910] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 410.561271][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.568904][T14910] vhci_hcd vhci_hcd.0: Device attached [ 410.622346][T14918] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 410.628979][T14918] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.636599][T14918] vhci_hcd vhci_hcd.0: Device attached [ 410.642315][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2937'. [ 410.660306][T14910] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 410.666572][T14903] vcan0 speed is unknown, defaulting to 1000 [ 410.666932][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.680544][T14910] vhci_hcd vhci_hcd.0: Device attached [ 410.717395][T14918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 410.724014][T14918] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 410.731752][T14918] vhci_hcd vhci_hcd.0: Device attached [ 410.768160][T14910] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.787959][T14910] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 410.794590][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.802058][T14910] vhci_hcd vhci_hcd.0: Device attached [ 410.807559][ T4121] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 410.825844][T14910] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 410.832466][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.840069][T14910] vhci_hcd vhci_hcd.0: Device attached [ 410.841035][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2936'. [ 410.854841][T14910] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.872785][T14937] vhci_hcd: connection closed [ 410.872968][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 410.873093][T14935] vhci_hcd: connection closed [ 410.877695][ T9239] vhci_hcd vhci_hcd.2: release socket [ 410.877717][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 410.899075][T14929] vhci_hcd: connection closed [ 410.899224][T14925] vhci_hcd: connection closed [ 410.899236][T14920] vhci_hcd: connection closed [ 410.920076][T14914] vhci_hcd: connection closed [ 410.923261][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 410.924910][T14911] vhci_hcd: connection reset by peer [ 410.929481][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2942'. [ 410.952997][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 410.958251][ T9239] vhci_hcd vhci_hcd.2: release socket [ 410.963833][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 410.971071][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 410.976329][ T9239] vhci_hcd vhci_hcd.2: release socket [ 410.981789][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 410.987751][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 410.993032][ T9239] vhci_hcd vhci_hcd.2: release socket [ 410.998536][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 411.005756][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 411.007918][T14943] bridge0: entered promiscuous mode [ 411.011006][ T9239] vhci_hcd vhci_hcd.2: release socket [ 411.016210][T14943] bridge0: entered allmulticast mode [ 411.026867][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 411.040613][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 411.045879][ T9239] vhci_hcd vhci_hcd.2: release socket [ 411.051381][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 411.057476][ T9239] vhci_hcd vhci_hcd.2: stop threads [ 411.062793][ T9239] vhci_hcd vhci_hcd.2: release socket [ 411.068330][ T9239] vhci_hcd vhci_hcd.2: disconnect device [ 411.117082][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'. [ 411.210861][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2947'. [ 411.488252][T14967] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2949'. [ 411.518322][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 411.571781][T14975] netlink: 'syz.2.2952': attribute type 3 has an invalid length. [ 411.647428][T14979] netlink: 'syz.4.2953': attribute type 3 has an invalid length. [ 412.080413][T14988] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 412.322172][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 412.512735][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2968'. [ 412.823585][T15015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15015 comm=syz.4.2960 [ 412.999707][ T3734] usb 3-1: enqueue for inactive port 0 [ 413.005758][ T3734] usb 3-1: enqueue for inactive port 0 [ 413.079852][ T3734] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 413.684267][T15041] lo speed is unknown, defaulting to 1000 [ 413.723692][T15041] vcan0 speed is unknown, defaulting to 1000 [ 414.791649][T15050] netlink: 'syz.4.2970': attribute type 3 has an invalid length. [ 415.000108][T15053] wireguard0: entered promiscuous mode [ 415.005700][T15053] wireguard0: entered allmulticast mode [ 415.732003][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 415.732016][ T29] audit: type=1400 audit(929.712:62506): avc: denied { unmount } for pid=15055 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 415.996088][ T4121] usb 5-1: enqueue for inactive port 0 [ 416.010748][ T4121] usb 5-1: enqueue for inactive port 0 [ 416.091393][ T4121] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 416.336203][T15084] __nla_validate_parse: 4 callbacks suppressed [ 416.336219][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2981'. [ 416.742961][T15099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 416.953595][ T29] audit: type=1326 audit(930.932:62507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 417.814050][ T10] usb usb4-port1: attempt power cycle [ 417.940947][ T29] audit: type=1326 audit(930.932:62508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 417.963506][ T29] audit: type=1326 audit(930.932:62509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 417.986037][ T29] audit: type=1326 audit(930.932:62510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 417.988051][T15112] Set syz1 is full, maxelem 65536 reached [ 418.008418][ T29] audit: type=1326 audit(930.932:62511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 418.036647][ T29] audit: type=1326 audit(930.932:62512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 418.059188][ T29] audit: type=1326 audit(930.932:62513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 418.082340][ T29] audit: type=1326 audit(930.932:62514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 418.104727][ T29] audit: type=1326 audit(930.932:62515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 418.243161][T15112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2987'. [ 418.252375][T15112] unsupported nlmsg_type 40 [ 418.293274][T15110] lo speed is unknown, defaulting to 1000 [ 418.336966][T15117] netlink: 'syz.1.2990': attribute type 3 has an invalid length. [ 418.355470][T15110] vcan0 speed is unknown, defaulting to 1000 [ 418.591687][T15127] wireguard2: entered promiscuous mode [ 418.597255][T15127] wireguard2: entered allmulticast mode [ 419.184676][T15141] SELinux: Context × is not valid (left unmapped). [ 419.195095][T15145] atomic_op ffff88810cfb4528 conn xmit_atomic 0000000000000000 [ 419.220474][T15145] SELinux: security_context_str_to_sid () failed with errno=-22 [ 419.263013][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2995'. [ 419.387125][T15143] lo speed is unknown, defaulting to 1000 [ 419.437482][T15143] vcan0 speed is unknown, defaulting to 1000 [ 419.566712][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 419.746665][T15156] lo speed is unknown, defaulting to 1000 [ 419.801809][T15156] vcan0 speed is unknown, defaulting to 1000 [ 419.981807][ T1039] usb usb6-port1: attempt power cycle [ 420.344165][T15162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2999'. [ 420.372812][T15165] usb usb1: usbfs: interface 0 claimed by hub while '+}[K' sets config #0 [ 420.440109][ T10] usb usb4-port1: unable to enumerate USB device [ 420.774940][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 420.774988][ T29] audit: type=1326 audit(934.752:63192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.826451][ T29] audit: type=1326 audit(934.782:63193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.850366][ T29] audit: type=1326 audit(934.782:63194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.874208][ T29] audit: type=1326 audit(934.782:63195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.897961][ T29] audit: type=1326 audit(934.782:63196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.921843][ T29] audit: type=1326 audit(934.782:63197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.945572][ T29] audit: type=1326 audit(934.782:63198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.969441][ T29] audit: type=1326 audit(934.782:63199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 420.993223][ T29] audit: type=1326 audit(934.782:63200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 421.017034][ T29] audit: type=1326 audit(934.792:63201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7736cbf749 code=0x7ffc0000 [ 421.074872][T15176] netlink: 'syz.1.3002': attribute type 3 has an invalid length. [ 421.463421][T15186] wireguard0: entered promiscuous mode [ 421.468924][T15186] wireguard0: entered allmulticast mode [ 421.522791][T15191] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 421.698724][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'. [ 422.443636][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 422.619526][ T1039] usb usb6-port1: unable to enumerate USB device [ 422.795243][T15218] lo speed is unknown, defaulting to 1000 [ 422.847418][T15218] vcan0 speed is unknown, defaulting to 1000 [ 423.526609][T15236] netlink: 'syz.2.3017': attribute type 10 has an invalid length. [ 423.540941][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3018'. [ 423.568485][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 423.681714][T15236] 9p: Bad value for 'wfdno' [ 423.830444][T15246] wireguard0: entered promiscuous mode [ 423.836020][T15246] wireguard0: entered allmulticast mode [ 424.425597][T15256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.452492][T15256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.622925][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3023'. [ 424.878003][T15264] netlink: 'syz.5.3025': attribute type 3 has an invalid length. [ 424.912550][T15258] netlink: 'syz.1.3024': attribute type 3 has an invalid length. [ 425.049772][T15271] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.167627][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 425.484407][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'. [ 425.742680][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3032'. [ 425.752132][T15274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3029'. [ 425.762828][T15274] 0ªX¹¦À: renamed from caif0 [ 425.781216][T15274] 0ªX¹¦À: entered allmulticast mode [ 425.787645][T15274] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 425.865074][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 425.865180][ T29] audit: type=1326 audit(939.842:63595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 425.900430][T15289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3034'. [ 425.921248][T15287] wireguard2: entered promiscuous mode [ 425.921401][ T29] audit: type=1326 audit(939.872:63596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 425.926744][T15287] wireguard2: entered allmulticast mode [ 425.956516][ T29] audit: type=1326 audit(939.872:63597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 425.980375][ T29] audit: type=1326 audit(939.872:63598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.004247][ T29] audit: type=1326 audit(939.872:63599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.028035][ T29] audit: type=1326 audit(939.872:63600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.051828][ T29] audit: type=1326 audit(939.872:63601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.075527][ T29] audit: type=1326 audit(939.872:63602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.099301][ T29] audit: type=1326 audit(939.882:63603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.123085][ T29] audit: type=1326 audit(939.892:63604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a63ef749 code=0x7ffc0000 [ 426.258914][T15307] pim6reg: entered allmulticast mode [ 427.423552][T15336] pim6reg: left allmulticast mode [ 427.463252][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.464538][T15325] netlink: 'syz.2.3041': attribute type 3 has an invalid length. [ 427.473852][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.493486][T15335] __nla_validate_parse: 1 callbacks suppressed [ 427.493498][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 427.502402][T15338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3046'. [ 427.546002][T15340] wireguard0: entered promiscuous mode [ 427.552084][T15340] wireguard0: entered allmulticast mode [ 427.583601][T15307] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3036'. [ 427.909886][T15361] wireguard2: entered promiscuous mode [ 427.915762][T15361] wireguard2: entered allmulticast mode [ 428.162265][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 428.293638][T15373] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.528442][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 429.122316][T15383] netlink: 'syz.5.3055': attribute type 10 has an invalid length. [ 429.130431][T15383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3055'. [ 429.151832][T15361] Process accounting paused [ 429.273383][T15391] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3058'. [ 429.577531][T15400] wireguard0: entered promiscuous mode [ 429.583424][T15400] wireguard0: entered allmulticast mode [ 429.721825][T15406] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 429.795237][T15418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3065'. [ 429.919085][T15424] wireguard0: entered promiscuous mode [ 429.924635][T15424] wireguard0: entered allmulticast mode [ 430.157252][T15434] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.3068'. [ 430.171937][T15434] netlink: zone id is out of range [ 430.177085][T15434] netlink: zone id is out of range [ 430.182448][T15434] netlink: zone id is out of range [ 430.187986][T15434] netlink: zone id is out of range [ 430.194105][T15434] netlink: zone id is out of range [ 430.199437][T15434] netlink: zone id is out of range [ 430.204825][T15434] netlink: zone id is out of range [ 430.210458][T15434] netlink: zone id is out of range [ 430.215987][T15434] netlink: zone id is out of range [ 430.254874][ T3382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 430.283237][ T3382] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 430.297883][T15441] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.455775][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 430.639858][T15441] ================================================================== [ 430.647978][T15441] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 430.655285][T15441] [ 430.657613][T15441] write to 0xffff888119cf49a8 of 4 bytes by task 15447 on cpu 0: [ 430.665326][T15441] touch_atime+0x1e8/0x340 [ 430.669747][T15441] shmem_file_read_iter+0x477/0x540 [ 430.674965][T15441] copy_splice_read+0x442/0x660 [ 430.679827][T15441] splice_direct_to_actor+0x290/0x680 [ 430.685207][T15441] do_splice_direct+0xda/0x150 [ 430.689970][T15441] do_sendfile+0x380/0x650 [ 430.694406][T15441] __x64_sys_sendfile64+0x105/0x150 [ 430.699623][T15441] x64_sys_call+0x2db1/0x3000 [ 430.704321][T15441] do_syscall_64+0xca/0x2b0 [ 430.708837][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.714732][T15441] [ 430.717047][T15441] read to 0xffff888119cf49a8 of 4 bytes by task 15441 on cpu 1: [ 430.724683][T15441] atime_needs_update+0x25f/0x3e0 [ 430.729715][T15441] touch_atime+0x4a/0x340 [ 430.734044][T15441] shmem_file_read_iter+0x477/0x540 [ 430.739419][T15441] copy_splice_read+0x442/0x660 [ 430.744277][T15441] splice_direct_to_actor+0x290/0x680 [ 430.749663][T15441] do_splice_direct+0xda/0x150 [ 430.754441][T15441] do_sendfile+0x380/0x650 [ 430.758877][T15441] __x64_sys_sendfile64+0x105/0x150 [ 430.764092][T15441] x64_sys_call+0x2db1/0x3000 [ 430.768784][T15441] do_syscall_64+0xca/0x2b0 [ 430.773305][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.779202][T15441] [ 430.781518][T15441] value changed: 0x248014b3 -> 0x2518ab33 [ 430.787226][T15441] [ 430.789536][T15441] Reported by Kernel Concurrency Sanitizer on: [ 430.795687][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.2.3070 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 430.807067][T15441] Tainted: [W]=WARN [ 430.810864][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.820920][T15441] ==================================================================