last executing test programs: 5m50.56505151s ago: executing program 2 (id=1810): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0) 5m50.496841221s ago: executing program 2 (id=1812): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m50.280433464s ago: executing program 2 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x7880, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x27d}) r3 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) unlink(&(0x7f0000000180)='./file1\x00') close_range(r2, 0xffffffffffffffff, 0x0) 5m50.253536304s ago: executing program 2 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000700)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 5m50.152081676s ago: executing program 2 (id=1818): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 5m50.054211538s ago: executing program 2 (id=1822): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x9dc5, 0x105, 0x0, 0x6}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 5m50.031147238s ago: executing program 32 (id=1822): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x9dc5, 0x105, 0x0, 0x6}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 35.716219321s ago: executing program 5 (id=6769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000140)={[{@block_validity}, {@prjquota}, {@noblock_validity}, {@nobarrier}, {@auto_da_alloc}, {@mblk_io_submit}, {@nodelalloc}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r0, r2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$TIOCGPTPEER(r4, 0x5441, 0x401) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) 35.656334012s ago: executing program 5 (id=6773): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x400, 0x81, 0xffffffff, 0x6, 0x8, 0x204002, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 35.633797753s ago: executing program 5 (id=6774): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(0x0, &(0x7f0000000140), 0x0, 0xe00f, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 34.692961987s ago: executing program 5 (id=6783): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLHjao4cRUn0EQZ0r1CdECAupQNBkYQAwNiYWRlATEjVTQCqekARv5K09QJTohjyP1+0tnPc3f2/3nu/H/sO93JAWTW8fpDGvFURFxOIobXLRuI1sLjzfVWV5aKD1eWiknUald+TiKJiAcrS8X2+knr+UhELEfE/yPi63zEyXTtLQ+0C9WFxanxcrk026qPzE1fH6kuLJ66Nj0+WZoszZx58aVz58+eGzs9tr65D2vra/nt9fXWD7ffufXtK3dvf/LpseXie+NJXIih1rL1/dhNzW2Sjwsb5p/tRbA+SvrdAHYk18rzeir9L4Yj18r6TmrrB4fBPWke0EO1wYgakFGJ/IeMav8OqB//tqe9/P1x72LzAKQed7U1NZcMNM9NxMHGscnhX5LHjkzqx5tH97Kh7EvLNyNidGDgyc9/0vr87dzobjSQnvrqYnNHPbn/07XxJzqMP0Ptc6d/UXv8W31i/HsUP7fJ+He5yxi/vf7jh5vGvxnxdMf4yVr8pEP8NCLe7DL+nde+OL/ZstpHESeic/y2ZOvzwyNXr5VLo83HjjG+PHHs5a36f3iT+M1ztgcbXzOdtn/aZf8//+azZ5a3iP/8s1vv/07b/1BEvNtl/P88+PjVzZbdu5ncr/8K2O7+TyIfd7uM/8KF49+3is4aAgAAAAAAAADALkob17IlaWGtnKaFQvMe3v/G4bRcqc6dvFqZn5loXvN2NPJp+0qr4WY9qdfHWtfjtuunN9TP5FoBc4ca9UKxUp7oc98BAAAAAAAAAAAAAAAAAADg7+LIhvv/f8017v/f+HfVwH61+V9+A/ud/Ifsejz/k761A9h7vv8hs2ryH7JL/kN2yX/ILvkP2SX/IbvkP2SX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgJ64fOlSfao9XFkq1usTAwvzU5W3Tk2UqlOF6flioViZvV6YrFQmy6VCsTL9Z++XVCrXR2Nm/sbIXKk6N1JdWHxjujI/0/5P0VK+5z0CAAAAAAAAAAAAAAAAAACAf56hxpSkhYh8s56mhULEvyLiaBLJ1Wvl0mhE/DsivsvlB+v1sX43GgAAAAAAAAAAAAAAAAAAAPaZ6sLi1Hi5XJrtXWGgFaqHIbovDGxn5YhY3t1m1N9x26/KtzZgnzedQqYKfRyUAAAAAAAAAAAAAAAAAAAgox7d9NvtK37vbYMAAAAAAAAAAAAAAAAAAAAgk9KfkoioTyeGnxvauPRAspprPEfE23euvH9jfG5udqw+//7a/LkPWvNP96P9QLfaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEeqC4tT4+VyaXaHhcEu1ul3HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB24o8AAAD//+mR0Yo=") syz_open_dev$tty1(0xc, 0x4, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2704, &(0x7f00000003c0)={0x0, 0x19, 0x2c84, 0x0, 0x136}, &(0x7f0000ff0000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000080), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 33.533115815s ago: executing program 5 (id=6788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a}, 0xff28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r4], 0x30}}, 0x94) 32.977382033s ago: executing program 5 (id=6794): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 17.611930519s ago: executing program 33 (id=6794): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 8.890487643s ago: executing program 4 (id=6963): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0x6}, {0xf, 0x9}, {0x5, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe00}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x2991, 0x7, 0x2, 0x4, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x10, 0xfff2, 0x6, 0x1572]}}, {{0x1c, 0x1, {0x5, 0x2, 0x7fff, 0x3ff, 0x0, 0xfffffffe, 0x8424}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x2, 0x80, 0x9, 0x0, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0x14f4]}}, {{0x1c, 0x1, {0x2, 0x6, 0x8, 0x8, 0x1, 0x9079, 0x1ff, 0x5}}, {0xe, 0x2, [0x200, 0x5, 0x401, 0x6, 0x6]}}, {{0x1c, 0x1, {0xc, 0x9, 0x6, 0x1, 0x0, 0x3, 0xfffffff8, 0x1}}, {0x6, 0x2, [0x50fe]}}]}]}, 0xf8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) 8.505118799s ago: executing program 4 (id=6964): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xe3ac, 0xdb72}, &(0x7f0000000380)=0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0x32) close(r6) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8.45091379s ago: executing program 4 (id=6966): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 8.388118431s ago: executing program 4 (id=6967): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 7.425788696s ago: executing program 4 (id=6977): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 7.409606546s ago: executing program 6 (id=6978): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}], 0x1, 0x0) 7.374257107s ago: executing program 4 (id=6979): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0xd317}, {r0, 0x2000}, {r0, 0x4080}], 0x0, &(0x7f00000001c0), 0x0, 0xfffffe42) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES16=r0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 6.324242043s ago: executing program 6 (id=6982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.977195083s ago: executing program 6 (id=6987): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) uname(0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.280466114s ago: executing program 6 (id=6990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40c80) creat(&(0x7f0000000140)='./file0\x00', 0x82) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r4, {0xfff2, 0xb}, {}, {0xfffd}}}, 0x24}}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 2.471070722s ago: executing program 1 (id=7005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, 0x0, r2, &(0x7f0000000100)='./mnt\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x20c02) writev(r4, 0x0, 0x0) read(r4, 0x0, 0x0) symlink(0x0, 0x0) ftruncate(r3, 0x0) 2.448020892s ago: executing program 1 (id=7006): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioperm(0x0, 0xd, 0x4000000000000020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) iopl(0x3) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.93704057s ago: executing program 1 (id=7007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 1.551762216s ago: executing program 1 (id=7010): socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(r4, 0x7) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) 988.132585ms ago: executing program 3 (id=7014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x2000}, 0x10) 965.760105ms ago: executing program 6 (id=7015): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 892.091166ms ago: executing program 3 (id=7016): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 854.599096ms ago: executing program 3 (id=7017): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 852.509907ms ago: executing program 0 (id=7018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400008004000016a33314a5dbb3bf00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) recvmsg$unix(r3, &(0x7f0000000140)={&(0x7f00000003c0), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/162, 0xa2}], 0x3, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x10160) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x27}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 731.005448ms ago: executing program 0 (id=7019): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 640.32887ms ago: executing program 0 (id=7020): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xfffffffd, 0x3, 0xa, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x6c, 0x2, 0x6, 0x103, 0x0, 0x0, {0x0, 0x0, 0x200}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x40000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) setreuid(0xee01, 0xee01) fchown(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 639.88154ms ago: executing program 1 (id=7021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 548.220641ms ago: executing program 0 (id=7022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 396.020944ms ago: executing program 0 (id=7023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x40000000015, 0x5, 0x7) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) 386.699344ms ago: executing program 0 (id=7024): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(r0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 238.727366ms ago: executing program 3 (id=7025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 193.215017ms ago: executing program 6 (id=7026): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @local, 0x2}, 0x1c) bind$inet6(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x6, 0x3a33, 0x7, 0x4}, 0x10) 192.920617ms ago: executing program 3 (id=7027): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x0, 0x200000000}], 0x0) 169.835597ms ago: executing program 34 (id=7026): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @local, 0x2}, 0x1c) bind$inet6(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x6, 0x3a33, 0x7, 0x4}, 0x10) 127.300087ms ago: executing program 3 (id=7029): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 0s ago: executing program 1 (id=7030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 29 code=0x7ffc0000 [ 335.317260][ T29] audit: type=1326 audit(1752262314.310:41741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20277 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 335.340972][ T29] audit: type=1326 audit(1752262314.310:41742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20277 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 335.364648][ T29] audit: type=1326 audit(1752262314.310:41743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20277 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 335.388283][ T29] audit: type=1326 audit(1752262314.310:41744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20277 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 335.933551][ T29] audit: type=1326 audit(1752262315.060:41745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20277 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 336.220811][T20296] netlink: 52 bytes leftover after parsing attributes in process `'. [ 336.277879][T20303] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 336.382268][T20313] netlink: 'syz.1.5802': attribute type 1 has an invalid length. [ 337.007604][T20353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.301931][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 337.310914][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 337.319971][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5822'. [ 337.351642][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 337.385873][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 337.394817][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 337.516995][T20376] lo speed is unknown, defaulting to 1000 [ 337.533827][T20376] lo speed is unknown, defaulting to 1000 [ 338.674717][T20417] xt_hashlimit: max too large, truncated to 1048576 [ 338.741618][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5842'. [ 338.790678][T20428] lo speed is unknown, defaulting to 1000 [ 338.797191][T20428] lo speed is unknown, defaulting to 1000 [ 338.864243][T20428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 338.893643][T20432] tipc: Enabling of bearer rejected, failed to enable media [ 338.925296][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 338.925313][ T29] audit: type=1400 audit(1752262318.050:41837): avc: denied { setattr } for pid=20433 comm="syz.0.5847" path="socket:[51778]" dev="sockfs" ino=51778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.967572][T20436] netlink: 'syz.0.5849': attribute type 4 has an invalid length. [ 339.030780][ T29] audit: type=1326 audit(1752262318.150:41838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.074524][ T29] audit: type=1326 audit(1752262318.180:41839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.098255][ T29] audit: type=1326 audit(1752262318.180:41840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.121788][ T29] audit: type=1326 audit(1752262318.180:41841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.145431][ T29] audit: type=1326 audit(1752262318.180:41842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.169320][ T29] audit: type=1326 audit(1752262318.180:41843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.192868][ T29] audit: type=1326 audit(1752262318.180:41844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.216586][ T29] audit: type=1326 audit(1752262318.180:41845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 339.240282][ T29] audit: type=1326 audit(1752262318.180:41846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.0.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0897ece52b code=0x7ffc0000 [ 339.314624][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5853'. [ 339.545981][T20466] batadv_slave_0: entered promiscuous mode [ 339.552206][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5860'. [ 339.562921][T20466] batadv_slave_0 (unregistering): left promiscuous mode [ 339.932900][T20472] netlink: 'syz.4.5863': attribute type 1 has an invalid length. [ 340.040998][T20472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.096169][T20475] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.145880][T20475] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.189175][T20475] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 340.267630][T20477] veth19: entered promiscuous mode [ 340.275589][T20477] bond7: (slave veth19): Enslaving as an active interface with a down link [ 340.373034][T20472] erspan0: entered allmulticast mode [ 340.380496][T20472] bond7: (slave erspan0): making interface the new active one [ 340.390486][T20472] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 340.985539][T20531] netlink: 'syz.1.5886': attribute type 1 has an invalid length. [ 341.034932][T20531] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 341.043859][T20531] bond8: (slave batadv2): Enslaving as a backup interface with an up link [ 341.161280][ T8181] kernel write not supported for file bpf-map (pid: 8181 comm: kworker/1:11) [ 341.175322][T20531] bond8 (unregistering): (slave batadv2): Releasing backup interface [ 341.185482][T20531] bond8 (unregistering): Released all slaves [ 341.492537][T20558] netlink: 'syz.3.5896': attribute type 4 has an invalid length. [ 341.507226][T20558] netlink: 'syz.3.5896': attribute type 4 has an invalid length. [ 342.336606][T20573] lo speed is unknown, defaulting to 1000 [ 342.344053][T20573] lo speed is unknown, defaulting to 1000 [ 342.716213][T20571] lo speed is unknown, defaulting to 1000 [ 343.028583][T20571] lo speed is unknown, defaulting to 1000 [ 343.679930][T20586] wg2: entered promiscuous mode [ 343.684917][T20586] wg2: entered allmulticast mode [ 344.529629][T20608] tipc: Enabling of bearer rejected, failed to enable media [ 344.559632][T20610] netlink: 'syz.4.5914': attribute type 4 has an invalid length. [ 344.587915][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 344.587933][ T29] audit: type=1326 audit(1752262323.710:41991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.623483][ T29] audit: type=1326 audit(1752262323.750:41992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.647955][ T29] audit: type=1326 audit(1752262323.750:41993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.671634][ T29] audit: type=1326 audit(1752262323.750:41994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.695259][ T29] audit: type=1326 audit(1752262323.750:41995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.719716][ T29] audit: type=1326 audit(1752262323.750:41996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.744101][ T29] audit: type=1326 audit(1752262323.750:41997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.768071][ T29] audit: type=1326 audit(1752262323.750:41998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.792350][ T29] audit: type=1326 audit(1752262323.750:41999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.816705][ T29] audit: type=1326 audit(1752262323.750:42000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.4.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 344.884434][T20618] netlink: 'syz.4.5918': attribute type 1 has an invalid length. [ 344.892440][T20617] wg2: left promiscuous mode [ 344.897206][T20617] wg2: left allmulticast mode [ 344.903847][T20617] vxlan1: left promiscuous mode [ 344.908855][T20617] vxlan2: left promiscuous mode [ 344.917538][T20617] bond6: (slave bond7): Releasing backup interface [ 344.924134][T20617] bond6: (slave bond7): the permanent HWaddr of slave - de:bf:4d:34:0e:ad - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 344.942175][T20617] bond6: (slave gretap0): making interface the new active one [ 344.953042][T20617] bond6: (slave gretap0): Releasing backup interface [ 344.969397][T20618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.247564][T20628] lo speed is unknown, defaulting to 1000 [ 345.272258][T20628] lo speed is unknown, defaulting to 1000 [ 345.642113][T20638] Cannot find add_set index 0 as target [ 345.675086][T20641] __nla_validate_parse: 5 callbacks suppressed [ 345.675105][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5925'. [ 345.926490][ T8181] kernel write not supported for file bpf-map (pid: 8181 comm: kworker/1:11) [ 346.123412][T20656] netlink: 'syz.0.5930': attribute type 1 has an invalid length. [ 346.191223][T20656] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.328222][T20656] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 346.447665][T20662] gretap1: entered promiscuous mode [ 346.455541][T20662] bond0: (slave gretap1): making interface the new active one [ 346.465309][T20662] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 346.479551][T20663] macvlan0: entered promiscuous mode [ 346.485010][T20663] macvlan0: entered allmulticast mode [ 346.493287][T20663] bond0: entered promiscuous mode [ 346.524607][T20663] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 346.605534][T20663] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 346.647186][T20626] Set syz1 is full, maxelem 65536 reached [ 346.656146][T20663] bond0: left promiscuous mode [ 346.996241][T20668] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 347.104597][T20682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.117637][T20680] infiniband syz!: set down [ 347.131213][T20680] infiniband syz!: added team_slave_0 [ 347.155950][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5940'. [ 347.161915][T20680] RDS/IB: syz!: added [ 347.179900][T20680] smc: adding ib device syz! with port count 1 [ 347.186521][T20680] smc: ib device syz! port 1 has pnetid [ 347.309183][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5938'. [ 347.319426][T20695] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 347.733818][T20712] xt_hashlimit: size too large, truncated to 1048576 [ 347.821271][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5953'. [ 347.988754][T20725] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5957'. [ 348.000732][T20723] lo speed is unknown, defaulting to 1000 [ 348.019581][T20723] lo speed is unknown, defaulting to 1000 [ 348.036654][T20727] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5954'. [ 348.048376][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5954'. [ 348.058155][T20727] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5954'. [ 348.067282][T20727] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5954'. [ 348.079061][T20727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5954'. [ 348.092053][T20728] netlink: 'syz.4.5958': attribute type 4 has an invalid length. [ 348.125029][ T8181] lo speed is unknown, defaulting to 1000 [ 348.130829][ T8181] syz2: Port: 1 Link DOWN [ 348.228810][T20737] wg2: entered promiscuous mode [ 348.233990][T20737] wg2: entered allmulticast mode [ 348.828831][T20744] vlan0: entered allmulticast mode [ 349.208867][T20762] siw: device registration error -23 [ 349.215463][T20754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.311487][T20766] xt_hashlimit: size too large, truncated to 1048576 [ 349.635246][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 349.635261][ T29] audit: type=1326 audit(1752262328.760:42391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.640219][ T3393] kernel write not supported for file bpf-map (pid: 3393 comm: kworker/0:4) [ 349.641590][ T29] audit: type=1326 audit(1752262328.760:42392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.641619][ T29] audit: type=1326 audit(1752262328.760:42393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.723091][ T29] audit: type=1326 audit(1752262328.760:42394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.747474][ T29] audit: type=1326 audit(1752262328.760:42395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.771100][ T29] audit: type=1326 audit(1752262328.760:42396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.795423][ T29] audit: type=1326 audit(1752262328.760:42397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.819403][ T29] audit: type=1326 audit(1752262328.760:42398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.843553][ T29] audit: type=1326 audit(1752262328.760:42399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 349.867158][ T29] audit: type=1326 audit(1752262328.760:42400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.3.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 351.121011][T20822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.210080][T20861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.331998][T20875] lo speed is unknown, defaulting to 1000 [ 351.340207][T20875] lo speed is unknown, defaulting to 1000 [ 351.516339][T20884] netlink: 'syz.4.6012': attribute type 10 has an invalid length. [ 351.524495][T20884] bridge0: port 1(team0) entered blocking state [ 351.530862][T20884] bridge0: port 1(team0) entered disabled state [ 351.542460][T20884] netlink: 'syz.4.6012': attribute type 4 has an invalid length. [ 351.550278][T20884] __nla_validate_parse: 4 callbacks suppressed [ 351.550293][T20884] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6012'. [ 351.769810][T20892] netlink: 'syz.4.6016': attribute type 13 has an invalid length. [ 351.781708][T20892] erspan0: refused to change device tx_queue_len [ 351.788860][T20892] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 351.881076][T20900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6019'. [ 352.072343][T20910] vlan0: entered allmulticast mode [ 352.108582][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6022'. [ 352.178943][T20918] netlink: 'syz.5.6025': attribute type 4 has an invalid length. [ 352.270406][T20923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20923 comm=syz.5.6027 [ 352.621352][T20944] wg2: left allmulticast mode [ 352.629225][T20944] wg2: entered promiscuous mode [ 352.634440][T20944] wg2: entered allmulticast mode [ 352.775147][T20951] vlan0: entered allmulticast mode [ 352.780341][T20951] bridge_slave_0: entered allmulticast mode [ 353.296135][T20964] netlink: 'syz.3.6044': attribute type 4 has an invalid length. [ 353.305115][T20964] netlink: 'syz.3.6044': attribute type 4 has an invalid length. [ 353.533415][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6048'. [ 353.585969][T20973] wireguard0: entered promiscuous mode [ 353.591990][T20973] wireguard0: entered allmulticast mode [ 353.788134][T20982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6051'. [ 354.367335][T21006] xt_hashlimit: size too large, truncated to 1048576 [ 354.519173][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6060'. [ 354.608951][T21007] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 355.315535][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 355.315551][ T29] audit: type=1326 audit(1752262334.440:42623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 355.346055][ T29] audit: type=1326 audit(1752262334.440:42624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 355.398886][ T29] audit: type=1326 audit(1752262334.500:42625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 355.423386][ T29] audit: type=1326 audit(1752262334.500:42626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 355.447037][ T29] audit: type=1326 audit(1752262334.500:42627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 356.398546][ T29] audit: type=1326 audit(1752262335.520:42628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 356.434987][ T29] audit: type=1326 audit(1752262335.550:42629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 356.459505][ T29] audit: type=1326 audit(1752262335.550:42630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 356.484043][ T29] audit: type=1326 audit(1752262335.550:42631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 356.507659][ T29] audit: type=1326 audit(1752262335.550:42632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.1.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 356.716499][T21067] netlink: 'syz.3.6083': attribute type 4 has an invalid length. [ 356.731098][T21067] netlink: 'syz.3.6083': attribute type 4 has an invalid length. [ 356.811848][T21065] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6082'. [ 356.846309][T21075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6086'. [ 356.950457][T21075] wireguard0: entered promiscuous mode [ 356.962738][T21075] wireguard0: entered allmulticast mode [ 357.107291][T21089] vlan1: entered allmulticast mode [ 357.253360][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'. [ 357.297324][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'. [ 357.394608][T21109] xt_hashlimit: size too large, truncated to 1048576 [ 357.511384][T21118] tipc: Enabling of bearer rejected, already enabled [ 357.576795][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6097'. [ 358.000051][T21143] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 358.067506][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6111'. [ 358.160320][T21147] wireguard0: entered promiscuous mode [ 358.179838][T21147] wireguard0: entered allmulticast mode [ 359.176551][T21172] Cannot find del_set index 0 as target [ 361.866562][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 361.866626][ T29] audit: type=1326 audit(1752262340.990:42768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21197 comm="syz.1.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 361.897305][ T29] audit: type=1326 audit(1752262340.990:42769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21197 comm="syz.1.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 361.973778][ T29] audit: type=1326 audit(1752262341.050:42770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21197 comm="syz.1.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 361.997450][ T29] audit: type=1326 audit(1752262341.050:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21197 comm="syz.1.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 362.021763][ T29] audit: type=1326 audit(1752262341.050:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21197 comm="syz.1.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 362.032849][T21200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6124'. [ 362.087384][T21205] wg2: left promiscuous mode [ 362.092039][T21205] wg2: left allmulticast mode [ 362.131903][T21205] wg2: entered promiscuous mode [ 362.137627][T21205] wg2: entered allmulticast mode [ 363.705658][T21235] veth0: entered promiscuous mode [ 363.742905][T21234] veth0: left promiscuous mode [ 364.045330][ T29] audit: type=1326 audit(1752262343.160:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21239 comm="syz.4.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 364.069710][ T29] audit: type=1326 audit(1752262343.160:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21239 comm="syz.4.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 364.094079][ T29] audit: type=1326 audit(1752262343.160:42775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21239 comm="syz.4.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 364.118015][ T29] audit: type=1326 audit(1752262343.160:42776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21239 comm="syz.4.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 364.142194][ T29] audit: type=1326 audit(1752262343.160:42777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21239 comm="syz.4.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 364.517843][T21243] syzkaller0: entered allmulticast mode [ 364.523677][T21243] syzkaller0: entered promiscuous mode [ 364.531009][T21243] syzkaller0 (unregistering): left allmulticast mode [ 364.538411][T21243] syzkaller0 (unregistering): left promiscuous mode [ 364.626691][T21254] rdma_rxe: rxe_newlink: failed to add lo [ 364.633145][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6149'. [ 365.919861][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6157'. [ 365.971361][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6158'. [ 366.280918][T21285] lo speed is unknown, defaulting to 1000 [ 366.289120][T21285] lo speed is unknown, defaulting to 1000 [ 366.337171][T21286] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.6161'. [ 366.786477][T21301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6166'. [ 367.472375][T21295] netlink: 'GPL': attribute type 10 has an invalid length. [ 367.719954][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 367.719969][ T29] audit: type=1326 audit(1752262346.840:42839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 367.782999][ T29] audit: type=1326 audit(1752262346.870:42840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 367.807413][ T29] audit: type=1326 audit(1752262346.870:42841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 367.817737][T21321] lo speed is unknown, defaulting to 1000 [ 367.831076][ T29] audit: type=1326 audit(1752262346.870:42842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 367.831158][ T29] audit: type=1326 audit(1752262346.870:42843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 367.831243][ T29] audit: type=1326 audit(1752262346.870:42844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70a9fae963 code=0x7ffc0000 [ 367.831276][ T29] audit: type=1326 audit(1752262346.880:42845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70a9fad3df code=0x7ffc0000 [ 367.831314][ T29] audit: type=1326 audit(1752262346.880:42846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f70a9fae9b7 code=0x7ffc0000 [ 367.831346][ T29] audit: type=1326 audit(1752262346.880:42847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70a9fad290 code=0x7ffc0000 [ 367.831381][ T29] audit: type=1326 audit(1752262346.880:42848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21315 comm="syz.1.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f70a9fad58a code=0x7ffc0000 [ 368.013173][T21321] lo speed is unknown, defaulting to 1000 [ 368.341564][T21337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6176'. [ 368.651440][T21353] bridge0: entered allmulticast mode [ 368.876276][T21367] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6186'. [ 368.887453][T21367] 0ªX¹¦D: renamed from gretap0 [ 368.907504][T21367] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 369.110725][T21389] lo speed is unknown, defaulting to 1000 [ 369.117360][T21389] lo speed is unknown, defaulting to 1000 [ 369.335478][T21413] blktrace: Concurrent blktraces are not allowed on loop1 [ 369.416301][T21421] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 369.736668][T21445] netlink: 'syz.5.6219': attribute type 13 has an invalid length. [ 369.749016][T21445] 0ªX¹¦D: refused to change device tx_queue_len [ 369.755622][T21445] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 370.724031][T21455] lo speed is unknown, defaulting to 1000 [ 370.730594][T21455] lo speed is unknown, defaulting to 1000 [ 373.511446][T21508] bond8: entered promiscuous mode [ 373.516678][T21508] bond8: entered allmulticast mode [ 373.522092][T21508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.756815][T21508] bond8 (unregistering): Released all slaves [ 373.790876][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6240'. [ 373.983495][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 373.983513][ T29] audit: type=1326 audit(1752262353.090:42929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 374.013941][ T29] audit: type=1326 audit(1752262353.090:42930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 374.037660][ T29] audit: type=1326 audit(1752262353.090:42931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 374.061929][ T29] audit: type=1326 audit(1752262353.090:42932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 374.086353][ T29] audit: type=1326 audit(1752262353.090:42933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 374.110020][ T29] audit: type=1326 audit(1752262353.090:42934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70a9fb0847 code=0x7ffc0000 [ 374.134236][ T29] audit: type=1326 audit(1752262353.090:42935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f70a9fb07bc code=0x7ffc0000 [ 374.157983][ T29] audit: type=1326 audit(1752262353.090:42936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f70a9fb06f4 code=0x7ffc0000 [ 374.182198][ T29] audit: type=1326 audit(1752262353.090:42937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f70a9fb06f4 code=0x7ffc0000 [ 374.206703][ T29] audit: type=1326 audit(1752262353.090:42938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21519 comm="syz.1.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f70a9fad58a code=0x7ffc0000 [ 374.261627][T21520] bond7: (slave veth0_to_bond): Releasing active interface [ 374.380195][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 375.020682][T21566] netlink: 'syz.4.6259': attribute type 13 has an invalid length. [ 375.052378][T21566] erspan0: refused to change device tx_queue_len [ 375.059445][T21566] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 375.642897][ T8181] kernel write not supported for file [eventfd] (pid: 8181 comm: kworker/1:11) [ 375.855811][T21584] netlink: 'syz.4.6265': attribute type 27 has an invalid length. [ 375.874291][T21584] erspan0: left allmulticast mode [ 375.879678][T21584] sit0: left promiscuous mode [ 375.885503][T21584] sit0: left allmulticast mode [ 375.914405][T21584] wg2: left promiscuous mode [ 375.919134][T21584] wg2: left allmulticast mode [ 375.935893][T21584] vlan2: left allmulticast mode [ 375.952494][T21584] dummy0: left allmulticast mode [ 375.959536][T21584] team1: left promiscuous mode [ 375.964863][T21584] team1: left allmulticast mode [ 375.970220][T21584] vxlan0: left promiscuous mode [ 375.984997][T21584] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.993544][T21584] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.001941][T21584] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.010439][T21584] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.020076][T21584] vxlan1: left promiscuous mode [ 376.028990][T21584] veth19: left promiscuous mode [ 376.037410][T21585] netlink: 'syz.3.6260': attribute type 3 has an invalid length. [ 376.102000][T21585] netlink: 'syz.3.6260': attribute type 3 has an invalid length. [ 376.111048][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6260'. [ 376.432506][T21603] netlink: 'syz.1.6272': attribute type 1 has an invalid length. [ 376.481584][T21603] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.512245][T21605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.534527][T21605] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 376.589242][T21605] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 376.634435][T21603] gretap1: entered promiscuous mode [ 376.655061][T21603] bond8: (slave gretap1): making interface the new active one [ 376.693064][T21603] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 376.707593][T21606] bond8: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 377.047820][T21611] lo speed is unknown, defaulting to 1000 [ 377.075120][T21611] lo speed is unknown, defaulting to 1000 [ 378.205978][T21631] netlink: 'syz.3.6280': attribute type 1 has an invalid length. [ 378.281942][T21631] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.473559][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6281'. [ 378.506775][T21635] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 378.993054][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 378.993068][ T29] audit: type=1326 audit(1752262358.120:43144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5c7b858e7 code=0x7ffc0000 [ 379.023567][ T29] audit: type=1326 audit(1752262358.120:43145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5c7b2ab19 code=0x7ffc0000 [ 379.047142][ T29] audit: type=1326 audit(1752262358.120:43146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 379.245611][ T29] audit: type=1326 audit(1752262358.210:43147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5c7b858e7 code=0x7ffc0000 [ 379.269317][ T29] audit: type=1326 audit(1752262358.210:43148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5c7b2ab19 code=0x7ffc0000 [ 379.293773][ T29] audit: type=1326 audit(1752262358.210:43149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 379.317445][ T29] audit: type=1326 audit(1752262358.230:43150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5c7b858e7 code=0x7ffc0000 [ 379.341593][ T29] audit: type=1326 audit(1752262358.230:43151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5c7b2ab19 code=0x7ffc0000 [ 379.365717][ T29] audit: type=1326 audit(1752262358.230:43152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 379.389551][ T29] audit: type=1326 audit(1752262358.230:43153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21638 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5c7b858e7 code=0x7ffc0000 [ 379.808922][T21658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6290'. [ 379.828591][T21658] netem: change failed [ 380.733072][T21674] nfs4: Bad value for 'source' [ 380.820978][T21681] 9pnet_fd: Insufficient options for proto=fd [ 380.965049][T21668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6294'. [ 381.115258][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6305'. [ 381.136618][T21699] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6305'. [ 381.205764][T21702] 9pnet_virtio: no channels available for device 127.0.0.1 [ 381.224952][T21702] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 381.378103][T21718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6313'. [ 381.387193][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6313'. [ 381.396906][T21718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6313'. [ 381.472792][T21718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6313'. [ 381.484168][T21721] tipc: Enabling of bearer rejected, already enabled [ 381.688781][T21734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6319'. [ 382.120921][T21749] lo speed is unknown, defaulting to 1000 [ 382.140848][T21749] lo speed is unknown, defaulting to 1000 [ 382.894833][T21787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21787 comm=syz.0.6338 [ 382.962735][T21792] lo speed is unknown, defaulting to 1000 [ 382.983713][T21792] lo speed is unknown, defaulting to 1000 [ 383.026599][T21797] netlink: 'syz.4.6343': attribute type 4 has an invalid length. [ 383.070290][ T8181] IPVS: starting estimator thread 0... [ 383.087210][T21802] nfs4: Bad value for 'source' [ 383.151942][T21807] 9pnet_fd: Insufficient options for proto=fd [ 383.184386][T21800] IPVS: using max 2400 ests per chain, 120000 per kthread [ 383.316793][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6350'. [ 383.401263][T21819] lo speed is unknown, defaulting to 1000 [ 383.408765][T21819] lo speed is unknown, defaulting to 1000 [ 384.374752][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 384.374770][ T29] audit: type=1326 audit(1752262363.500:43566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.414159][ T29] audit: type=1326 audit(1752262363.530:43567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.438586][ T29] audit: type=1326 audit(1752262363.530:43568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.449203][T21837] lo speed is unknown, defaulting to 1000 [ 384.462187][ T29] audit: type=1326 audit(1752262363.530:43569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462246][ T29] audit: type=1326 audit(1752262363.530:43570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462281][ T29] audit: type=1326 audit(1752262363.530:43571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462318][ T29] audit: type=1326 audit(1752262363.530:43572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462391][ T29] audit: type=1326 audit(1752262363.530:43573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462437][ T29] audit: type=1326 audit(1752262363.530:43574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.462470][ T29] audit: type=1326 audit(1752262363.530:43575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 384.472481][T21842] nfs4: Bad value for 'source' [ 384.549427][T21837] lo speed is unknown, defaulting to 1000 [ 384.792439][T21842] 9pnet_fd: Insufficient options for proto=fd [ 384.831425][T21857] __nla_validate_parse: 1 callbacks suppressed [ 384.831445][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6363'. [ 384.876870][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 384.911566][T21858] lo speed is unknown, defaulting to 1000 [ 384.931946][T21858] lo speed is unknown, defaulting to 1000 [ 385.063717][T21865] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6366'. [ 385.755412][T21901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6380'. [ 386.166620][T21913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6386'. [ 386.227960][T21920] tipc: Enabling of bearer rejected, already enabled [ 387.351506][T21938] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 387.678570][T21968] sch_fq: defrate 0 ignored. [ 387.814733][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6409'. [ 387.923667][T21979] lo speed is unknown, defaulting to 1000 [ 387.930938][T21979] lo speed is unknown, defaulting to 1000 [ 388.283359][T21982] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.230250][T22036] lo speed is unknown, defaulting to 1000 [ 390.271125][T22036] lo speed is unknown, defaulting to 1000 [ 390.318781][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 390.426756][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 390.426825][ T29] audit: type=1326 audit(1752262369.550:43899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.459373][ T29] audit: type=1326 audit(1752262369.550:43900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.484071][ T29] audit: type=1326 audit(1752262369.580:43901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.507685][ T29] audit: type=1326 audit(1752262369.580:43902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.532056][ T29] audit: type=1326 audit(1752262369.580:43903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.557736][ T29] audit: type=1326 audit(1752262369.580:43904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.581468][ T29] audit: type=1326 audit(1752262369.580:43905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.605822][ T29] audit: type=1326 audit(1752262369.580:43906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.629407][ T29] audit: type=1326 audit(1752262369.580:43907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.653778][ T29] audit: type=1326 audit(1752262369.580:43908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22049 comm="syz.1.6434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 390.821291][T22054] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6436'. [ 390.830879][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6436'. [ 391.120002][T22062] lo speed is unknown, defaulting to 1000 [ 391.126909][T22062] lo speed is unknown, defaulting to 1000 [ 391.327879][T22075] lo: entered promiscuous mode [ 391.332840][T22075] lo: left allmulticast mode [ 391.339509][T22075] tunl0: entered promiscuous mode [ 391.345698][T22075] tunl0: left allmulticast mode [ 391.361616][T22075] gre0: entered promiscuous mode [ 391.366926][T22075] gre0: left allmulticast mode [ 391.372400][T22075] gretap0: entered promiscuous mode [ 391.378448][T22075] gretap0: left allmulticast mode [ 391.388241][T22075] erspan0: entered promiscuous mode [ 391.393551][T22075] erspan0: left allmulticast mode [ 391.399287][T22075] ip_vti0: entered promiscuous mode [ 391.405606][T22075] ip_vti0: left allmulticast mode [ 391.413459][T22075] ip6_vti0: entered promiscuous mode [ 391.418867][T22075] ip6_vti0: left allmulticast mode [ 391.428180][T22075] sit0: entered promiscuous mode [ 391.433908][T22075] sit0: left allmulticast mode [ 391.439435][T22075] ip6tnl0: entered promiscuous mode [ 391.444792][T22075] ip6tnl0: left allmulticast mode [ 391.450592][T22075] ip6gre0: entered promiscuous mode [ 391.455981][T22075] ip6gre0: left allmulticast mode [ 391.461646][T22075] syz_tun: entered promiscuous mode [ 391.467612][T22075] syz_tun: left allmulticast mode [ 391.473525][T22075] : entered promiscuous mode [ 391.478427][T22075] dummy0: entered promiscuous mode [ 391.483804][T22075] : left allmulticast mode [ 391.488809][T22075] 8021q: adding VLAN 0 to HW filter on device  [ 391.498898][T22075] nlmon0: entered promiscuous mode [ 391.504168][T22075] nlmon0: left allmulticast mode [ 391.511581][T22075] 0ªX¹¦À: entered promiscuous mode [ 391.516803][T22075] 0ªX¹¦À: left allmulticast mode [ 391.521848][T22075] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 391.787161][T22098] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 391.855913][T22105] IPVS: length: 218 != 8 [ 392.155026][T22118] netlink: 'syz.1.6461': attribute type 13 has an invalid length. [ 392.870573][T22148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6471'. [ 393.331075][T22163] netlink: 'syz.4.6476': attribute type 4 has an invalid length. [ 393.522652][T22169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6480'. [ 393.647423][T22177] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 393.935858][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6483'. [ 394.035515][T22153] syz.3.6473 (22153) used greatest stack depth: 5696 bytes left [ 395.443173][T22211] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.451632][T22211] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.460070][T22211] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.469251][T22211] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.520592][ T1035] lo speed is unknown, defaulting to 1000 [ 395.527113][ T1035] syz0: Port: 1 Link DOWN [ 395.647268][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 395.647283][ T29] audit: type=1326 audit(1752262374.770:44452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.6494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 395.677942][ T29] audit: type=1326 audit(1752262374.770:44453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.6494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 395.873570][ T29] audit: type=1326 audit(1752262374.800:44454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.6494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 395.897931][ T29] audit: type=1326 audit(1752262374.800:44455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.6494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 395.921598][ T29] audit: type=1326 audit(1752262374.800:44456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.6494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a9fae929 code=0x7ffc0000 [ 396.000530][ T29] audit: type=1326 audit(1752262375.100:44457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22218 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 396.025083][ T29] audit: type=1326 audit(1752262375.100:44458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22218 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 396.048817][ T29] audit: type=1326 audit(1752262375.100:44459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22218 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 396.073087][ T29] audit: type=1326 audit(1752262375.100:44460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22218 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 396.096632][ T29] audit: type=1326 audit(1752262375.100:44461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22218 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 396.746884][T22241] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6502'. [ 396.758666][T22241]  (unregistering): (slave dummy0): Releasing backup interface [ 396.770473][T22241]  (unregistering): Released all slaves [ 400.134905][T22259] lo speed is unknown, defaulting to 1000 [ 400.141327][T22259] lo speed is unknown, defaulting to 1000 [ 400.284311][T22276] tipc: Enabling of bearer rejected, failed to enable media [ 400.341594][T22277] lo speed is unknown, defaulting to 1000 [ 400.349437][T22277] lo speed is unknown, defaulting to 1000 [ 401.170584][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 401.222171][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 401.893041][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 401.893059][ T29] audit: type=1326 audit(1752262381.020:44497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22302 comm="syz.1.6525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a9fae929 code=0x0 [ 402.474095][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6527'. [ 402.535637][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6527'. [ 402.695170][T22310] netlink: 'syz.1.6528': attribute type 21 has an invalid length. [ 402.703810][T22310] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.746441][T22314] rdma_op ffff88811e730180 conn xmit_rdma 0000000000000000 [ 402.873598][ T29] audit: type=1326 audit(1752262381.990:44498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 402.946535][ T29] audit: type=1326 audit(1752262382.020:44499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 402.970996][ T29] audit: type=1326 audit(1752262382.020:44500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 402.995458][ T29] audit: type=1326 audit(1752262382.020:44501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8355b60847 code=0x7ffc0000 [ 403.019075][ T29] audit: type=1326 audit(1752262382.020:44502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8355b607bc code=0x7ffc0000 [ 403.043434][ T29] audit: type=1326 audit(1752262382.020:44503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8355b606f4 code=0x7ffc0000 [ 403.066990][ T29] audit: type=1326 audit(1752262382.020:44504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8355b606f4 code=0x7ffc0000 [ 403.091298][ T29] audit: type=1326 audit(1752262382.020:44505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8355b5d58a code=0x7ffc0000 [ 403.115425][ T29] audit: type=1326 audit(1752262382.020:44506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22318 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 403.404973][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6534'. [ 403.421724][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6534'. [ 403.582296][T22335] wg2: entered promiscuous mode [ 403.587273][T22335] wg2: entered allmulticast mode [ 404.134096][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6540'. [ 404.323578][T22353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6542'. [ 405.533470][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6557'. [ 405.744327][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6555'. [ 407.814870][T22433] kthread_run failed with err -4 [ 407.938553][T22439] lo speed is unknown, defaulting to 1000 [ 407.954257][T22439] lo speed is unknown, defaulting to 1000 [ 408.020931][T22443] tipc: Enabling of bearer rejected, already enabled [ 408.262287][T22454] vlan0: entered promiscuous mode [ 409.791134][T22460] lo speed is unknown, defaulting to 1000 [ 409.797723][T22460] lo speed is unknown, defaulting to 1000 [ 410.155128][T22465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6579'. [ 410.198596][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6589'. [ 410.284983][T22475] netlink: 'syz.4.6582': attribute type 4 has an invalid length. [ 410.321383][T22477] netlink: 'syz.3.6583': attribute type 10 has an invalid length. [ 410.329353][T22477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6583'. [ 410.339649][T22475] netlink: 'syz.4.6582': attribute type 4 has an invalid length. [ 410.353315][T22479] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 410.366571][ T3393] lo speed is unknown, defaulting to 1000 [ 410.372359][ T3393] syz2: Port: 1 Link ACTIVE [ 410.497265][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 410.497284][ T29] audit: type=1326 audit(1752262389.620:44582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22486 comm="syz.4.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 410.528028][ T29] audit: type=1326 audit(1752262389.620:44583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22486 comm="syz.4.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 410.608891][ T29] audit: type=1326 audit(1752262389.690:44584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22486 comm="syz.4.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 410.632700][ T29] audit: type=1326 audit(1752262389.690:44585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22486 comm="syz.4.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 410.657135][ T29] audit: type=1326 audit(1752262389.690:44586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22486 comm="syz.4.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 410.689024][T22492] bond9: entered promiscuous mode [ 410.694375][T22492] bond9: entered allmulticast mode [ 410.711047][T22492] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.731812][T22492] bond9 (unregistering): Released all slaves [ 411.290085][T22515] netlink: 'syz.0.6595': attribute type 1 has an invalid length. [ 411.298367][T22513] netlink: 'syz.5.6592': attribute type 4 has an invalid length. [ 411.306169][T22513] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6592'. [ 411.313969][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6595'. [ 411.328812][T22515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 411.338646][T22515] bond6: (slave batadv1): Enslaving as a backup interface with an up link [ 411.356105][ T29] audit: type=1326 audit(1752262390.480:44587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22509 comm="syz.4.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7fc00000 [ 411.380533][ T29] audit: type=1326 audit(1752262390.480:44588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22509 comm="syz.4.6594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c7b8e929 code=0x7fc00000 [ 411.501334][ T29] audit: type=1326 audit(1752262390.620:44589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.3.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 411.528044][ T29] audit: type=1326 audit(1752262390.660:44590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.3.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 411.551768][ T29] audit: type=1326 audit(1752262390.660:44591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.3.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 411.576408][T22515] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 411.588760][T22515] bond6 (unregistering): Released all slaves [ 411.608911][T22518] lo speed is unknown, defaulting to 1000 [ 411.615927][T22518] lo speed is unknown, defaulting to 1000 [ 411.756650][T22528] netlink: 'syz.0.6599': attribute type 12 has an invalid length. [ 411.862387][T22535] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6604'. [ 411.910334][ T8183] Process accounting resumed [ 412.028293][T22535] $Hÿ (unregistering): Released all slaves [ 412.277246][T22556] netlink: 'syz.4.6610': attribute type 27 has an invalid length. [ 412.384961][T22557] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.494375][T22557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.770131][T22556] wg2: left promiscuous mode [ 412.775782][T22556] wg2: left allmulticast mode [ 412.895956][ T3393] lo speed is unknown, defaulting to 1000 [ 412.901866][ T3393] syz2: Port: 1 Link DOWN [ 413.057178][T22566] siw: device registration error -23 [ 414.641155][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6622'. [ 414.704826][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'. [ 414.971657][ T8183] Process accounting resumed [ 415.298800][T22605] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6626'. [ 415.308187][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6626'. [ 415.317206][T22605] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6626'. [ 415.327003][T22605] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6626'. [ 415.336084][T22605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6626'. [ 416.101536][T22612] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 416.654123][T22617] lo speed is unknown, defaulting to 1000 [ 416.675522][T22617] lo speed is unknown, defaulting to 1000 [ 416.817684][T22627] lo speed is unknown, defaulting to 1000 [ 416.865333][T22627] lo speed is unknown, defaulting to 1000 [ 417.396541][T22629] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 417.525358][T22642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22642 comm=syz.3.6640 [ 417.587680][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 417.587698][ T29] audit: type=1326 audit(1752262396.710:44844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.618634][ T29] audit: type=1326 audit(1752262396.710:44845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.644747][ T29] audit: type=1326 audit(1752262396.770:44846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.668464][ T29] audit: type=1326 audit(1752262396.770:44847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.692867][ T29] audit: type=1326 audit(1752262396.770:44848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.723392][ T29] audit: type=1326 audit(1752262396.770:44849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.747073][ T29] audit: type=1326 audit(1752262396.770:44850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0897ece963 code=0x7ffc0000 [ 417.771290][ T29] audit: type=1326 audit(1752262396.770:44851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0897ece963 code=0x7ffc0000 [ 417.795429][ T29] audit: type=1326 audit(1752262396.770:44852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 417.819116][ T29] audit: type=1326 audit(1752262396.770:44853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22643 comm="syz.0.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 421.974854][T22699] xt_hashlimit: max too large, truncated to 1048576 [ 422.527037][T22715] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 422.617201][T22717] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.742102][T22722] netlink: 'syz.4.6668': attribute type 1 has an invalid length. [ 422.814966][T22722] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.902973][T22722] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.914778][T22722] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 422.978366][T22722] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 423.030209][T22735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6668'. [ 423.116968][T22735] 8021q: adding VLAN 0 to HW filter on device bond9 [ 423.823235][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6679'. [ 424.145296][T22762] lo speed is unknown, defaulting to 1000 [ 424.151601][T22766] netlink: 'syz.1.6683': attribute type 10 has an invalid length. [ 424.151928][T22762] lo speed is unknown, defaulting to 1000 [ 424.159643][T22766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6683'. [ 424.176996][T22766] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 424.437021][T22774] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6685'. [ 424.446941][T22774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6685'. [ 424.456007][T22774] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6685'. [ 424.467044][T22774] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6685'. [ 424.525493][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 424.525510][ T29] audit: type=1326 audit(1752262403.650:45080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.558723][ T8181] IPVS: starting estimator thread 0... [ 424.570138][ T29] audit: type=1326 audit(1752262403.650:45081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.594435][ T29] audit: type=1326 audit(1752262403.650:45082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.618457][ T29] audit: type=1326 audit(1752262403.650:45083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.642717][ T29] audit: type=1326 audit(1752262403.650:45084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.667184][ T29] audit: type=1326 audit(1752262403.650:45085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.690844][ T29] audit: type=1326 audit(1752262403.650:45086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.715428][ T29] audit: type=1326 audit(1752262403.650:45087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.733609][T22782] IPVS: using max 2016 ests per chain, 100800 per kthread [ 424.739080][ T29] audit: type=1326 audit(1752262403.650:45088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 424.770806][ T29] audit: type=1326 audit(1752262403.650:45089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22780 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1125de929 code=0x7ffc0000 [ 425.026112][T22806] lo speed is unknown, defaulting to 1000 [ 425.034602][T22806] lo speed is unknown, defaulting to 1000 [ 427.134531][T22862] lo speed is unknown, defaulting to 1000 [ 427.207326][T22862] lo speed is unknown, defaulting to 1000 [ 427.375526][T22866] netlink: 'syz.5.6714': attribute type 13 has an invalid length. [ 427.614279][T22878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6720'. [ 427.623944][T22878] lo: left promiscuous mode [ 427.628960][T22878] tunl0: left promiscuous mode [ 427.634688][T22878] gre0: left promiscuous mode [ 427.639844][T22878] erspan0: left promiscuous mode [ 427.645200][T22878] ip_vti0: left promiscuous mode [ 427.650504][T22878] ip6_vti0: left promiscuous mode [ 427.688115][T22878] sit0: left promiscuous mode [ 427.704397][T22878] ip6tnl0: left promiscuous mode [ 427.718217][T22878] ip6gre0: left promiscuous mode [ 427.755998][T22878] syz_tun: left promiscuous mode [ 427.793760][T22878] dummy0: left promiscuous mode [ 427.800961][T22878] nlmon0: left promiscuous mode [ 427.809841][T22878] 0ªX¹¦À: left promiscuous mode [ 427.814829][T22878] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 429.446179][T22887] netlink: 'syz.3.6723': attribute type 1 has an invalid length. [ 429.940522][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 429.940540][ T29] audit: type=1326 audit(1752262409.060:45422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.033518][ T29] audit: type=1326 audit(1752262409.100:45423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.057847][ T29] audit: type=1326 audit(1752262409.100:45424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.081574][ T29] audit: type=1326 audit(1752262409.110:45425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.105819][ T29] audit: type=1326 audit(1752262409.110:45426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.129522][ T29] audit: type=1326 audit(1752262409.110:45427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.153773][ T29] audit: type=1326 audit(1752262409.110:45428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.177448][ T29] audit: type=1326 audit(1752262409.110:45429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.201754][ T29] audit: type=1326 audit(1752262409.110:45430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.226185][ T29] audit: type=1326 audit(1752262409.110:45431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 430.410728][T22866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.428925][T22887] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 430.445583][T22896] IPVS: Error connecting to the multicast addr [ 430.907086][T22913] lo speed is unknown, defaulting to 1000 [ 430.922021][T22913] lo speed is unknown, defaulting to 1000 [ 430.962640][T22902] syz.4.6731 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 430.976727][T22902] CPU: 1 UID: 0 PID: 22902 Comm: syz.4.6731 Tainted: G W 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 430.976817][T22902] Tainted: [W]=WARN [ 430.976826][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.976848][T22902] Call Trace: [ 430.976856][T22902] [ 430.976866][T22902] __dump_stack+0x1d/0x30 [ 430.976944][T22902] dump_stack_lvl+0xe8/0x140 [ 430.976971][T22902] dump_stack+0x15/0x1b [ 430.976993][T22902] dump_header+0x81/0x220 [ 430.977031][T22902] oom_kill_process+0x334/0x3f0 [ 430.977134][T22902] out_of_memory+0x979/0xb80 [ 430.977174][T22902] try_charge_memcg+0x5e6/0x9e0 [ 430.977291][T22902] obj_cgroup_charge_pages+0xa6/0x150 [ 430.977321][T22902] __memcg_kmem_charge_page+0x9f/0x170 [ 430.977353][T22902] __alloc_frozen_pages_noprof+0x188/0x360 [ 430.977481][T22902] alloc_pages_mpol+0xb3/0x250 [ 430.977609][T22902] alloc_pages_noprof+0x90/0x130 [ 430.977649][T22902] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 430.977722][T22902] __kvmalloc_node_noprof+0x30f/0x4e0 [ 430.977759][T22902] ? ip_set_alloc+0x1f/0x30 [ 430.977833][T22902] ? ip_set_alloc+0x1f/0x30 [ 430.977944][T22902] ? __kmalloc_cache_noprof+0x189/0x320 [ 430.977982][T22902] ip_set_alloc+0x1f/0x30 [ 430.978012][T22902] hash_netiface_create+0x282/0x740 [ 430.978132][T22902] ? __pfx_hash_netiface_create+0x10/0x10 [ 430.978252][T22902] ip_set_create+0x3c9/0x960 [ 430.978378][T22902] ? __nla_parse+0x40/0x60 [ 430.978448][T22902] nfnetlink_rcv_msg+0x4c6/0x590 [ 430.978579][T22902] ? selinux_capable+0x1f9/0x270 [ 430.978612][T22902] netlink_rcv_skb+0x120/0x220 [ 430.978650][T22902] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 430.978684][T22902] nfnetlink_rcv+0x16b/0x1690 [ 430.978823][T22902] ? xas_find+0x15e/0x3e0 [ 430.978844][T22902] ? bpf_get_stack+0x33/0x50 [ 430.978875][T22902] ? bpf_get_stack_raw_tp+0x106/0x130 [ 430.978907][T22902] ? __rcu_read_unlock+0x4f/0x70 [ 430.978993][T22902] ? bpf_trace_run2+0x124/0x1c0 [ 430.979024][T22902] ? security_compute_sid+0x11da/0x1290 [ 430.979099][T22902] ? perf_callchain_user+0xa91/0xb50 [ 430.979134][T22902] ? perf_callchain_user+0xae0/0xb50 [ 430.979177][T22902] ? should_fail_ex+0x30/0x280 [ 430.979210][T22902] ? selinux_nlmsg_lookup+0x99/0x890 [ 430.979381][T22902] ? selinux_netlink_send+0x59f/0x5f0 [ 430.979437][T22902] ? __rcu_read_unlock+0x34/0x70 [ 430.979533][T22902] ? __netlink_lookup+0x266/0x2a0 [ 430.979563][T22902] netlink_unicast+0x5a8/0x680 [ 430.979651][T22902] netlink_sendmsg+0x58b/0x6b0 [ 430.979757][T22902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.979776][T22902] __sock_sendmsg+0x145/0x180 [ 430.979800][T22902] ____sys_sendmsg+0x31e/0x4e0 [ 430.979838][T22902] ___sys_sendmsg+0x17b/0x1d0 [ 430.979962][T22902] __x64_sys_sendmsg+0xd4/0x160 [ 430.980007][T22902] x64_sys_call+0x2999/0x2fb0 [ 430.980028][T22902] do_syscall_64+0xd2/0x200 [ 430.980044][T22902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 430.980136][T22902] ? clear_bhb_loop+0x40/0x90 [ 430.980158][T22902] ? clear_bhb_loop+0x40/0x90 [ 430.980179][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.980209][T22902] RIP: 0033:0x7fe5c7b8e929 [ 430.980235][T22902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.980257][T22902] RSP: 002b:00007fe5c61f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.980314][T22902] RAX: ffffffffffffffda RBX: 00007fe5c7db5fa0 RCX: 00007fe5c7b8e929 [ 430.980327][T22902] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 430.980339][T22902] RBP: 00007fe5c7c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 430.980350][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.980362][T22902] R13: 0000000000000000 R14: 00007fe5c7db5fa0 R15: 00007ffca9f35f18 [ 430.980386][T22902] [ 430.980399][T22902] memory: usage 307200kB, limit 307200kB, failcnt 336 [ 431.370907][T22902] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0 [ 431.378896][T22902] kmem: usage 238876kB, limit 9007199254740988kB, failcnt 0 [ 431.386195][T22902] Memory cgroup stats for /syz4: [ 431.389005][T22902] cache 69169152 [ 431.398260][T22902] rss 774144 [ 431.401665][T22902] shmem 135168 [ 431.405226][T22902] mapped_file 0 [ 431.408713][T22902] dirty 0 [ 431.411671][T22902] writeback 0 [ 431.415175][T22902] workingset_refault_anon 2113 [ 431.420043][T22902] workingset_refault_file 102 [ 431.425504][T22902] swap 110592 [ 431.428875][T22902] swapcached 20480 [ 431.432784][T22902] pgpgin 688561 [ 431.436262][T22902] pgpgout 671480 [ 431.439877][T22902] pgfault 537136 [ 431.443461][T22902] pgmajfault 281 [ 431.447021][T22902] inactive_anon 0 [ 431.450698][T22902] active_anon 929792 [ 431.455319][T22902] inactive_file 0 [ 431.458968][T22902] active_file 0 [ 431.462461][T22902] unevictable 69033984 [ 431.466568][T22902] hierarchical_memory_limit 314572800 [ 431.471957][T22902] hierarchical_memsw_limit 9223372036854771712 [ 431.478164][T22902] total_cache 69169152 [ 431.482246][T22902] total_rss 774144 [ 431.486674][T22902] total_shmem 135168 [ 431.490703][T22902] total_mapped_file 0 [ 431.494802][T22902] total_dirty 0 [ 431.498281][T22902] total_writeback 0 [ 431.502116][T22902] total_workingset_refault_anon 2113 [ 431.507462][T22902] total_workingset_refault_file 102 [ 431.513430][T22902] total_swap 110592 [ 431.517264][T22902] total_swapcached 20480 [ 431.521522][T22902] total_pgpgin 688561 [ 431.525632][T22902] total_pgpgout 671480 [ 431.529720][T22902] total_pgfault 537136 [ 431.533817][T22902] total_pgmajfault 281 [ 431.537939][T22902] total_inactive_anon 0 [ 431.542108][T22902] total_active_anon 929792 [ 431.547286][T22902] total_inactive_file 0 [ 431.551557][T22902] total_active_file 0 [ 431.555580][T22902] total_unevictable 69033984 [ 431.560177][T22902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6731,pid=22901,uid=0 [ 431.575575][T22902] Memory cgroup out of memory: Killed process 22901 (syz.4.6731) total-vm:95804kB, anon-rss:1072kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 431.801403][T22933] lo speed is unknown, defaulting to 1000 [ 431.833573][T22933] lo speed is unknown, defaulting to 1000 [ 432.186043][T22951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6747'. [ 432.195192][T22951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6747'. [ 432.204945][T22951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6747'. [ 432.215859][T22951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6747'. [ 432.269927][T22953] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6748'. [ 432.345319][T22963] netlink: 'syz.1.6751': attribute type 4 has an invalid length. [ 432.356504][T22963] netlink: 'syz.1.6751': attribute type 4 has an invalid length. [ 432.366404][ T3393] lo speed is unknown, defaulting to 1000 [ 432.372262][ T3393] syz0: Port: 1 Link ACTIVE [ 432.441922][T22968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6753'. [ 432.784246][T22981] lo speed is unknown, defaulting to 1000 [ 432.791866][T22981] lo speed is unknown, defaulting to 1000 [ 433.524899][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6759'. [ 433.534951][T22989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6759'. [ 433.544019][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6759'. [ 433.595065][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6759'. [ 433.839938][T22997] 9pnet_fd: Insufficient options for proto=fd [ 435.187404][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 435.187422][ T29] audit: type=1326 audit(1752262414.310:45547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.217455][ T29] audit: type=1326 audit(1752262414.310:45548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.241822][ T29] audit: type=1326 audit(1752262414.310:45549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.266545][ T29] audit: type=1326 audit(1752262414.310:45550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.290222][ T29] audit: type=1326 audit(1752262414.310:45551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.301371][T23059] lo speed is unknown, defaulting to 1000 [ 435.314877][ T29] audit: type=1326 audit(1752262414.310:45552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.321123][T23059] lo speed is unknown, defaulting to 1000 [ 435.344744][ T29] audit: type=1326 audit(1752262414.310:45553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.374844][ T29] audit: type=1326 audit(1752262414.310:45554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.398455][ T29] audit: type=1326 audit(1752262414.310:45555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 435.422951][ T29] audit: type=1326 audit(1752262414.310:45556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.0.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 436.687956][T23072] netlink: 'syz.5.6788': attribute type 14 has an invalid length. [ 437.665571][T23100] __nla_validate_parse: 4 callbacks suppressed [ 437.665592][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6798'. [ 437.868986][T23100] netlink: 'syz.0.6798': attribute type 13 has an invalid length. [ 438.911083][T23107] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 438.920410][T23107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 438.941715][T23111] netlink: 'syz.0.6800': attribute type 27 has an invalid length. [ 438.959323][T23111] veth0: left allmulticast mode [ 438.965343][T23111] veth1: left allmulticast mode [ 438.970371][T23111] wg1: left allmulticast mode [ 438.975300][T23111] wg2: left allmulticast mode [ 438.980120][T23111] veth0_to_bridge: left allmulticast mode [ 438.985966][T23111] bridge_slave_0: left allmulticast mode [ 438.991775][T23111] veth1_to_bond: left allmulticast mode [ 438.998090][T23111] bond_slave_1: left allmulticast mode [ 439.003709][T23111] veth0_to_team: left allmulticast mode [ 439.009358][T23111] team_slave_0: left allmulticast mode [ 439.015041][T23111] veth1_to_team: left allmulticast mode [ 439.020696][T23111] team_slave_1: left allmulticast mode [ 439.027014][T23111] veth1_to_batadv: left allmulticast mode [ 439.033007][T23111] batadv_slave_1: left allmulticast mode [ 439.038755][T23111] xfrm0: left allmulticast mode [ 439.043798][T23111] veth1_to_hsr: left allmulticast mode [ 439.049359][T23111] hsr_slave_1: left allmulticast mode [ 439.055550][T23111] veth1_virt_wifi: left allmulticast mode [ 439.061354][T23111] veth0_virt_wifi: left allmulticast mode [ 439.067463][T23111] =: left allmulticast mode [ 439.072182][T23111] veth0_macvtap: left allmulticast mode [ 439.077904][T23111] geneve1: left allmulticast mode [ 439.083838][T23111] bridge1: left allmulticast mode [ 439.089000][T23111] syztnl1: left allmulticast mode [ 439.094413][T23111] bond1: left allmulticast mode [ 439.099447][T23111] geneve2: left allmulticast mode [ 439.104804][T23111] bridge2: left allmulticast mode [ 439.110033][T23111] veth2: left allmulticast mode [ 439.116011][T23111] veth3: left allmulticast mode [ 439.121196][T23111] gre1: left allmulticast mode [ 439.126209][T23111] bridge3: left allmulticast mode [ 439.131435][T23111] bridge4: left allmulticast mode [ 439.136852][T23111] vxlan0: left allmulticast mode [ 439.141909][T23111] bridge5: left allmulticast mode [ 439.147789][T23111] bridge6: left allmulticast mode [ 439.152998][T23111] bridge7: left allmulticast mode [ 439.158355][T23111] bridge8: left allmulticast mode [ 439.163675][T23111] ip6_vti1: left allmulticast mode [ 439.168954][T23111] ip6_vti2: left allmulticast mode [ 439.174954][T23111] bridge9: left allmulticast mode [ 439.180303][T23111] veth4: left allmulticast mode [ 439.185261][T23111] veth5: left allmulticast mode [ 439.190354][T23111] veth6: left allmulticast mode [ 439.195319][T23111] veth7: left allmulticast mode [ 439.200402][T23111] veth8: left allmulticast mode [ 439.206214][T23111] veth9: left allmulticast mode [ 439.211168][T23111] syztnl2: left allmulticast mode [ 439.216306][T23111] syztnl0: left allmulticast mode [ 439.221539][T23111] bridge10: left allmulticast mode [ 439.226815][T23111] ip6gre1: left allmulticast mode [ 439.232109][T23111] bridge11: left allmulticast mode [ 439.238003][T23111] bridge12: left allmulticast mode [ 439.243475][T23111] : left allmulticast mode [ 439.248193][T23111] veth10: left allmulticast mode [ 439.253263][T23111] veth11: left allmulticast mode [ 439.258443][T23111] vxlan1: left allmulticast mode [ 439.264202][T23111] veth12: left allmulticast mode [ 439.269228][T23111] veth13: left allmulticast mode [ 439.274311][T23111] bridge13: left allmulticast mode [ 439.279532][T23111] ipip0: left allmulticast mode [ 439.284643][T23111] batadv0: left allmulticast mode [ 439.290087][T23111] gretap1: left promiscuous mode [ 439.351646][T23114] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 439.559476][T23132] netlink: 'syz.0.6808': attribute type 10 has an invalid length. [ 439.567423][T23132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6808'. [ 439.579115][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6807'. [ 439.596371][T23133] 9pnet_fd: Insufficient options for proto=fd [ 440.673027][T23143] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6811'. [ 441.245579][T23156] lo speed is unknown, defaulting to 1000 [ 441.253064][T23156] lo speed is unknown, defaulting to 1000 [ 442.175991][T23163] netlink: 'syz.3.6817': attribute type 27 has an invalid length. [ 442.204219][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 442.204305][ T29] audit: type=1400 audit(1752262421.330:45835): avc: denied { nlmsg_read } for pid=23160 comm="syz.0.6816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 442.306959][T23163] wg2: left promiscuous mode [ 442.311756][T23163] wg2: left allmulticast mode [ 442.468145][T23164] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 442.513125][ T8183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.677114][ T29] audit: type=1326 audit(1752262421.760:45836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.700952][ T29] audit: type=1326 audit(1752262421.760:45837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.725475][ T29] audit: type=1326 audit(1752262421.760:45838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.749107][ T29] audit: type=1326 audit(1752262421.760:45839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.773567][ T29] audit: type=1326 audit(1752262421.760:45840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.797232][ T29] audit: type=1326 audit(1752262421.760:45841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.821573][ T29] audit: type=1326 audit(1752262421.760:45842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.845873][ T29] audit: type=1326 audit(1752262421.760:45843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 442.869531][ T29] audit: type=1326 audit(1752262421.760:45844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23174 comm="syz.3.6820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 443.238343][ T8183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.341563][T23181] netlink: 'syz.4.6822': attribute type 8 has an invalid length. [ 443.411851][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6823'. [ 443.452813][ T7010] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.905413][T23196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6838'. [ 443.923881][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6838'. [ 444.181099][T23201] lo speed is unknown, defaulting to 1000 [ 444.188313][T23201] lo speed is unknown, defaulting to 1000 [ 444.482821][ T7020] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.490736][ T7020] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.031581][ T8181] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.491918][T23223] siw: device registration error -23 [ 445.499199][T23223] 9pnet_fd: Insufficient options for proto=fd [ 446.424073][T23229] tipc: New replicast peer: 255.255.255.83 [ 446.430305][T23229] tipc: Enabled bearer , priority 10 [ 447.626292][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6841'. [ 447.984236][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 447.984252][ T29] audit: type=1326 audit(1752262427.030:45865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.014664][ T29] audit: type=1326 audit(1752262427.030:45866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.038377][ T29] audit: type=1326 audit(1752262427.030:45867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.062829][ T29] audit: type=1326 audit(1752262427.030:45868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.087125][ T29] audit: type=1326 audit(1752262427.030:45869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.111174][ T29] audit: type=1326 audit(1752262427.030:45870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.135495][ T29] audit: type=1326 audit(1752262427.030:45871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.159143][ T29] audit: type=1326 audit(1752262427.040:45872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.183557][ T29] audit: type=1326 audit(1752262427.040:45873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.207243][ T29] audit: type=1326 audit(1752262427.040:45874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23253 comm="syz.3.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 448.248019][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6845'. [ 448.454455][T23261] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6846'. [ 448.468229][T23261] netlink: zone id is out of range [ 448.487051][T23261] netlink: zone id is out of range [ 448.647317][T23261] netlink: zone id is out of range [ 448.657554][T23261] netlink: zone id is out of range [ 448.664012][T23261] netlink: zone id is out of range [ 448.671322][T23261] netlink: del zone limit has 8 unknown bytes [ 448.706328][T23265] : renamed from bond0 [ 448.802774][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.098841][T23278] ref_ctr increment failed for inode: 0x1c83 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119dc9080 [ 449.184204][T23277] uprobe: syz.4.6856:23277 failed to unregister, leaking uprobe [ 449.713017][T23263] Set syz1 is full, maxelem 65536 reached [ 449.851424][T23290] lo speed is unknown, defaulting to 1000 [ 449.907249][T23290] lo speed is unknown, defaulting to 1000 [ 450.598285][T23313] rdma_op ffff8881009d0580 conn xmit_rdma 0000000000000000 [ 451.795520][T23337] netlink: 'syz.0.6872': attribute type 39 has an invalid length. [ 452.683835][T23347] netlink: 'syz.4.6877': attribute type 10 has an invalid length. [ 452.750880][T23362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6881'. [ 452.822755][T23375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6885'. [ 452.828992][T23348] lo speed is unknown, defaulting to 1000 [ 452.846874][T23348] lo speed is unknown, defaulting to 1000 [ 452.919461][T23382] xt_CT: No such helper "netbios-ns" [ 453.253579][T23348] chnl_net:caif_netlink_parms(): no params data found [ 453.576431][T23412] lo speed is unknown, defaulting to 1000 [ 453.583266][T23412] lo speed is unknown, defaulting to 1000 [ 453.800429][T23348] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.808313][T23348] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.848512][T23348] bridge_slave_0: entered allmulticast mode [ 453.867590][T23348] bridge_slave_0: entered promiscuous mode [ 453.883875][T23348] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.891051][T23348] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.945561][T23348] bridge_slave_1: entered allmulticast mode [ 453.968896][T23348] bridge_slave_1: entered promiscuous mode [ 454.407469][T23348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.435762][T23420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6895'. [ 454.491329][T23348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.626189][T23348] team0: Port device team_slave_0 added [ 454.633972][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 454.633988][ T29] audit: type=1326 audit(1752262433.760:46061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.665562][T23348] team0: Port device team_slave_1 added [ 454.696820][T23348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.704558][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.712723][ T29] audit: type=1326 audit(1752262433.790:46062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.731822][T23348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.755965][ T29] audit: type=1326 audit(1752262433.790:46063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.756135][ T29] audit: type=1326 audit(1752262433.790:46064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.756167][ T29] audit: type=1326 audit(1752262433.790:46065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.756214][ T29] audit: type=1326 audit(1752262433.790:46066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.756248][ T29] audit: type=1326 audit(1752262433.790:46067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.756320][ T29] audit: type=1326 audit(1752262433.790:46068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.819447][T23348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.839126][ T29] audit: type=1326 audit(1752262433.790:46069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.839189][ T29] audit: type=1326 audit(1752262433.790:46070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23427 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8355b5e929 code=0x7ffc0000 [ 454.908670][T23434] netlink: 'syz.3.6899': attribute type 8 has an invalid length. [ 454.913139][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.002297][T23348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.050389][T23348] hsr_slave_0: entered promiscuous mode [ 455.059598][T23348] hsr_slave_1: entered promiscuous mode [ 455.065710][T23348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.076215][T23348] Cannot create hsr debugfs directory [ 455.178449][T23348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.188013][T23348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 455.200501][T23348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 455.210156][T23348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 455.277716][T23348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.297035][T23348] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.308131][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.315242][ T7028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.363506][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.370671][ T7046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.418235][T23348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.440352][T23452] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 455.525955][T23348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.748313][T23348] veth0_vlan: entered promiscuous mode [ 455.760865][T23348] veth1_vlan: entered promiscuous mode [ 455.790328][T23348] veth0_macvtap: entered promiscuous mode [ 455.801325][T23348] veth1_macvtap: entered promiscuous mode [ 455.818350][T23348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.838843][T23348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.859648][T23348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.868502][T23348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.877333][T23348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.887433][T23348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.021681][T23483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.037029][T23494] loop6: detected capacity change from 0 to 512 [ 456.045120][T23494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.052536][T23494] ext4: Unknown parameter 'appraise' [ 456.080217][T23495] wireguard0: entered promiscuous mode [ 456.085820][T23495] wireguard0: entered allmulticast mode [ 456.467537][T23502] tipc: Enabling of bearer rejected, failed to enable media [ 456.708573][T23518] macsec0: entered promiscuous mode [ 456.713899][T23518] bridge0: entered promiscuous mode [ 456.735054][T23520] loop6: detected capacity change from 0 to 164 [ 456.743640][T23518] bridge0: port 1(macsec0) entered blocking state [ 456.750174][T23518] bridge0: port 1(macsec0) entered disabled state [ 456.776599][T23520] rock: directory entry would overflow storage [ 456.784192][T23520] rock: sig=0x4f50, size=4, remaining=3 [ 456.789884][T23520] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 456.858328][T23518] macsec0: entered allmulticast mode [ 456.863807][T23518] bridge0: entered allmulticast mode [ 456.871615][T23518] macsec0: left allmulticast mode [ 456.878071][T23518] bridge0: left allmulticast mode [ 456.886830][T23518] bridge0: left promiscuous mode [ 456.998725][T23522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6923'. [ 457.008015][T23522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6923'. [ 457.017158][T23522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6923'. [ 457.443481][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 457.558955][T23553] loop6: detected capacity change from 0 to 128 [ 457.761013][T23553] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.777225][T23553] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.891212][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6936'. [ 457.958772][T23542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.119998][T23567] netlink: zone id is out of range [ 458.125333][T23567] netlink: set zone limit has 4 unknown bytes [ 458.234992][T23348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.774778][T23591] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6945'. [ 458.807930][T23591] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6945'. [ 458.979827][T23597] lo speed is unknown, defaulting to 1000 [ 458.987327][T23597] lo speed is unknown, defaulting to 1000 [ 459.860778][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 459.860793][ T29] audit: type=1326 audit(1752262438.030:46285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23581 comm="syz.6.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c59e858e7 code=0x7ffc0000 [ 460.165061][T23615] loop6: detected capacity change from 0 to 1024 [ 460.222400][T23615] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 460.234024][T23615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 460.273502][T23615] JBD2: no valid journal superblock found [ 460.279383][T23615] EXT4-fs (loop6): Could not load journal inode [ 460.334378][T23615] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 460.399609][T23619] 9pnet_fd: Insufficient options for proto=fd [ 460.459473][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6958'. [ 460.469347][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6958'. [ 460.495932][T23616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.497596][T23622] team0: entered promiscuous mode [ 460.509193][T23622] team_slave_0: entered promiscuous mode [ 460.515149][T23622] team_slave_1: entered promiscuous mode [ 460.526625][T23624] netlink: 'syz.0.6959': attribute type 8 has an invalid length. [ 460.536252][T23622] bond0: entered promiscuous mode [ 460.541333][T23622] bond_slave_0: entered promiscuous mode [ 460.547140][T23622] bond_slave_1: entered promiscuous mode [ 460.556790][T23622] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 460.656110][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.668262][ T29] audit: type=1400 audit(1752262439.780:46286): avc: denied { ioctl } for pid=23627 comm="syz.6.6961" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.705036][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.930464][T23628] loop6: detected capacity change from 0 to 128 [ 461.002119][T23628] bio_check_eod: 101 callbacks suppressed [ 461.002136][T23628] syz.6.6961: attempt to access beyond end of device [ 461.002136][T23628] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 461.034769][T23628] syz.6.6961: attempt to access beyond end of device [ 461.034769][T23628] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 461.049115][T23628] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 461.059719][T23628] syz.6.6961: attempt to access beyond end of device [ 461.059719][T23628] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 461.073872][T23628] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 461.082997][T23628] syz.6.6961: attempt to access beyond end of device [ 461.082997][T23628] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 461.096451][T23628] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 461.107391][T23628] syz.6.6961: attempt to access beyond end of device [ 461.107391][T23628] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 461.120865][T23628] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 461.129661][T23628] syz.6.6961: attempt to access beyond end of device [ 461.129661][T23628] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 461.143762][T23628] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 461.152495][T23628] syz.6.6961: attempt to access beyond end of device [ 461.152495][T23628] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 461.166024][T23628] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 461.177977][T23628] syz.6.6961: attempt to access beyond end of device [ 461.177977][T23628] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 461.191481][T23628] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 461.200211][T23628] syz.6.6961: attempt to access beyond end of device [ 461.200211][T23628] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 461.214376][T23628] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 461.223093][T23628] syz.6.6961: attempt to access beyond end of device [ 461.223093][T23628] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 461.236686][T23628] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 461.248155][T23628] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 461.335186][ T7020] bond0 (unregistering): Released all slaves [ 461.389467][T23638] netlink: 'syz.3.6974': attribute type 27 has an invalid length. [ 461.415437][ T7020] tipc: Disabling bearer [ 461.420719][ T7020] tipc: Left network mode [ 461.481300][ T29] audit: type=1326 audit(1752262440.600:46287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.506448][ T29] audit: type=1326 audit(1752262440.600:46288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.530383][ T29] audit: type=1326 audit(1752262440.600:46289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.554210][ T29] audit: type=1326 audit(1752262440.600:46290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.579409][ T29] audit: type=1326 audit(1752262440.600:46291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.604535][ T29] audit: type=1326 audit(1752262440.600:46292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.628409][ T29] audit: type=1326 audit(1752262440.600:46293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.653318][ T29] audit: type=1326 audit(1752262440.600:46294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.4.6967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c7b8e929 code=0x7ffc0000 [ 461.683647][ T7020] hsr_slave_0: left promiscuous mode [ 461.689834][ T7020] hsr_slave_1: left promiscuous mode [ 462.099946][ T7020] IPVS: stop unused estimator thread 0... [ 462.440920][T23666] netlink: 'syz.0.6976': attribute type 10 has an invalid length. [ 463.672288][T23685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6981'. [ 464.913210][T23701] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.989115][T23701] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.002154][T23707] xt_CT: No such helper "netbios-ns" [ 465.077742][T23701] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.189632][T23701] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.304361][T23701] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.339282][T23701] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.380469][T23701] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.408215][T23701] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.608236][T23714] loop6: detected capacity change from 0 to 512 [ 465.665878][T23714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.708565][T23714] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.757891][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 465.757909][ T29] audit: type=1400 audit(1752262444.880:46819): avc: denied { append } for pid=23713 comm="syz.6.6990" path="/18/file1/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 465.793954][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6990'. [ 465.849938][ T29] audit: type=1400 audit(1752262444.970:46820): avc: denied { mounton } for pid=23713 comm="syz.6.6990" path="/18/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.902833][ T29] audit: type=1326 audit(1752262445.010:46821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 465.928070][ T29] audit: type=1326 audit(1752262445.010:46822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 465.951756][ T29] audit: type=1326 audit(1752262445.010:46823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 465.976720][ T29] audit: type=1326 audit(1752262445.010:46824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 466.000425][ T29] audit: type=1326 audit(1752262445.010:46825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 466.025374][ T29] audit: type=1326 audit(1752262445.010:46826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 466.048987][ T29] audit: type=1326 audit(1752262445.010:46827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 466.074154][ T29] audit: type=1326 audit(1752262445.010:46828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.0.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0897ece929 code=0x7ffc0000 [ 467.135560][T23740] netlink: 'syz.0.7000': attribute type 4 has an invalid length. [ 468.310998][T23765] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 468.350554][T23767] geneve1: entered promiscuous mode [ 468.357575][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 468.369571][T23767] geneve1 (unregistering): left promiscuous mode [ 468.472203][T23770] lo speed is unknown, defaulting to 1000 [ 468.480048][T23770] lo speed is unknown, defaulting to 1000 [ 468.895648][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 468.923974][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 468.953981][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 468.968999][T23784] netlink: 'syz.3.7016': attribute type 39 has an invalid length. [ 468.984682][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.014088][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.048300][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.070141][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.099976][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.131086][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.170493][T23348] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 469.225608][T23798] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7021'. [ 469.235373][T23798] 0ªX¹¦D: renamed from gretap0 [ 469.253822][T23798] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 469.364863][T23516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.686750][ T7039] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.734538][ T7039] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.806942][ T7039] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.866211][ T7039] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.944884][T23817] ================================================================== [ 469.953024][T23817] BUG: KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event [ 469.961744][T23817] [ 469.964095][T23817] write to 0xffff888131d9b238 of 1 bytes by interrupt on cpu 0: [ 469.971751][T23817] wakeup_source_report_event+0xd6/0x280 [ 469.977414][T23817] __pm_stay_awake+0x34/0x70 [ 469.982067][T23817] ep_poll_callback+0x1f6/0x550 [ 469.986948][T23817] __wake_up+0x66/0xb0 [ 469.991063][T23817] ep_poll_callback+0x3d6/0x550 [ 469.995943][T23817] __wake_up+0x66/0xb0 [ 470.000044][T23817] bpf_ringbuf_notify+0x22/0x30 [ 470.004938][T23817] irq_work_run+0xe2/0x2d0 [ 470.009388][T23817] __sysvec_irq_work+0x22/0x170 [ 470.014261][T23817] sysvec_irq_work+0x66/0x80 [ 470.018878][T23817] asm_sysvec_irq_work+0x1a/0x20 [ 470.023856][T23817] native_apic_msr_write+0x3d/0x60 [ 470.029014][T23817] x2apic_send_IPI_self+0x10/0x20 [ 470.034122][T23817] arch_irq_work_raise+0x46/0x50 [ 470.039117][T23817] __irq_work_queue_local+0x10f/0x2c0 [ 470.044548][T23817] irq_work_queue+0x70/0x100 [ 470.049177][T23817] bpf_ringbuf_discard+0xd3/0xf0 [ 470.054156][T23817] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 470.057365][T23818] lo speed is unknown, defaulting to 1000 [ 470.059629][T23817] bpf_trace_run3+0x10f/0x1d0 [ 470.068568][T23818] lo speed is unknown, defaulting to 1000 [ 470.070021][T23817] kmem_cache_free+0x257/0x300 [ 470.080566][T23817] mt_free_rcu+0x2c/0x40 [ 470.084831][T23817] rcu_core+0x5a5/0xc00 [ 470.089015][T23817] rcu_core_si+0xd/0x20 [ 470.093199][T23817] handle_softirqs+0xb7/0x290 [ 470.097944][T23817] run_ksoftirqd+0x1c/0x30 [ 470.102406][T23817] smpboot_thread_fn+0x328/0x530 [ 470.107475][T23817] kthread+0x489/0x510 [ 470.111595][T23817] ret_from_fork+0xda/0x150 [ 470.116122][T23817] ret_from_fork_asm+0x1a/0x30 [ 470.120919][T23817] [ 470.123291][T23817] read to 0xffff888131d9b238 of 1 bytes by task 23817 on cpu 1: [ 470.130949][T23817] __ep_eventpoll_poll+0x1de/0x4e0 [ 470.136092][T23817] ep_eventpoll_poll+0x1f/0x30 [ 470.140879][T23817] do_select+0x8ee/0xf50 [ 470.145161][T23817] core_sys_select+0x3d7/0x6e0 [ 470.149963][T23817] __se_sys_pselect6+0x216/0x280 [ 470.154929][T23817] __x64_sys_pselect6+0x78/0x90 [ 470.159817][T23817] x64_sys_call+0x1caa/0x2fb0 [ 470.164604][T23817] do_syscall_64+0xd2/0x200 [ 470.169139][T23817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.175053][T23817] [ 470.177396][T23817] value changed: 0x00 -> 0x01 [ 470.182085][T23817] [ 470.184435][T23817] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.190611][T23817] CPU: 1 UID: 0 PID: 23817 Comm: syz.3.7029 Tainted: G W 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 470.204701][T23817] Tainted: [W]=WARN [ 470.208529][T23817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.218616][T23817] ================================================================== [ 470.237618][ T7039] bridge_slave_1: left allmulticast mode [ 470.243845][ T7039] bridge_slave_1: left promiscuous mode [ 470.249664][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.275636][ T7039] bridge_slave_0: left allmulticast mode [ 470.281319][ T7039] bridge_slave_0: left promiscuous mode [ 470.287230][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.544788][ T7039] bond0 (unregistering): left promiscuous mode [ 470.551037][ T7039] bond_slave_0: left promiscuous mode [ 470.556674][ T7039] bond_slave_1: left promiscuous mode [ 470.574550][ T7039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.594960][ T7039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.605590][ T7039] bond0 (unregistering): Released all slaves [ 470.772939][ T7039] team0: left promiscuous mode [ 470.777794][ T7039] team_slave_0: left promiscuous mode [ 470.784739][ T7039] team_slave_1: left promiscuous mode [ 470.822959][ T7039] hsr_slave_0: left promiscuous mode [ 470.833203][ T7039] hsr_slave_1: left promiscuous mode [ 470.839044][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.847892][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.874960][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.882417][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.906946][ T7039] veth1_vlan: left promiscuous mode [ 470.912414][ T7039] veth0_vlan: left promiscuous mode [ 471.070663][ T7039] team0 (unregistering): Port device team_slave_1 removed [ 471.082327][ T7039] team0 (unregistering): Port device team_slave_0 removed [ 471.944441][ T7039] bond0 (unregistering): (slave gretap1): Releasing active interface [ 472.724800][ T7039] bond1 (unregistering): Released all slaves [ 472.734100][ T7039] bond2 (unregistering): Released all slaves [ 472.742462][ T7039] bond3 (unregistering): Released all slaves [ 472.750612][ T7039] bond4 (unregistering): Released all slaves [ 472.758950][ T7039] bond5 (unregistering): Released all slaves [ 472.767953][ T7039] bond0 (unregistering): Released all slaves [ 473.124900][ T7039] bond1 (unregistering): Released all slaves [ 473.134520][ T7039] bond0 (unregistering): Released all slaves [ 473.142577][ T7039] bond2 (unregistering): Released all slaves [ 473.151344][ T7039] bond3 (unregistering): Released all slaves [ 473.159724][ T7039] bond4 (unregistering): Released all slaves [ 473.168225][ T7039] bond5 (unregistering): Released all slaves [ 473.176616][ T7039] bond6 (unregistering): Released all slaves [ 473.185619][ T7039] bond7 (unregistering): Released all slaves [ 473.194032][ T7039] bond8 (unregistering): Released all slaves [ 473.238435][ T7039] tipc: Disabling bearer [ 473.244209][ T7039] tipc: Left network mode [ 473.248840][ T7039] tipc: Disabling bearer [ 473.253899][ T7039] tipc: Disabling bearer [ 473.258868][ T7039] tipc: Disabling bearer [ 473.264148][ T7039] tipc: Left network mode [ 473.316534][ T7039] pim6reg (unregistering): left allmulticast mode [ 473.364666][ T7039] pimreg (unregistering): left allmulticast mode [ 473.817424][ T7039] IPVS: stop unused estimator thread 0... [ 473.824297][ T7039] IPVS: stop unused estimator thread 0...