last executing test programs: 3m26.198910321s ago: executing program 1 (id=1026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000000)={[{@bh}, {@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@data_err_ignore}, {@errors_remount}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r3, 0x0, 0x40007fffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x463f, 0x0, 0x0, 0x0) 3m25.903642851s ago: executing program 1 (id=1016): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = semget$private(0x0, 0x4000000009, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f0000000340)=0x3, r1, 0x0, 0xfffffffffffffcc7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) fcntl$lock(r3, 0x24, &(0x7f0000000140)={0x1, 0x1, 0x0, 0xfffffffffffffffc}) semop(r2, &(0x7f00000001c0)=[{0x1, 0xfffb}], 0x1) semop(r2, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x18, 0x4) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{r5, r6/1000+60000}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r7 = syz_io_uring_setup(0x5248, &(0x7f0000000080)={0x0, 0x101fab, 0x1000, 0xffffffff}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/4096, 0x1000}], &(0x7f00000001c0), 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3m24.962170919s ago: executing program 1 (id=1024): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xc3, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x25, '\x00', [@ra={0x5, 0x2f}, @enc_lim={0x4, 0x1, 0x8}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9de60cbda816dc9f2c90c3c79f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read(r3, 0x0, 0x0) 3m24.042923267s ago: executing program 1 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syslog(0x4, &(0x7f0000001300)=""/240, 0xf0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x840) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006ca3ce64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0xb29b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='xprtrdma_post_recv\x00', r8}, 0x4d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="030000000600"/28], 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x8, 0xa, 0x9) sendmsg$inet(r9, &(0x7f0000002e40)={&(0x7f0000001bc0)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x8080) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = open(&(0x7f0000000080)='./file1\x00', 0x40001, 0x0) fallocate(r10, 0x8, 0x2000, 0x10000) 3m23.862107567s ago: executing program 1 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@noload}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xdb4ce876ffba1343}, 0x20040004) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) pidfd_getfd(r6, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) fallocate(r4, 0x0, 0xffff, 0x8009) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000380), 0x101bf) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000340)=0xc) 3m23.605844036s ago: executing program 1 (id=1049): r0 = semget$private(0x0, 0x6, 0x4) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xa8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x80800, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x80000000}) 3m7.130404643s ago: executing program 32 (id=1049): r0 = semget$private(0x0, 0x6, 0x4) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xa8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x80800, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x80000000}) 1m27.143883218s ago: executing program 5 (id=1790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff7fffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x70f7, &(0x7f00000005c0)={0x0, 0x7d94, 0x0, 0x0, 0x3}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1m26.935928177s ago: executing program 5 (id=1791): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0x28d8, 0x10, 0xfffc, 0x200010}, 0x0, &(0x7f00000000c0)=0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x48) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589000000000000000eceb0ab4912f9ca983853ec98e98caa52dd8d39af03c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r10 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r10, r9, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x444, 0x0, 0x2009, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x88b48100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x20009010}, 0x4001840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m25.518913574s ago: executing program 5 (id=1800): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000003150ddecc508bb0d3d709e83e6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0x1f) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) timer_delete(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@nombcache}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, 0x0, 0x5) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r9, r9, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./file1\x00', 0x2d) unlink(&(0x7f00000000c0)='./file1\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 1m24.841174893s ago: executing program 5 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0xfe, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8000, 0x0]}]}}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x64, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"1cbbbe"}}}}}}}, 0x3d) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75df9868592b9fd3ccfffffffffffff7", ')\x00\x000', "00000011000a00"}, 0x28) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x50, 0x46]}, 0x2b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) close(r4) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa002a008}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e20, 0xfffffe01, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, r7}}, 0x38) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) 1m24.439328652s ago: executing program 5 (id=1808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0xbcd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x7, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syslog(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183600000300000000000000000000000429ffff3f020000180100002020732500000000002020207b1af8ff000000"], 0x0, 0x1ff, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) 1m24.350156762s ago: executing program 5 (id=1810): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bf95bc000000000007010000f8ffffffb702000008000000b70300000000060085000000b000000095cb897f7fa95cc2b6b8ca0d8b988e3e72213607c2c832d532435fc25c2a530c0a586d800cbd3269010c3b8fd2d033141684a862178c4bce8258a440302fc7be210e94"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mkdir(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) open(0x0, 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) open(&(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x66842, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r9, 0x0, 0xf3a, 0x4) tee(r8, r4, 0x8, 0x0) write$binfmt_script(r9, 0x0, 0xfffffe48) 1m24.330626362s ago: executing program 33 (id=1810): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bf95bc000000000007010000f8ffffffb702000008000000b70300000000060085000000b000000095cb897f7fa95cc2b6b8ca0d8b988e3e72213607c2c832d532435fc25c2a530c0a586d800cbd3269010c3b8fd2d033141684a862178c4bce8258a440302fc7be210e94"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mkdir(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) open(0x0, 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) open(&(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x66842, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r9, 0x0, 0xf3a, 0x4) tee(r8, r4, 0x8, 0x0) write$binfmt_script(r9, 0x0, 0xfffffe48) 8.758899668s ago: executing program 2 (id=4104): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x1, 0x200007, 0x4, 0x6, 0x4, "ea08340100000063f700ecffff0500"}) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 8.756739048s ago: executing program 2 (id=4106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25, 0x0, 0xfeff}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) clock_gettime(0x0, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r8, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0x3) 3.985301338s ago: executing program 2 (id=4263): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x389) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 3.933340288s ago: executing program 2 (id=4265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3.798924207s ago: executing program 2 (id=4268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.672056627s ago: executing program 2 (id=4271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x19}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @ipv4=@dccp={{0x1a, 0x4, 0x1, 0x35, 0x8f, 0x65, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @remote, {[@rr={0x7, 0x23, 0x38, [@remote, @local, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x85, [@dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @empty, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0xee, [@local, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @multicast2]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x2, "45a31d", 0x1, "305804"}, "68d563e7a4779d3c361b65f976d36992a9a83d6949994f"}}}, 0x9d) 1.028600962s ago: executing program 0 (id=4387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79040000000000000000010000001400090000000000000000000000ffff0300000006000a004e210000050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.012467582s ago: executing program 0 (id=4389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 972.541322ms ago: executing program 0 (id=4392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 950.921532ms ago: executing program 0 (id=4395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 276.13154ms ago: executing program 6 (id=4436): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) io_cancel(0x0, 0x0, 0x0) 255.03035ms ago: executing program 3 (id=4437): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x34c}]}, 0x34}}, 0x0) 254.53361ms ago: executing program 3 (id=4438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1, 0x0, 0xb2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, 'w'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) 196.9997ms ago: executing program 3 (id=4439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0x7) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000acd9ee02a3cb4b819c8cbf91c36af0b788cfd7d93801dc073e6b3169ae3cb58d503d9f4e612f9adeb5ebbd6555cb29545a6941c722f7675eac50525f0233ac0c08e2a4d337dbf8b7a8743d3d231ba034a6ed2f67889578cecd17e8662122987ffca5821d5537822ce0f5d1e6692e9890f89b4c28488af706b9e72a98013a5a2367cb6020ffc6ee10716d772afa7f94efaddf7dc0bc29faf471d8b22b26ddc67accdafc14b928757fce062c0"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x13, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 157.3521ms ago: executing program 6 (id=4441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) 156.90626ms ago: executing program 4 (id=4442): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 112.49918ms ago: executing program 6 (id=4443): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, &(0x7f0000000080)=0x6, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0x3, 0x48, 0x5}}], 0x58}, 0x0) 112.30946ms ago: executing program 4 (id=4444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 111.99454ms ago: executing program 6 (id=4445): r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 100.63234ms ago: executing program 4 (id=4446): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r1) 85.23822ms ago: executing program 6 (id=4447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 84.59377ms ago: executing program 3 (id=4448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700"], 0x44}}, 0x0) 67.68592ms ago: executing program 4 (id=4449): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) 67.31968ms ago: executing program 6 (id=4450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unshare(0x24040000) unshare(0x2c020400) 31.51205ms ago: executing program 4 (id=4451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 31.27894ms ago: executing program 3 (id=4452): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 30.8835ms ago: executing program 0 (id=4453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 10.59577ms ago: executing program 3 (id=4454): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 2.14336ms ago: executing program 0 (id=4455): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=4456): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): 917 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f211a9b47df code=0x7ffc0000 [ 244.580389][ T29] audit: type=1326 audit(231.636:265143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f211a9b5db7 code=0x7ffc0000 [ 244.603397][ T29] audit: type=1326 audit(231.636:265144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f211a9b4690 code=0x7ffc0000 [ 244.626514][ T29] audit: type=1326 audit(231.636:265145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f211a9b498a code=0x7ffc0000 [ 244.649522][ T29] audit: type=1326 audit(231.636:265146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 244.697982][T11870] hsr_slave_0: entered promiscuous mode [ 244.704480][T11870] hsr_slave_1: entered promiscuous mode [ 244.711254][T11870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.718961][T11870] Cannot create hsr debugfs directory [ 244.826233][T11924] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.899373][T11924] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.923817][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1902'. [ 244.989253][T11938] serio: Serial port ptm0 [ 244.999647][T11924] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.040450][T11942] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1903'. [ 245.062950][T11924] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.143634][T11924] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.169238][T11924] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.191296][T11924] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.208410][T11924] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.315341][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 245.365613][T11870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 245.381999][T11870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 245.383413][T11959] syz2: rxe_newlink: already configured on sit0 [ 245.404864][T11959] tipc: Started in network mode [ 245.409816][T11959] tipc: Node identity ac14140f, cluster identity 4711 [ 245.417125][T11959] tipc: New replicast peer: 255.255.255.255 [ 245.423247][T11959] tipc: Enabled bearer , priority 10 [ 245.429542][T11870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 245.440834][T11962] lo speed is unknown, defaulting to 1000 [ 245.446598][T11870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 245.527834][T11870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.543826][T11962] sit0 speed is unknown, defaulting to 1000 [ 245.556230][T11870] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.574193][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.581430][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.606066][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.613180][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.637432][T11870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.647863][T11870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.712785][T11870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.754071][T11962] lo speed is unknown, defaulting to 1000 [ 245.780520][ T550] net_ratelimit: 6 callbacks suppressed [ 245.780537][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 245.827772][T11974] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 245.827772][T11974] program syz.2.1911 not setting count and/or reply_len properly [ 245.906375][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.053976][T11870] veth0_vlan: entered promiscuous mode [ 246.062824][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'. [ 246.134642][T11870] veth1_vlan: entered promiscuous mode [ 246.201734][T11870] veth0_macvtap: entered promiscuous mode [ 246.298883][T11870] veth1_macvtap: entered promiscuous mode [ 246.320642][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.331211][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.345809][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 246.908908][ T1037] tipc: Node number set to 2886997007 [ 246.915686][T11870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.924550][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.935259][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.946365][T11870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.955743][T11870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.964504][T11870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.973234][T11870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.982075][T11870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.005741][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 247.018224][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.384479][T12020] loop6: detected capacity change from 0 to 512 [ 247.427410][T12020] EXT4-fs: Ignoring removed i_version option [ 247.468163][T12020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.478719][T12022] lo speed is unknown, defaulting to 1000 [ 247.563758][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 247.578865][T12020] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 247.581827][T12022] sit0 speed is unknown, defaulting to 1000 [ 247.718719][T12020] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #4: comm syz.6.1888: corrupted inode contents [ 247.733437][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 247.742814][T12020] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #4: comm syz.6.1888: mark_inode_dirty error [ 247.755046][T12020] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #4: comm syz.6.1888: corrupted inode contents [ 247.768341][T12022] lo speed is unknown, defaulting to 1000 [ 247.777728][T12020] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.1888: mark_inode_dirty error [ 247.799651][T12020] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1888: Failed to acquire dquot type 1 [ 247.818132][T12020] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 247.896497][T12032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.908491][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.920987][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 247.960862][T12038] loop6: detected capacity change from 0 to 256 [ 248.003914][T12038] FAT-fs (loop6): codepage cp1251 not found [ 248.071690][T12038] loop6: detected capacity change from 0 to 256 [ 248.119286][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.133766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.193444][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 248.211668][T12048] loop6: detected capacity change from 0 to 2048 [ 248.273829][T12037] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 248.354704][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1928'. [ 248.384091][T12057] team0 (unregistering): Port device team_slave_0 removed [ 248.395919][T12057] team0 (unregistering): Port device team_slave_1 removed [ 248.508640][T12059] netlink: 'syz.4.1931': attribute type 4 has an invalid length. [ 248.516533][T12059] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1931'. [ 248.685963][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.775828][T12063] siw: device registration error -23 [ 248.970959][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.979953][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.003689][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.010074][T12065] xt_hashlimit: max too large, truncated to 1048576 [ 249.012625][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.135397][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 249.135410][ T29] audit: type=1326 audit(236.079:265393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.164852][ T29] audit: type=1326 audit(236.079:265394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.188110][ T29] audit: type=1326 audit(236.079:265395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.211138][ T29] audit: type=1326 audit(236.079:265396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.234258][ T29] audit: type=1326 audit(236.079:265397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.241856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.257319][ T29] audit: type=1326 audit(236.079:265398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.287199][ T29] audit: type=1326 audit(236.079:265399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.310253][ T29] audit: type=1326 audit(236.079:265400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.333365][ T29] audit: type=1326 audit(236.079:265401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.356431][ T29] audit: type=1326 audit(236.079:265402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 249.755327][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'. [ 249.915061][T12105] syz.3.1946[12105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.915225][T12105] syz.3.1946[12105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.927017][T12105] syz.3.1946[12105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.356811][T12133] blktrace: Concurrent blktraces are not allowed on loop1 [ 250.524873][T12136] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 250.754549][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1952'. [ 250.768500][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1952'. [ 250.878032][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 250.920778][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'. [ 251.454810][ T28] net_ratelimit: 5 callbacks suppressed [ 251.454827][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 251.474764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.512674][T12184] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 251.549778][T12184] SELinux: +}[@ (12184) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 251.669330][T12191] ALSA: seq fatal error: cannot create timer (-22) [ 251.726793][T12191] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1966'. [ 251.804718][T12176] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1961'. [ 251.872148][T12199] hub 9-0:1.0: USB hub found [ 251.876915][T12199] hub 9-0:1.0: 8 ports detected [ 251.933310][T12203] lo speed is unknown, defaulting to 1000 [ 251.943762][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.952492][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.994566][T12205] netlink: 'syz.0.1970': attribute type 29 has an invalid length. [ 252.012883][T12205] netlink: 'syz.0.1970': attribute type 29 has an invalid length. [ 252.021693][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 252.048851][T12203] sit0 speed is unknown, defaulting to 1000 [ 252.086743][T12203] lo speed is unknown, defaulting to 1000 [ 252.109725][T12207] netlink: 'syz.0.1971': attribute type 4 has an invalid length. [ 252.117713][T12207] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1971'. [ 252.358390][T12216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12216 comm=syz.6.1973 [ 252.506577][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 252.577291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.579843][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 252.874907][T12225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.963478][T12227] pimreg: entered allmulticast mode [ 253.001991][T10098] IPVS: starting estimator thread 0... [ 253.032501][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 253.041795][T12235] netlink: 'syz.4.1979': attribute type 19 has an invalid length. [ 253.111822][T12236] IPVS: using max 2640 ests per chain, 132000 per kthread [ 253.144439][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 253.171913][T12241] lo speed is unknown, defaulting to 1000 [ 253.225265][T12241] sit0 speed is unknown, defaulting to 1000 [ 253.259998][T12241] lo speed is unknown, defaulting to 1000 [ 253.377868][T12246] netlink: 'syz.0.1982': attribute type 4 has an invalid length. [ 253.506953][T12253] lo speed is unknown, defaulting to 1000 [ 253.562156][T12253] sit0 speed is unknown, defaulting to 1000 [ 253.617142][T12253] lo speed is unknown, defaulting to 1000 [ 253.689144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.888506][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 253.907116][T12255] lo speed is unknown, defaulting to 1000 [ 253.971544][T12255] sit0 speed is unknown, defaulting to 1000 [ 254.023950][T12255] lo speed is unknown, defaulting to 1000 [ 254.101315][T12264] syz.3.1997[12264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.101430][T12264] syz.3.1997[12264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.146886][T12264] syz.3.1997[12264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.203209][T12263] SELinux: +}[@ (12263) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 254.307897][T12269] lo speed is unknown, defaulting to 1000 [ 254.342425][T12271] lo speed is unknown, defaulting to 1000 [ 254.357622][T12269] sit0 speed is unknown, defaulting to 1000 [ 254.448099][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 254.451070][ T3452] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 254.470780][ T3452] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 254.478872][T12269] lo speed is unknown, defaulting to 1000 [ 254.485060][T12271] sit0 speed is unknown, defaulting to 1000 [ 254.486733][ T3452] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 254.503345][ T3452] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 254.584949][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 254.584965][ T29] audit: type=1326 audit(241.167:266111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x0 [ 254.640598][T12271] lo speed is unknown, defaulting to 1000 [ 254.736650][ T29] audit: type=1326 audit(241.298:266112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.759912][ T29] audit: type=1326 audit(241.298:266113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.783012][ T29] audit: type=1326 audit(241.298:266114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.800982][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.806267][ T29] audit: type=1326 audit(241.298:266115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.836175][ T29] audit: type=1326 audit(241.298:266116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.859319][ T29] audit: type=1326 audit(241.298:266117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.875233][T12286] loop6: detected capacity change from 0 to 8192 [ 254.882199][ T29] audit: type=1326 audit(241.298:266118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 254.911761][ T29] audit: type=1326 audit(241.298:266119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc869a44690 code=0x7ffc0000 [ 254.934844][ T29] audit: type=1326 audit(241.298:266120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.4.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 255.098708][T12293] Invalid ELF header magic: != ELF [ 255.339072][T12302] netlink: 'syz.2.2008': attribute type 4 has an invalid length. [ 255.852963][T12330] loop6: detected capacity change from 0 to 1024 [ 255.860413][T12330] EXT4-fs: Ignoring removed i_version option [ 255.891708][T12330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.943668][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.969614][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.983504][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.023058][T12321] xt_hashlimit: max too large, truncated to 1048576 [ 256.031373][T12335] loop6: detected capacity change from 0 to 1024 [ 256.064114][T12335] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.086172][T12335] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 256.107446][T12335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 256.115573][T12335] System zones: 0-1, 3-12 [ 256.122071][T12338] __nla_validate_parse: 9 callbacks suppressed [ 256.122083][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'. [ 256.130341][T12335] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #11: comm syz.6.2009: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 256.166638][T12335] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2009: couldn't read orphan inode 11 (err -117) [ 256.181708][T12335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.221510][T12335] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2009: Invalid block bitmap block 0 in block_group 0 [ 256.242575][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2010'. [ 256.293916][T12335] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2009: Failed to acquire dquot type 0 [ 256.309094][T12352] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2009: Invalid inode bitmap blk 137438953472 in block_group 0 [ 256.358227][T12335] geneve2: entered promiscuous mode [ 256.363735][T12335] geneve2: entered allmulticast mode [ 256.439076][ T28] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 256.453984][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.545638][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2013'. [ 256.558991][T12356] syzkaller0: entered allmulticast mode [ 256.576181][T12359] netlink: 'syz.6.2012': attribute type 4 has an invalid length. [ 256.583934][T12359] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2012'. [ 256.866337][T12368] bond0: (slave bond_slave_0): Releasing backup interface [ 256.908860][T12368] bond0: (slave bond_slave_1): Releasing backup interface [ 257.024570][ C0] net_ratelimit: 5 callbacks suppressed [ 257.024604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.108550][T12373] ALSA: seq fatal error: cannot create timer (-22) [ 257.196883][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 257.240566][T12368] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 257.465090][T12373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2019'. [ 257.597876][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 257.607322][T12382] tipc: Resetting bearer [ 257.736787][T12382] tipc: Disabling bearer [ 257.751664][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 257.854311][T12384] netlink: 'syz.4.2024': attribute type 4 has an invalid length. [ 257.862138][T12384] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2024'. [ 257.882644][T12389] syz.3.2025 (12389): /proc/12387/oom_adj is deprecated, please use /proc/12387/oom_score_adj instead. [ 258.066951][T12395] pimreg: entered allmulticast mode [ 258.094918][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 258.107794][T12399] syzkaller0: entered allmulticast mode [ 258.136362][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.204572][T12410] ALSA: seq fatal error: cannot create timer (-22) [ 258.250554][T12410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2032'. [ 258.319586][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2035'. [ 258.321071][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 258.394263][T12423] netlink: 'syz.3.2038': attribute type 4 has an invalid length. [ 258.569826][T12426] netlink: 'syz.3.2050': attribute type 4 has an invalid length. [ 258.603191][ T3452] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 258.610940][ T3452] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 258.618748][ T3452] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 258.626921][ T3452] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 258.705263][T12430] ip6gre1: entered allmulticast mode [ 258.884884][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 259.083779][T12446] geneve2: entered promiscuous mode [ 259.089101][T12446] geneve2: entered allmulticast mode [ 259.158058][T12456] 9pnet_fd: Insufficient options for proto=fd [ 259.176785][ T1037] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 259.184586][ T1037] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 259.193096][ T1037] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 259.222380][ T1037] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 259.248312][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.315546][T12459] ip6gre1: entered allmulticast mode [ 259.447417][T12471] ebtables: ebtables: counters copy to user failed while replacing table [ 259.494511][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 260.360043][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.240296][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.249810][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.268118][T12494] xt_hashlimit: max too large, truncated to 1048576 [ 262.275728][T12494] Cannot find set identified by id 0 to match [ 262.528192][T12500] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.536454][T12500] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.544732][T12500] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.552956][T12500] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.568736][ T51] net_ratelimit: 5 callbacks suppressed [ 262.568753][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.588693][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.609743][T12500] geneve3: entered promiscuous mode [ 262.615069][T12500] geneve3: entered allmulticast mode [ 262.985725][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 262.985740][ T29] audit: type=1326 audit(249.025:266911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.043448][ T29] audit: type=1326 audit(249.062:266912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.066588][ T29] audit: type=1326 audit(249.062:266913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.089659][ T29] audit: type=1326 audit(249.062:266914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.112911][ T29] audit: type=1326 audit(249.062:266915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.136042][ T29] audit: type=1326 audit(249.062:266916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.140056][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 263.159078][ T29] audit: type=1326 audit(249.062:266917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.159112][ T29] audit: type=1326 audit(249.062:266918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 263.219554][ T29] audit: type=1326 audit(249.062:266919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f03c6b05d63 code=0x7ffc0000 [ 263.242519][ T29] audit: type=1326 audit(249.062:266920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03c6b047df code=0x7ffc0000 [ 263.287101][T12521] lo speed is unknown, defaulting to 1000 [ 263.334397][T12521] sit0 speed is unknown, defaulting to 1000 [ 263.343499][T12527] __nla_validate_parse: 5 callbacks suppressed [ 263.343515][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2074'. [ 263.374012][T12521] lo speed is unknown, defaulting to 1000 [ 263.395749][T12523] Falling back ldisc for ttyS3. [ 263.401916][T12535] wireguard0: entered promiscuous mode [ 263.407466][T12535] wireguard0: entered allmulticast mode [ 263.521648][T12549] loop6: detected capacity change from 0 to 512 [ 263.528575][T12549] EXT4-fs: inline encryption not supported [ 263.565233][T12549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.646438][T12558] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 263.686943][T12563] binfmt_misc: register: failed to install interpreter file ./file2 [ 263.695538][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.729426][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 263.747582][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.787883][T12567] lo speed is unknown, defaulting to 1000 [ 263.821825][T12567] sit0 speed is unknown, defaulting to 1000 [ 263.856167][T12567] lo speed is unknown, defaulting to 1000 [ 263.898705][T12570] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2087'. [ 264.052566][T12585] syz.3.2092[12585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.052698][T12585] syz.3.2092[12585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.064205][T12574] Falling back ldisc for ttyS3. [ 264.077540][T12585] syz.3.2092[12585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.294644][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 264.351061][T12599] rdma_rxe: rxe_newlink: failed to add lo [ 264.709103][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 264.718466][T12617] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.807349][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.873101][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.032702][T12622] loop6: detected capacity change from 0 to 512 [ 265.088448][T12622] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 265.139757][T12622] EXT4-fs (loop6): 1 orphan inode deleted [ 265.145630][T12622] EXT4-fs (loop6): 1 truncate cleaned up [ 265.151797][T12622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.207702][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.247124][T12633] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 265.413036][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.428021][ T28] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.489946][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.827955][T12652] siw: device registration error -23 [ 265.837167][T12656] netlink: 'syz.3.2122': attribute type 4 has an invalid length. [ 265.845005][T12656] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2122'. [ 265.919163][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.243035][T12669] lo speed is unknown, defaulting to 1000 [ 266.274468][T12669] sit0 speed is unknown, defaulting to 1000 [ 266.313847][T12669] lo speed is unknown, defaulting to 1000 [ 266.320386][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2126'. [ 266.614239][T12690] netlink: 'syz.4.2134': attribute type 4 has an invalid length. [ 266.614257][T12690] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2134'. [ 266.724735][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2137'. [ 267.819638][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2142'. [ 267.964105][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 267.991927][T12721] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2144'. [ 268.000968][T12721] net_ratelimit: 5 callbacks suppressed [ 268.000984][T12721] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 268.142810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.173099][T12733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.378341][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 268.511244][T12763] loop6: detected capacity change from 0 to 512 [ 268.549588][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 268.549608][ T29] audit: type=1326 audit(254.066:268027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.579054][ T29] audit: type=1326 audit(254.066:268028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.602176][ T29] audit: type=1326 audit(254.066:268029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.625351][ T29] audit: type=1326 audit(254.066:268030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.648411][ T29] audit: type=1326 audit(254.066:268031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.671603][ T29] audit: type=1326 audit(254.066:268032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.694746][ T29] audit: type=1326 audit(254.066:268033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.717882][ T29] audit: type=1326 audit(254.066:268034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f211a9b5d29 code=0x7ffc0000 [ 268.740996][ T29] audit: type=1326 audit(254.066:268035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f211a9b5d63 code=0x7ffc0000 [ 268.764327][ T29] audit: type=1326 audit(254.085:268036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f211a9b47df code=0x7ffc0000 [ 269.254591][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.802466][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 269.928811][T12763] EXT4-fs (loop6): orphan cleanup on readonly fs [ 269.935711][T12763] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 269.952112][T12763] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 269.959271][T12763] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.2159: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 269.977955][T12763] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2159: couldn't read orphan inode 13 (err -117) [ 269.992452][T12763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.018642][T12763] EXT4-fs error (device loop6): ext4_lookup:1817: inode #2: comm syz.6.2159: deleted inode referenced: 12 [ 270.178171][T12780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.190059][T12774] __nla_validate_parse: 1 callbacks suppressed [ 270.190075][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2162'. [ 270.262537][T12780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.357007][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 270.371631][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.382023][T12780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.488408][T12804] cgroup: subsys name conflicts with all [ 270.597332][T12780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.750939][T11870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.771528][T12780] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.784842][T12780] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.802232][T12780] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.815055][T12780] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.924670][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 271.027012][T12840] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2186'. [ 271.120667][T12840] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2186'. [ 271.326638][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2194'. [ 271.478257][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.490495][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 271.543879][T12866] vxcan0: entered promiscuous mode [ 271.549036][T12866] vxcan0: entered allmulticast mode [ 271.667259][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2204'. [ 271.742932][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 271.752666][T12899] loop6: detected capacity change from 0 to 128 [ 272.035132][T12939] Cannot find del_set index 0 as target [ 272.255451][T12971] netlink: 'syz.4.2249': attribute type 4 has an invalid length. [ 272.263253][T12971] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2249'. [ 272.706615][T12985] netlink: 'syz.4.2255': attribute type 4 has an invalid length. [ 272.714451][T12985] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2255'. [ 272.725438][T12986] sctp: [Deprecated]: syz.0.2254 (pid 12986) Use of int in maxseg socket option. [ 272.725438][T12986] Use struct sctp_assoc_value instead [ 272.823951][T13000] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2262'. [ 272.842289][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 272.951912][T13018] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.010544][T13023] blktrace: Concurrent blktraces are not allowed on loop1 [ 273.087720][T13038] netlink: 'syz.4.2282': attribute type 4 has an invalid length. [ 273.361390][T13083] usb usb4: usbfs: process 13083 (syz.4.2303) did not claim interface 0 before use [ 273.399714][T13092] netlink: 'syz.2.2307': attribute type 4 has an invalid length. [ 273.426275][T13098] net_ratelimit: 6 callbacks suppressed [ 273.426296][T13098] netlink: zone id is out of range [ 273.670636][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 273.689224][T13118] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 273.701926][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.752442][T13120] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.791462][T13120] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.846049][T13120] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.888243][T13120] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.941786][T13120] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.955474][T13120] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.969027][T13120] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.982623][T13120] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.071671][T13123] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.139211][T13123] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.187767][T13131] netlink: zone id is out of range [ 274.192983][T13131] netlink: set zone limit has 4 unknown bytes [ 274.207660][T13123] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.226589][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 274.260884][T13123] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.274234][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 274.274250][ T29] audit: type=1326 audit(259.585:268262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.3.2327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03c6b05d29 code=0x0 [ 274.539581][ T29] audit: type=1400 audit(259.838:268263): avc: denied { getopt } for pid=13148 comm="syz.2.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 274.781726][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 274.813734][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.879506][ T29] audit: type=1400 audit(260.156:268264): avc: denied { getopt } for pid=13186 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.060498][ T29] audit: type=1400 audit(260.324:268265): avc: denied { ioctl } for pid=13206 comm="syz.2.2361" path="socket:[33365]" dev="sockfs" ino=33365 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.106562][ T29] audit: type=1400 audit(260.362:268266): avc: denied { append } for pid=13210 comm="syz.2.2363" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.157608][ T29] audit: type=1400 audit(260.418:268267): avc: denied { write } for pid=13216 comm="syz.2.2366" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 275.215894][T13221] netlink: 'syz.3.2368': attribute type 18 has an invalid length. [ 275.258261][T13229] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 275.284354][T13233] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 275.309520][ T29] audit: type=1400 audit(260.558:268268): avc: denied { nlmsg_write } for pid=13237 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 275.340592][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 275.359857][ T1037] usb usb4-port1: attempt power cycle [ 275.448376][ T29] audit: type=1400 audit(260.689:268269): avc: denied { getopt } for pid=13261 comm="syz.3.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.486095][T13269] autofs4:pid:13269:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.65021), cmd(0xc018937e) [ 275.499838][T13269] autofs4:pid:13269:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 275.609323][T13290] __nla_validate_parse: 13 callbacks suppressed [ 275.609344][T13290] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2401'. [ 275.625883][ T29] audit: type=1326 audit(260.848:268270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 275.649164][ T29] audit: type=1326 audit(260.848:268271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 275.676835][T13292] netlink: 'syz.3.2402': attribute type 4 has an invalid length. [ 275.684679][T13292] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2402'. [ 275.770903][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 275.787076][T13303] netlink: 'syz.2.2417': attribute type 4 has an invalid length. [ 275.794855][T13303] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2417'. [ 275.899286][T13312] netlink: 'syz.2.2411': attribute type 4 has an invalid length. [ 275.907124][T13312] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2411'. [ 276.129341][T13336] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.2424'. [ 276.220917][T13354] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2433'. [ 276.230106][T13354] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2433'. [ 276.312063][T13366] netlink: 'syz.2.2439': attribute type 2 has an invalid length. [ 276.327477][T13368] bridge0: entered promiscuous mode [ 276.369178][T13374] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2443'. [ 276.496818][T13388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2450'. [ 276.601691][T13402] cgroup: Unknown subsys name 'cpuset' [ 276.661876][T13412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.708155][T13412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.761022][T13412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.804181][T13412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.873812][T13412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.885044][T13412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.896025][T13412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.907732][T13412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.101818][T13456] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.145967][T13456] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.199553][T13456] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.252775][T13456] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.317455][T13463] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 277.338332][T13456] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.351427][T13456] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.360338][ T1037] usb usb4-port1: unable to enumerate USB device [ 277.371336][T13456] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.393679][T13456] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.529149][T13471] geneve2: entered promiscuous mode [ 277.556905][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.681938][T13489] validate_nla: 2 callbacks suppressed [ 277.682099][T13489] netlink: 'syz.3.2494': attribute type 4 has an invalid length. [ 277.690492][T13491] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 278.146840][T13123] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.161254][T13123] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.180612][T13123] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.201157][T13123] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.296408][T13604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.319567][T13606] netlink: 'syz.6.2551': attribute type 4 has an invalid length. [ 278.347974][T13604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.365370][T13608] netlink: 'syz.2.2552': attribute type 4 has an invalid length. [ 278.417933][T13604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.493121][T13604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.569981][T13643] netlink: 'syz.6.2567': attribute type 21 has an invalid length. [ 278.696558][T13663] netlink: 'syz.3.2577': attribute type 1 has an invalid length. [ 278.873183][T13673] netlink: 'syz.3.2582': attribute type 4 has an invalid length. [ 278.970152][T13675] net_ratelimit: 14 callbacks suppressed [ 278.970173][T13675] netlink: del zone limit has 4 unknown bytes [ 279.082626][T13685] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 279.165135][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 279.261026][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.270643][T13711] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 279.281255][T13711] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 279.588006][T13747] netlink: 'syz.4.2618': attribute type 4 has an invalid length. [ 279.641297][T13755] cgroup: release_agent respecified [ 279.699379][ C1] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 279.720710][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 279.779717][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 279.779735][ T29] audit: type=1400 audit(264.730:268865): avc: denied { setopt } for pid=13770 comm="syz.6.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.010407][T13811] netlink: 'syz.6.2647': attribute type 10 has an invalid length. [ 280.019259][T13811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.059412][ T29] audit: type=1400 audit(264.992:268866): avc: denied { bind } for pid=13816 comm="syz.6.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.276668][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.307435][ T29] audit: type=1400 audit(265.226:268867): avc: denied { read } for pid=13858 comm="syz.3.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.366842][ T29] audit: type=1326 audit(265.282:268868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.373025][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.390995][ T29] audit: type=1326 audit(265.282:268869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.420205][ T29] audit: type=1326 audit(265.282:268870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.443280][ T29] audit: type=1326 audit(265.282:268871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.466476][ T29] audit: type=1326 audit(265.282:268872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.489553][ T29] audit: type=1326 audit(265.282:268873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.512732][ T29] audit: type=1326 audit(265.282:268874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13870 comm="syz.3.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 280.776992][T13604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.794905][T13604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.810075][T13604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.827944][T13604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.840130][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.983404][T13963] __nla_validate_parse: 35 callbacks suppressed [ 280.983433][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 281.046959][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 281.053832][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2725'. [ 281.056036][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 281.066431][T13973] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 281.101181][T13973] bond1: entered allmulticast mode [ 281.106763][T13973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.197200][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2737'. [ 281.261808][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 281.313236][T14020] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2746'. [ 281.410207][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 281.447282][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2759'. [ 281.457204][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2755'. [ 281.514522][T14057] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2763'. [ 281.655854][ T3376] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 281.741390][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.856939][T14115] sctp: [Deprecated]: syz.2.2790 (pid 14115) Use of int in maxseg socket option. [ 281.856939][T14115] Use struct sctp_assoc_value instead [ 281.892392][T14120] bridge1: entered promiscuous mode [ 281.897827][T14120] bridge1: entered allmulticast mode [ 281.958459][T14127] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 281.983938][T14129] futex_wake_op: syz.4.2797 tries to shift op by -1; fix this program [ 283.534303][T14349] validate_nla: 12 callbacks suppressed [ 283.534317][T14349] netlink: 'syz.2.2905': attribute type 4 has an invalid length. [ 283.783412][ T3377] usb usb4-port1: attempt power cycle [ 283.807012][T14372] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 283.818562][T14372] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547521) [ 283.829101][T14372] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 283.880793][ T3376] page_pool_release_retry() stalled pool shutdown: id 44, 1 inflight 60 sec [ 283.912218][T14380] netlink: 'syz.4.2920': attribute type 4 has an invalid length. [ 283.952899][T14384] netlink: 'syz.2.2922': attribute type 12 has an invalid length. [ 284.174400][T14409] netlink: 'syz.2.2934': attribute type 4 has an invalid length. [ 284.199673][T14414] netlink: 'syz.4.2937': attribute type 64 has an invalid length. [ 284.271090][T14428] netlink: 'syz.4.2944': attribute type 21 has an invalid length. [ 284.385821][T14444] netlink: 'syz.2.2951': attribute type 4 has an invalid length. [ 284.411472][T14452] tmpfs: Bad value for 'mpol' [ 284.546306][T14473] netlink: 'syz.2.2966': attribute type 4 has an invalid length. [ 284.659574][T14499] net_ratelimit: 8 callbacks suppressed [ 284.659588][T14499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.703145][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 284.718491][T14507] netlink: 'syz.6.2983': attribute type 12 has an invalid length. [ 284.797846][T14520] netlink: 'syz.2.2989': attribute type 4 has an invalid length. [ 284.820129][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.178301][T14588] tmpfs: Bad value for 'mpol' [ 285.258563][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.578703][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 285.578721][ T29] audit: type=1326 audit(270.155:269530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.619639][ T29] audit: type=1326 audit(270.155:269531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.642868][ T29] audit: type=1326 audit(270.155:269532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.666259][ T29] audit: type=1326 audit(270.165:269533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.689635][ T29] audit: type=1326 audit(270.165:269534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.712996][ T29] audit: type=1326 audit(270.165:269535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.736310][ T29] audit: type=1326 audit(270.165:269536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 285.759698][ T29] audit: type=1326 audit(270.165:269537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffaa1d55d63 code=0x7ffc0000 [ 285.783006][ T29] audit: type=1326 audit(270.165:269538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffaa1d547df code=0x7ffc0000 [ 285.806209][ T29] audit: type=1326 audit(270.165:269539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14664 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffaa1d55db7 code=0x7ffc0000 [ 285.830415][ T3377] usb usb4-port1: unable to enumerate USB device [ 285.837472][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.894872][T14694] ip6gretap1: entered promiscuous mode [ 285.900503][T14694] ip6gretap1: entered allmulticast mode [ 285.931970][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.435161][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 286.452441][T14790] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 286.631814][T14799] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 286.831650][T14809] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.869083][T14819] x_tables: unsorted entry at hook 2 [ 286.907095][T14809] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.932361][T14830] __nla_validate_parse: 49 callbacks suppressed [ 286.932376][T14830] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3132'. [ 286.970873][T14838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.981305][T14809] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.991356][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 287.029661][T14809] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.037330][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 287.048561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.132268][T14852] smc: net device wg0 applied user defined pnetid SYZ0 [ 287.163886][T14809] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.178701][T14809] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.194339][T14809] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.205887][T14809] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.236362][T14860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14860 comm=syz.3.3147 [ 287.321663][T14869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.371756][T14886] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.481768][T14905] netlink: 4164 bytes leftover after parsing attributes in process `syz.3.3170'. [ 287.494200][T14886] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.546596][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 287.564817][T14919] vhci_hcd: default hub control req: 4006 v0f00 i0000 l0 [ 287.574104][T14886] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.606034][T14926] blktrace: Concurrent blktraces are not allowed on loop7 [ 287.644187][T14886] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.758735][T14939] vhci_hcd: invalid port number 236 [ 287.802304][T14886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.813978][T14944] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3189'. [ 287.828761][T14886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.849247][T14886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.863126][T14886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.925644][T14956] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 287.984995][ T3377] usb usb4-port1: attempt power cycle [ 288.097839][T14981] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.151723][T14995] syz.3.3212[14995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.151801][T14995] syz.3.3212[14995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.166996][T14981] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.170338][T14995] syz.3.3212[14995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.231726][T14981] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.295843][T14981] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.346462][T14981] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.357981][T14981] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.370622][T14981] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.374960][T15017] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3222'. [ 288.382600][T14981] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.419273][T15020] SELinux: Context Ü is not valid (left unmapped). [ 288.475610][T15031] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3229'. [ 288.484206][T15033] binfmt_misc: register: failed to install interpreter file ./file0 [ 288.504954][T15035] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.3231'. [ 288.538456][T15041] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.3233'. [ 288.577838][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 288.649129][T15062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 288.660530][T15060] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3242'. [ 288.679907][T15065] syz.4.3244[15065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.680033][T15065] syz.4.3244[15065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.691592][T15065] syz.4.3244[15065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.920727][T15097] lo speed is unknown, defaulting to 1000 [ 289.002371][T15097] sit0 speed is unknown, defaulting to 1000 [ 289.043138][T15106] validate_nla: 12 callbacks suppressed [ 289.043154][T15106] netlink: 'syz.0.3263': attribute type 4 has an invalid length. [ 289.056957][T15097] lo speed is unknown, defaulting to 1000 [ 289.195298][T15112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 289.284520][T15129] syz.0.3273[15129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.284585][T15129] syz.0.3273[15129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.296261][T15129] syz.0.3273[15129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.339802][T15132] netlink: 'syz.0.3274': attribute type 4 has an invalid length. [ 289.505982][T15149] tipc: Enabling of bearer rejected, failed to enable media [ 289.930551][ T3377] usb usb4-port1: unable to enumerate USB device [ 289.951782][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.293829][ T51] net_ratelimit: 6 callbacks suppressed [ 290.293848][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.379271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.790125][T15246] syz.4.3330[15246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.860607][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.934344][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 290.934361][ T29] audit: type=1400 audit(275.169:269793): avc: denied { ioctl } for pid=15271 comm="syz.4.3343" path="socket:[41332]" dev="sockfs" ino=41332 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.974143][ T29] audit: type=1326 audit(275.206:269794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 290.997349][ T29] audit: type=1326 audit(275.206:269795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.020509][ T29] audit: type=1326 audit(275.206:269796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.043617][ T29] audit: type=1326 audit(275.206:269797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.047627][T15275] netlink: 'syz.4.3344': attribute type 4 has an invalid length. [ 291.066976][ T29] audit: type=1326 audit(275.206:269798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.098000][ T29] audit: type=1326 audit(275.206:269799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.121072][ T29] audit: type=1326 audit(275.206:269800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.144183][ T29] audit: type=1326 audit(275.206:269801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.167322][ T29] audit: type=1326 audit(275.206:269802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.4.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc869a45d29 code=0x7ffc0000 [ 291.281934][T15297] 9pnet_fd: Insufficient options for proto=fd [ 291.426951][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.491074][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.982938][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 292.079300][ T3377] usb usb4-port1: attempt power cycle [ 292.266472][T15451] ALSA: seq fatal error: cannot create timer (-22) [ 292.282709][T15453] __nla_validate_parse: 9 callbacks suppressed [ 292.282729][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3362'. [ 292.549789][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 292.602947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.759704][T15509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 292.771238][T15511] netlink: 'syz.2.3388': attribute type 4 has an invalid length. [ 292.779055][T15511] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3388'. [ 292.856124][T15514] netlink: 'syz.4.3387': attribute type 4 has an invalid length. [ 292.863967][T15514] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3387'. [ 293.061935][T15556] IPv6: sit1: Disabled Multicast RS [ 293.069754][T15556] sit1: entered allmulticast mode [ 293.111105][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 293.165536][T15567] netlink: 'syz.3.3412': attribute type 4 has an invalid length. [ 293.173488][T15567] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3412'. [ 293.303704][T15584] netlink: 'syz.0.3419': attribute type 4 has an invalid length. [ 293.311568][T15584] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3419'. [ 293.339214][T15589] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.375489][T15589] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.384396][T15593] program syz.2.3424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.432581][T15599] tipc: Enabling of bearer rejected, already enabled [ 293.442325][T15589] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.512766][T15589] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.584902][T15589] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.603000][T15589] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.615034][T15589] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.627085][T15589] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.661713][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 293.696741][T15622] bpf_get_probe_write_proto: 5 callbacks suppressed [ 293.696762][T15622] syz.4.3435[15622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.714870][T15622] syz.4.3435[15622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.742995][T15622] syz.4.3435[15622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.905391][T15642] ALSA: seq fatal error: cannot create timer (-22) [ 293.940227][T15646] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.983567][T15646] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.035741][ T3377] usb usb4-port1: unable to enumerate USB device [ 294.047812][T15646] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.101148][T15646] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.152761][T15646] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.165282][T15646] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.172630][T15670] 9pnet_fd: Insufficient options for proto=fd [ 294.177817][T15646] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.197462][T15646] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.383474][T15702] ALSA: seq fatal error: cannot create timer (-22) [ 294.426535][T15707] syz.4.3474[15707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.426640][T15707] syz.4.3474[15707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.438450][T15707] syz.4.3474[15707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.616040][T15739] syz.4.3488[15739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.627817][T15739] syz.4.3488[15739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.639712][T15739] syz.4.3488[15739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.879416][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 295.021394][T15782] syz.6.3509[15782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.165665][T15801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.514184][T15844] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.565587][T15844] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.603648][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 295.613209][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 295.629696][T15844] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.648201][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 295.657561][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 295.707150][T15844] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.765356][T15844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.796507][T15844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.822596][T15844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.846451][T15844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.855498][ T288] net_ratelimit: 5 callbacks suppressed [ 295.855514][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 295.938356][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.358521][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 296.358624][ T29] audit: type=1400 audit(280.248:270115): avc: denied { write } for pid=15892 comm="syz.6.3561" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 296.419537][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 296.736182][ T29] audit: type=1326 audit(280.594:270116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.779799][ T29] audit: type=1326 audit(280.622:270117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.780888][T15949] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.802971][ T29] audit: type=1326 audit(280.622:270118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.835934][ T29] audit: type=1326 audit(280.622:270119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.859192][ T29] audit: type=1326 audit(280.622:270120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.882439][ T29] audit: type=1326 audit(280.622:270121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.905562][ T29] audit: type=1326 audit(280.622:270122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.928780][ T29] audit: type=1326 audit(280.622:270123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.951884][ T29] audit: type=1326 audit(280.622:270124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.6.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 296.976017][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 297.001740][T15963] netlink: 'syz.4.3592': attribute type 4 has an invalid length. [ 297.011697][T15949] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.050232][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.062843][T15949] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.105671][T15949] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.158110][T15949] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.170823][T15949] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.202294][T15949] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.235093][T15949] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.299275][T16003] bridge_slave_0: entered promiscuous mode [ 297.305157][T16003] bridge_slave_0: entered allmulticast mode [ 297.320744][T16001] netlink: 'syz.0.3606': attribute type 4 has an invalid length. [ 297.483888][T16034] ipvlan2: entered promiscuous mode [ 297.492000][T16034] bridge0: port 3(ipvlan2) entered blocking state [ 297.497276][T16035] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 297.498532][T16034] bridge0: port 3(ipvlan2) entered disabled state [ 297.519728][T16034] ipvlan2: entered allmulticast mode [ 297.525095][T16034] bridge0: entered allmulticast mode [ 297.530883][T16034] ipvlan2: left allmulticast mode [ 297.536059][T16034] bridge0: left allmulticast mode [ 297.542153][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 297.696613][T16056] netem: unknown loss type 0 [ 297.701253][T16056] netem: change failed [ 297.835912][T16082] lo speed is unknown, defaulting to 1000 [ 297.878873][T16082] sit0 speed is unknown, defaulting to 1000 [ 297.915888][T16082] lo speed is unknown, defaulting to 1000 [ 298.109054][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 298.162053][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.186120][T16115] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.3660' sets config #0 [ 298.301489][T16126] netlink: 'syz.6.3665': attribute type 4 has an invalid length. [ 298.309263][T16126] __nla_validate_parse: 8 callbacks suppressed [ 298.309278][T16126] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3665'. [ 298.393304][T16138] IPv6: Can't replace route, no match found [ 298.454300][T16150] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 298.516442][T16158] netlink: 'syz.3.3680': attribute type 4 has an invalid length. [ 298.524204][T16158] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3680'. [ 298.585225][T16166] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.619777][T16172] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 298.767262][T16196] lo speed is unknown, defaulting to 1000 [ 298.799924][T16196] sit0 speed is unknown, defaulting to 1000 [ 298.838501][T16196] lo speed is unknown, defaulting to 1000 [ 298.880747][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3703'. [ 298.928307][T16211] netlink: 'syz.2.3704': attribute type 4 has an invalid length. [ 298.936655][T16211] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3704'. [ 298.965170][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 299.090765][T16231] bpf_get_probe_write_proto: 11 callbacks suppressed [ 299.090796][T16231] syz.3.3723[16231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.098696][T16231] syz.3.3723[16231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.110585][T16231] syz.3.3723[16231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.168247][T16239] syz.2.3717[16239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.180051][T16239] syz.2.3717[16239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.196861][T16239] syz.2.3717[16239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.242386][T16247] lo speed is unknown, defaulting to 1000 [ 299.290295][T16247] sit0 speed is unknown, defaulting to 1000 [ 299.325695][T16247] lo speed is unknown, defaulting to 1000 [ 299.374883][T16257] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.409385][T16260] IPv6: Can't replace route, no match found [ 299.524155][T16272] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3733' sets config #0 [ 299.546782][T16275] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.577540][T16280] lo speed is unknown, defaulting to 1000 [ 299.596550][T16275] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.620227][T16280] sit0 speed is unknown, defaulting to 1000 [ 299.660523][T16275] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.671379][T16280] lo speed is unknown, defaulting to 1000 [ 299.724341][T16275] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.792968][T16289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3741'. [ 299.813785][T16275] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.836527][T16275] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.870908][T16275] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.900795][T16275] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.917182][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 300.002525][T16309] IPv6: Can't replace route, no match found [ 300.037034][T16311] netlink: 'syz.6.3752': attribute type 4 has an invalid length. [ 300.045273][T16311] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3752'. [ 300.113312][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3755'. [ 300.123703][T16325] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.162995][T16325] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.206599][T16325] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.277280][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 300.292137][T16325] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.333872][T16350] netlink: 'syz.4.3768': attribute type 4 has an invalid length. [ 300.351419][T16325] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.363371][T16325] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.398538][T16325] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.463447][T16355] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 300.486492][T16325] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.572393][T16359] smc: net device bond0 applied user defined pnetid SYZ0 [ 300.614092][T16359] smc: net device bond0 erased user defined pnetid SYZ0 [ 301.087106][T16412] lo speed is unknown, defaulting to 1000 [ 301.120616][T16412] sit0 speed is unknown, defaulting to 1000 [ 301.153612][T16412] lo speed is unknown, defaulting to 1000 [ 301.423109][ T8407] net_ratelimit: 7 callbacks suppressed [ 301.423185][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 301.497500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.540760][T16446] SELinux: policydb version 0 does not match my version range 15-33 [ 301.549065][T16446] SELinux: failed to load policy [ 301.569694][T16448] netlink: 'syz.3.3812': attribute type 11 has an invalid length. [ 301.794506][T16468] syz.6.3820[16468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.794575][T16468] syz.6.3820[16468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.806580][T16468] syz.6.3820[16468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.857452][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 301.857470][ T29] audit: type=1326 audit(285.384:270607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.898490][ T29] audit: type=1326 audit(285.384:270608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.921588][ T29] audit: type=1326 audit(285.384:270609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.944699][ T29] audit: type=1326 audit(285.384:270610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.967933][ T29] audit: type=1326 audit(285.384:270611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.969329][T16482] netlink: 'syz.6.3825': attribute type 4 has an invalid length. [ 301.990978][ T29] audit: type=1326 audit(285.384:270612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.991090][ T29] audit: type=1326 audit(285.384:270613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.991120][ T29] audit: type=1326 audit(285.384:270614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 301.998928][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 302.022716][ T29] audit: type=1326 audit(285.384:270615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 302.106080][ T29] audit: type=1326 audit(285.384:270616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16477 comm="syz.6.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa1d55d29 code=0x7ffc0000 [ 302.201058][T16492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16492 comm=syz.0.3831 [ 302.224767][T16498] Cannot find add_set index 0 as target [ 302.353280][T16520] netlink: 'syz.0.3845': attribute type 4 has an invalid length. [ 302.380212][T16529] syz.2.3850[16529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.571412][T16555] netlink: 'syz.0.3862': attribute type 4 has an invalid length. [ 302.590735][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 302.692848][T16567] hsr_slave_0: left promiscuous mode [ 303.143913][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 303.303712][T16608] netlink: 'syz.6.3888': attribute type 4 has an invalid length. [ 303.399277][T16622] hub 9-0:1.0: USB hub found [ 303.411692][T16622] hub 9-0:1.0: 8 ports detected [ 303.450950][T16628] SELinux: policydb version -1462114101 does not match my version range 15-33 [ 303.466334][T16628] SELinux: failed to load policy [ 303.506471][T16637] SELinux: syz.4.3902 (16637) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 303.530543][T16638] vhci_hcd: invalid port number 254 [ 303.621161][T16656] netlink: 'syz.3.3911': attribute type 1 has an invalid length. [ 303.700393][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 303.945475][T16710] netlink: 'syz.6.3936': attribute type 4 has an invalid length. [ 303.953318][T16710] __nla_validate_parse: 10 callbacks suppressed [ 303.953345][T16710] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3936'. [ 304.093828][T16736] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3949'. [ 304.153845][T16749] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 304.169570][T16746] vhci_hcd: invalid port number 254 [ 304.237117][T16761] netlink: 'syz.6.3958': attribute type 4 has an invalid length. [ 304.245121][T16761] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3958'. [ 304.255743][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 304.311346][T16771] netlink: 'syz.4.3963': attribute type 8 has an invalid length. [ 304.319148][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 304.348019][T16775] vlan0: entered promiscuous mode [ 304.407185][T16785] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3968'. [ 304.457957][T16791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3967'. [ 304.575782][T16804] netlink: 'syz.3.3977': attribute type 4 has an invalid length. [ 304.583671][T16804] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3977'. [ 304.699062][T16825] tipc: Enabling of bearer rejected, already enabled [ 304.707415][T16825] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 304.812279][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.028864][T16866] netlink: 'syz.6.4006': attribute type 4 has an invalid length. [ 305.036744][T16866] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4006'. [ 305.058033][T16871] 9pnet_fd: Insufficient options for proto=fd [ 305.145682][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4011'. [ 305.289880][T16912] netlink: 'syz.4.4026': attribute type 4 has an invalid length. [ 305.297729][T16912] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4026'. [ 305.379273][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.476072][T16946] --map-set only usable from mangle table [ 305.715052][T16972] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 305.961642][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.256750][T16994] xt_hashlimit: max too large, truncated to 1048576 [ 306.387582][T17018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 306.412067][T17016] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 306.420834][T17016] SELinux: failed to load policy [ 306.548874][T17042] Process accounting resumed [ 306.610300][T17054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.651870][T17054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.705658][T17054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.748525][T17054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.798601][T17054] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.811614][T17054] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.824593][T17054] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.835495][T17054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.875117][T17069] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.909159][T17075] block device autoloading is deprecated and will be removed. [ 306.916770][T17075] syz.2.4100: attempt to access beyond end of device [ 306.916770][T17075] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.996173][T17087] SELinux: failed to load policy [ 306.997317][T17086] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.058231][ T8407] net_ratelimit: 1 callbacks suppressed [ 307.058250][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 307.080136][T17086] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.133382][T17086] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.197163][T17086] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.537817][T17096] gretap0: entered promiscuous mode [ 307.603650][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 307.603668][ T29] audit: type=1326 audit(290.762:271306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.633949][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 307.657618][ T29] audit: type=1326 audit(290.790:271307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.680795][ T29] audit: type=1326 audit(290.790:271308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.703917][ T29] audit: type=1326 audit(290.790:271309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.727044][ T29] audit: type=1326 audit(290.790:271310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.750682][ T29] audit: type=1326 audit(290.809:271311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.774161][ T29] audit: type=1326 audit(290.809:271312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.797399][ T29] audit: type=1326 audit(290.809:271313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.820612][ T29] audit: type=1326 audit(290.809:271314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.827693][T17117] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 307.843681][ T29] audit: type=1326 audit(290.809:271315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c6b05d29 code=0x7ffc0000 [ 307.876083][T17117] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 308.079396][T17152] netem: change failed [ 308.106087][T17156] 9pnet_fd: Insufficient options for proto=fd [ 308.190433][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 308.243874][T17179] bpf_get_probe_write_proto: 2 callbacks suppressed [ 308.243974][T17179] syz.0.4149[17179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.250856][T17179] syz.0.4149[17179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.262565][T17179] syz.0.4149[17179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.309815][T17183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17183 comm=syz.0.4151 [ 308.425716][T17195] all (unregistering): Released all slaves [ 308.749406][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 308.874781][T17227] blktrace: Concurrent blktraces are not allowed on loop7 [ 309.080492][T17255] rdma_op ffff88812a54b180 conn xmit_rdma 0000000000000000 [ 309.301982][ T51] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 309.355746][T17285] blktrace: Concurrent blktraces are not allowed on loop1 [ 309.421902][T17293] lo speed is unknown, defaulting to 1000 [ 309.459103][T17293] sit0 speed is unknown, defaulting to 1000 [ 309.497931][T17293] lo speed is unknown, defaulting to 1000 [ 309.697903][T17323] __nla_validate_parse: 7 callbacks suppressed [ 309.697922][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 309.857640][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.213121][T17373] syz.6.4241[17373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.213187][T17373] syz.6.4241[17373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.225650][T17373] syz.6.4241[17373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.322151][ C1] sd 0:0:1:0: [sda] tag#5518 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 310.343938][ C1] sd 0:0:1:0: [sda] tag#5518 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 310.401201][T17385] lo speed is unknown, defaulting to 1000 [ 310.413904][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.455491][T17385] sit0 speed is unknown, defaulting to 1000 [ 310.496600][T17385] lo speed is unknown, defaulting to 1000 [ 310.793367][T17358] syz.0.4234 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 310.804229][T17358] CPU: 0 UID: 0 PID: 17358 Comm: syz.0.4234 Tainted: G W 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 310.816515][T17358] Tainted: [W]=WARN [ 310.820334][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.830398][T17358] Call Trace: [ 310.833683][T17358] [ 310.836688][T17358] dump_stack_lvl+0xf2/0x150 [ 310.841304][T17358] dump_stack+0x15/0x1a [ 310.845539][T17358] dump_header+0x83/0x2d0 [ 310.849999][T17358] oom_kill_process+0x341/0x4c0 [ 310.854884][T17358] out_of_memory+0x9af/0xbe0 [ 310.859506][T17358] ? css_next_descendant_pre+0x11c/0x140 [ 310.865163][T17358] mem_cgroup_out_of_memory+0x13e/0x190 [ 310.870733][T17358] try_charge_memcg+0x508/0x7f0 [ 310.875682][T17358] charge_memcg+0x50/0xc0 [ 310.880038][T17358] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 310.886031][T17358] __read_swap_cache_async+0x236/0x480 [ 310.891523][T17358] swap_cluster_readahead+0x279/0x3f0 [ 310.897023][T17358] swapin_readahead+0xe4/0x6f0 [ 310.901799][T17358] ? __rcu_read_unlock+0x34/0x70 [ 310.906818][T17358] ? swap_cache_get_folio+0x77/0x210 [ 310.912166][T17358] do_swap_page+0x31b/0x2550 [ 310.916807][T17358] ? __rcu_read_lock+0x36/0x50 [ 310.921664][T17358] ? __pfx_default_wake_function+0x10/0x10 [ 310.927522][T17358] handle_mm_fault+0x8e4/0x2ac0 [ 310.932392][T17358] exc_page_fault+0x3b9/0x650 [ 310.937102][T17358] asm_exc_page_fault+0x26/0x30 [ 310.942033][T17358] RIP: 0033:0x7efdb68bcb1c [ 310.946468][T17358] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 310.966083][T17358] RSP: 002b:00007ffe57c1efb0 EFLAGS: 00010283 [ 310.972165][T17358] RAX: 0000000000000000 RBX: 00007efdb6bd6080 RCX: 0000000000000000 [ 310.980206][T17358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555851e3808 [ 310.988179][T17358] RBP: 00007efdb6bd7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 310.996151][T17358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000047ba5 [ 311.004125][T17358] R13: 00007ffe57c1f0b0 R14: 0000000000000032 R15: ffffffffffffffff [ 311.012179][T17358] [ 311.015374][T17358] memory: usage 307200kB, limit 307200kB, failcnt 606 [ 311.022293][T17358] memory+swap: usage 308248kB, limit 9007199254740988kB, failcnt 0 [ 311.025487][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.030243][T17358] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 311.051933][T17358] Memory cgroup stats for /syz0: [ 311.073575][T17358] cache 0 [ 311.081578][T17358] rss 0 [ 311.084358][T17358] shmem 0 [ 311.087399][T17358] mapped_file 0 [ 311.090894][T17358] dirty 0 [ 311.093835][T17358] writeback 0 [ 311.097211][T17358] workingset_refault_anon 1147 [ 311.102012][T17358] workingset_refault_file 896 [ 311.106739][T17358] swap 1073152 [ 311.110130][T17358] swapcached 8192 [ 311.113764][T17358] pgpgin 336570 [ 311.117233][T17358] pgpgout 336568 [ 311.120840][T17358] pgfault 372586 [ 311.124421][T17358] pgmajfault 311 [ 311.127957][T17358] inactive_anon 8192 [ 311.131864][T17358] active_anon 0 [ 311.135311][T17358] inactive_file 0 [ 311.138936][T17358] active_file 0 [ 311.142447][T17358] unevictable 0 [ 311.145909][T17358] hierarchical_memory_limit 314572800 [ 311.151300][T17358] hierarchical_memsw_limit 9223372036854771712 [ 311.157515][T17358] total_cache 0 [ 311.160961][T17358] total_rss 0 [ 311.164337][T17358] total_shmem 0 [ 311.167785][T17358] total_mapped_file 0 [ 311.171755][T17358] total_dirty 0 [ 311.175264][T17358] total_writeback 0 [ 311.179208][T17358] total_workingset_refault_anon 1147 [ 311.184499][T17358] total_workingset_refault_file 896 [ 311.189736][T17358] total_swap 1073152 [ 311.193621][T17358] total_swapcached 8192 [ 311.197788][T17358] total_pgpgin 336570 [ 311.201775][T17358] total_pgpgout 336568 [ 311.205908][T17358] total_pgfault 372586 [ 311.209961][T17358] total_pgmajfault 311 [ 311.214109][T17358] total_inactive_anon 8192 [ 311.218549][T17358] total_active_anon 0 [ 311.222533][T17358] total_inactive_file 0 [ 311.226701][T17358] total_active_file 0 [ 311.230670][T17358] total_unevictable 0 [ 311.234693][T17358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.755,pid=5424,uid=0 [ 311.249364][T17358] Memory cgroup out of memory: Killed process 5424 (syz.0.755) total-vm:93384kB, anon-rss:832kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 311.359006][T17358] syz.0.4234 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 311.369955][T17358] CPU: 0 UID: 0 PID: 17358 Comm: syz.0.4234 Tainted: G W 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 311.382221][T17358] Tainted: [W]=WARN [ 311.386031][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.396102][T17358] Call Trace: [ 311.399401][T17358] [ 311.402365][T17358] dump_stack_lvl+0xf2/0x150 [ 311.407046][T17358] dump_stack+0x15/0x1a [ 311.411284][T17358] dump_header+0x83/0x2d0 [ 311.415654][T17358] oom_kill_process+0x341/0x4c0 [ 311.420597][T17358] out_of_memory+0x9af/0xbe0 [ 311.425233][T17358] ? css_next_descendant_pre+0x11c/0x140 [ 311.430878][T17358] mem_cgroup_out_of_memory+0x13e/0x190 [ 311.436449][T17358] try_charge_memcg+0x508/0x7f0 [ 311.441302][T17358] charge_memcg+0x50/0xc0 [ 311.445752][T17358] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 311.451735][T17358] __read_swap_cache_async+0x236/0x480 [ 311.457260][T17358] swap_cluster_readahead+0x279/0x3f0 [ 311.462635][T17358] swapin_readahead+0xe4/0x6f0 [ 311.467399][T17358] ? __rcu_read_unlock+0x34/0x70 [ 311.472431][T17358] ? swap_cache_get_folio+0x77/0x210 [ 311.477834][T17358] do_swap_page+0x31b/0x2550 [ 311.482450][T17358] ? __rcu_read_lock+0x36/0x50 [ 311.487259][T17358] ? __pfx_default_wake_function+0x10/0x10 [ 311.493065][T17358] handle_mm_fault+0x8e4/0x2ac0 [ 311.497925][T17358] exc_page_fault+0x3b9/0x650 [ 311.502685][T17358] asm_exc_page_fault+0x26/0x30 [ 311.507557][T17358] RIP: 0033:0x7efdb68bcb1c [ 311.511964][T17358] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 311.531596][T17358] RSP: 002b:00007ffe57c1efb0 EFLAGS: 00010283 [ 311.537698][T17358] RAX: 0000000000000000 RBX: 00007efdb6bd6080 RCX: 0000000000000000 [ 311.545673][T17358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555851e3808 [ 311.553688][T17358] RBP: 00007efdb6bd7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 311.561658][T17358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000047ba5 [ 311.569646][T17358] R13: 00007ffe57c1f0b0 R14: 0000000000000032 R15: ffffffffffffffff [ 311.578178][T17358] [ 311.581402][T17358] memory: usage 307200kB, limit 307200kB, failcnt 830 [ 311.588459][T17358] memory+swap: usage 308088kB, limit 9007199254740988kB, failcnt 0 [ 311.596496][T17358] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 311.603825][T17358] Memory cgroup stats for /syz0: [ 311.603857][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.613974][T17358] cache 0 [ 311.626074][T17358] rss 0 [ 311.629048][T17358] shmem 0 [ 311.632193][T17358] mapped_file 0 [ 311.635665][T17358] dirty 0 [ 311.638609][T17358] writeback 0 [ 311.641997][T17358] workingset_refault_anon 1150 [ 311.642235][T17086] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.646881][T17358] workingset_refault_file 899 [ 311.659769][T17358] swap 909312 [ 311.663065][T17358] swapcached 8192 [ 311.666735][T17358] pgpgin 336576 [ 311.670205][T17358] pgpgout 336574 [ 311.670415][T17086] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.673771][T17358] pgfault 372590 [ 311.685535][T17358] pgmajfault 314 [ 311.687458][T17086] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.689103][T17358] inactive_anon 8192 [ 311.701156][T17358] active_anon 0 [ 311.701410][T17086] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.704755][T17358] inactive_file 0 [ 311.716459][T17358] active_file 0 [ 311.720105][T17358] unevictable 0 [ 311.723610][T17358] hierarchical_memory_limit 314572800 [ 311.729068][T17358] hierarchical_memsw_limit 9223372036854771712 [ 311.735233][T17358] total_cache 0 [ 311.738743][T17358] total_rss 0 [ 311.742068][T17358] total_shmem 0 [ 311.745604][T17358] total_mapped_file 0 [ 311.749664][T17358] total_dirty 0 [ 311.753182][T17358] total_writeback 0 [ 311.757197][T17358] total_workingset_refault_anon 1150 [ 311.762546][T17358] total_workingset_refault_file 899 [ 311.767747][T17358] total_swap 909312 [ 311.771883][T17358] total_swapcached 8192 [ 311.776255][T17358] total_pgpgin 336576 [ 311.780284][T17358] total_pgpgout 336574 [ 311.784386][T17358] total_pgfault 372590 [ 311.788527][T17358] total_pgmajfault 314 [ 311.792649][T17358] total_inactive_anon 8192 [ 311.797069][T17358] total_active_anon 0 [ 311.801099][T17358] total_inactive_file 0 [ 311.805329][T17358] total_active_file 0 [ 311.809443][T17358] total_unevictable 0 [ 311.813538][T17358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4234,pid=17358,uid=0 [ 311.828360][T17358] Memory cgroup out of memory: Killed process 17358 (syz.0.4234) total-vm:93384kB, anon-rss:788kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 311.950437][T17429] syz.2.4268[17429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.950576][T17429] syz.2.4268[17429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.978131][T17429] syz.2.4268[17429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.076301][T17434] validate_nla: 1 callbacks suppressed [ 312.076318][T17434] netlink: 'syz.4.4270': attribute type 3 has an invalid length. [ 312.101095][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 312.173993][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.374246][T17481] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 312.733351][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.770815][T17530] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 312.777031][T17532] netlink: 'syz.3.4314': attribute type 3 has an invalid length. [ 312.779352][T17530] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 312.832699][T17539] netlink: 'syz.0.4318': attribute type 3 has an invalid length. [ 312.863422][T17541] lo speed is unknown, defaulting to 1000 [ 312.902560][T17541] sit0 speed is unknown, defaulting to 1000 [ 312.951343][T17541] lo speed is unknown, defaulting to 1000 [ 312.963297][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 312.963315][ T29] audit: type=1400 audit(295.776:271729): avc: denied { bind } for pid=17550 comm="syz.6.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.152723][ T29] audit: type=1400 audit(295.944:271730): avc: denied { create } for pid=17571 comm="syz.3.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.172084][ T29] audit: type=1400 audit(295.954:271731): avc: denied { setopt } for pid=17571 comm="syz.3.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.191299][ T29] audit: type=1400 audit(295.954:271732): avc: denied { write } for pid=17571 comm="syz.3.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.267924][ T29] audit: type=1400 audit(295.954:271733): avc: denied { setopt } for pid=17571 comm="syz.3.4334" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.295019][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 313.297235][T17578] syz.4.4337: attempt to access beyond end of device [ 313.297235][T17578] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 313.344125][ T29] audit: type=1400 audit(296.131:271734): avc: denied { write } for pid=17580 comm="syz.0.4339" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.417698][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4341'. [ 313.469171][ T29] audit: type=1400 audit(296.234:271735): avc: denied { bind } for pid=17587 comm="syz.4.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.469723][T17586] ebtables: ebtables: counters copy to user failed while replacing table [ 313.545986][ T29] audit: type=1400 audit(296.318:271736): avc: denied { read } for pid=17591 comm="syz.6.4340" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 313.568911][ T29] audit: type=1400 audit(296.318:271737): avc: denied { open } for pid=17591 comm="syz.6.4340" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 313.592487][ T29] audit: type=1400 audit(296.318:271738): avc: denied { ioctl } for pid=17591 comm="syz.6.4340" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 313.845140][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.229632][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4363'. [ 314.401519][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.454156][T17656] atomic_op ffff88812a54a928 conn xmit_atomic 0000000000000000 [ 314.677709][T17682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4380'. [ 314.902556][T17710] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4399'. [ 314.957140][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.038494][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4402'. [ 315.101930][T17735] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 315.228629][T17755] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 315.321803][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4426'. [ 315.346017][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4422'. [ 315.513397][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.548197][T17800] netlink: 'syz.3.4439': attribute type 4 has an invalid length. [ 315.556031][T17800] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4439'. [ 315.604697][T17809] atomic_op ffff88812a54a528 conn xmit_atomic 0000000000000000 [ 315.675435][T17819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4448'. [ 315.753118][T17835] ================================================================== [ 315.761241][T17835] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 315.769361][T17835] [ 315.771703][T17835] write to 0xffff88812dd18ff4 of 4 bytes by task 17837 on cpu 1: [ 315.779447][T17835] rxrpc_input_call_event+0x8ef/0x12e0 [ 315.784926][T17835] rxrpc_io_thread+0x30e/0x1fb0 [ 315.789793][T17835] kthread+0x1d1/0x210 [ 315.793866][T17835] ret_from_fork+0x4b/0x60 [ 315.798297][T17835] ret_from_fork_asm+0x1a/0x30 [ 315.803067][T17835] [ 315.805386][T17835] read to 0xffff88812dd18ff4 of 4 bytes by task 17835 on cpu 0: [ 315.813015][T17835] rxrpc_send_data+0x889/0x1820 [ 315.817884][T17835] rxrpc_do_sendmsg+0xb92/0xc30 [ 315.822750][T17835] rxrpc_sendmsg+0x417/0x520 [ 315.827382][T17835] __sock_sendmsg+0x140/0x180 [ 315.832076][T17835] ____sys_sendmsg+0x312/0x410 [ 315.836846][T17835] __sys_sendmsg+0x19d/0x230 [ 315.841439][T17835] __x64_sys_sendmsg+0x46/0x50 [ 315.846210][T17835] x64_sys_call+0x2734/0x2dc0 [ 315.850889][T17835] do_syscall_64+0xc9/0x1c0 [ 315.855394][T17835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.861305][T17835] [ 315.863623][T17835] value changed: 0x00000001 -> 0x00000002 [ 315.869338][T17835] [ 315.871658][T17835] Reported by Kernel Concurrency Sanitizer on: [ 315.877828][T17835] CPU: 0 UID: 0 PID: 17835 Comm: syz.3.4454 Tainted: G W 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 315.890073][T17835] Tainted: [W]=WARN [ 315.893882][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.904201][T17835] ================================================================== [ 316.068793][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.635645][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 318.282082][ T11] net_ratelimit: 2 callbacks suppressed [ 318.282097][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 318.837687][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 319.394045][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 319.949570][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.505745][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.061632][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.617262][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.173514][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.729514][ T288] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.285585][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.851543][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 324.407864][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 324.963723][ T550] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.510340][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 325.510357][ T29] audit: type=1400 audit(307.515:271910): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=40222 daddr=10.128.0.136 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.541835][ T8407] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01