last executing test programs: 3.616852623s ago: executing program 3 (id=937): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x1, 0x882a}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}}, 0x0) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f00000001c0)="0c9fc2c3a5bec726e52db5c05f1942c54dace4efa63098317613bcc4c62f") r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfb, {0x24, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80000000, 0x4f, 0x0, 0x0, 0x1}, ["", ""]}, 0x3c}}, 0x40044) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40), 0x10) splice(r6, &(0x7f0000000980)=0x8, r0, &(0x7f00000009c0)=0x8, 0x7, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0xc0, r7, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xbe, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6b, 0x9, 0x0, 0x6ccf, 0x5, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x1, 0x16, 0x30, 0x1, 0x5, 0x18, 0x3, 0x4, 0x12, 0xf, 0x30, 0x12, 0x0, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x7, 0xc5, 0x7, 0x1f, 0x9d, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0xfff8, 0x0, 0x72, 0x1, 0x33, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff00, 0x61f, 0x74b3, 0x7f, 0x7, 0x0, 0x3, 0x401]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x6, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20008801) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000c80)=ANY=[@ANYBLOB="62870000", @ANYRES16=r8, @ANYBLOB="00c62bbd70f2fddbdfe90000000000000000000000000000f2ce724678db", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b9200003100000042d763742740f1e0dcbb25eb35df52f568e5df3f8a790a9de0c9e58957ab980a37583a822aabef593318f7adbc89d925665e61ce1f88314817621d9535f45ef3170fd246fcb8d18e636b9616b946c5773033e1ca6a09d7476bd6"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x4080041}, 0x1c048845) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_PID={0x8}]}, 0x64}}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000005200000002000000fcdbdf2500000000bbbfc173aeb4ae974d68124272cb7de41e913d2c46c58648cef0ae9461b1df2deb0f0b3d591e9a10f3bdbbc20d471ab1ce5e0000000000000008f1fc9e8c54ee3e3d5dfb636d9f55355fce381b63eed177362bcec90f68c96373c4900469e9c2af752dab8d296e09b2e89b2086ca807533fb57fa99dbf78cfec9ca0afbc2a2fcf34733437f78c2dd76442dcaedfc09e00456ef466f7291e7e93cfe5c29144fff28a84788ca66c6e09d02ae39fe243d22462994a5f62203a540c46c2005e7269667ddb89d366e3968ce60eae84afcbfb628eb3d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="d800000001090500000000000000000007000007080006400000000008000640800000010c0004800800014000000d1c08000340000000020800034000000dc40c0004800800014000001000080005400000000a08000340000004017c0002000c00028005000100210000000c000280050001003a0000002c0001801400030000000000000000000000ffffe0000001140004000000000000000000000000000000000006000340000000002c000181140003002001000000000000000000000000000114000400"/216], 0xd8}, 0x1, 0x0, 0x0, 0x891}, 0x200c4004) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x4000080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.4331772s ago: executing program 3 (id=938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000480)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcc0b}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x10}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}], 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000011c0)=[&(0x7f0000001180)='\x00'], &(0x7f0000001480)=[&(0x7f0000001200)='pedit\x00', &(0x7f0000001240)='kmem_cache_free\x00', &(0x7f0000001280)='GPL\x00', &(0x7f00000012c0)='[&)/\\@\x00', &(0x7f0000001340)='\x00', &(0x7f0000001380)='kfree\x00', &(0x7f00000013c0)='\x00', &(0x7f0000001400)='/dev/rfkill\x00', &(0x7f0000001440)='/dev/rfkill\x00']) io_setup(0x3, &(0x7f00000003c0)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a6850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) modify_ldt$write(0x1, 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.97373017s ago: executing program 0 (id=943): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000004000000ff0f0000070000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32, @ANYBLOB="d761d113a952fdf41e00000000391929331a37a6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00005e7692946088ff37f7f84c2800", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000000900010073797a30000000000900030073797a3100000000"], 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e000000000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0xfc, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_udp_int(r10, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r10, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 2.820090473s ago: executing program 1 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="080009800800010000000000"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB, @ANYBLOB="df048094bacfdb2604213e0ece398d9f7f5efd5966d0384cf2fc3087f4faa9a7bdf8a1e0da0acdfb456285bc1b7c51f70d36cccb728f6494e1c3bfb14c23a8b61d999f912569e4992bad90b2225e939420df96d7c8049e7b49246b61cede96cdfc0fe0ea568f3c70acbe9832519ab47acf", @ANYRESDEC=r6, @ANYRES16=0x0, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) listen(r2, 0x0) shutdown(r2, 0x0) r10 = syz_usbip_server_init(0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xe8, 0x6, 0xa2, 0x46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x20, 0x74c1, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x11, 0x9, 0x5, {{0xe, 0x4, 0x0, 0x30, 0x38, 0x65, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x35}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x52, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x7, 0xfa, [@local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x7f, 0x1, 0xf, 0x0, 0x4, @empty, @mcast2, 0x1, 0x7, 0x1ff, 0x766d}}) r17 = socket(0x2a, 0x2, 0x0) getsockname$packet(r17, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x488, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x458, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x4, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x6a9e, 0xffffffff, 0x4, 0x3a, 0x7, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x1, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x78, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x7, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x6, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x488}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0xb0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8891}, 0x48800) write$usbip_server(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000300"/48], 0x30) 2.799345145s ago: executing program 0 (id=945): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x45b, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r9 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) fadvise64(r9, 0x2, 0x8, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x3) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x1, 0x0) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',rans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c756e026d652c7472616e733d6664"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) 2.468924834s ago: executing program 3 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="00000000010095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x13}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_usbip_server_init(0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BLKIOOPT(r10, 0x1279, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") socket$unix(0x1, 0x2, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r12}, 0x10) 2.187479138s ago: executing program 1 (id=949): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, 0x0}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r4, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe73) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xfffffffc}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12032, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000002000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3f3, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaabbece65fbcee5586dd6456aeae03bd3a01fc000000000000000000000000000001fe80000000000000000000000000000c2e14000000000000007f657f5237107e79e08d369d2cc92f8741e599b3a903fc603f46483bb78b2d9c261fc5a093d37bd2842097134769670446bd072566131b8176d8fc569a6c1bf9c06e3813f2b274d2ad26b98e4f3e63f156025369302d8a822941558cba3c5a4af27eea7297654fc8df755f634d738897026525e78a87a70443ec7a7787847861072000000002060701000000010000000000030000000000000006000000000000000000000000040190780000000863a6378b00042f00fe8000000000000000000000000000aafe8800000000000000000000000000010000000000000000050200050000000016000088640000002f1f00000000000001080000000000000000000100c2040000078801030000000401e9071000000003020500000600000000000000e2cddbf59d38782906aa1249927bf0854da072d136e7de052383f8014806a6891f6326ea4fbce76f40e5cba8c90014db54843d4568a54f2154e518665b9fa0cf3b8cb52c055922b1145db6678e918a9887f6ee671a010df2a34d541f86a11438ecf0cb0a9b5c2c1c6c671dce4df7144e02e39b3a990cceac64d8be490219d0722a561122bad547fa360f2489838977b9fb00ef7e9ffc956623323006026786d6aa570249553b52798f9b37e28de85aebb49802e8b953fba874e485b6de14e6df3023ac40f6a8594a077c887824771a00000000080a04050c10030000000000000000000000ffffac1414bbfc020000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fe80000000000000000000000000001000000190640000002b10020600000000fe88000000000000000000000000010100000000000000000000000000000000fc000000000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000001fc010000000000000000000000000000fe8000000000000000000000000000aafe800000000000000000000000000004000000000000000000000000000000000000000000000001ff0200000000000000000000000000013314040ac8200900fe88000000000000000000000000000100000000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aafe88000000000000000000000000010100000000000000000000000000000001ff02000000000000000000000000000100000000000000000000ffff00000000fe8800000000000000000000000000010000000000000000000000000000000159aad2f828986bb6949dbe004815f8b844f98db5234531f708e427d9eddfc454c6b5c6d88ec8c18dd5c741ba97437ff5a7b52db6f656972077be2546358e1f96c46bc5f586bc28326492309942103cf3d18804279afaf165427477c84961c9"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 1.999515375s ago: executing program 2 (id=953): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x10, 0x2, 0xb, 0x0, 0x3, 0x469c3eca66b4f47f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4}, 0x8, 0x1000, 0x1, 0x1d, 0x8000000000000000, 0x6, 0xbf6b, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x600000000000000}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={0x0}) capset(&(0x7f0000000080), &(0x7f0000000040)={0x2, 0x3}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080), 0x1f) flistxattr(r5, 0x0, 0x0) 1.998656865s ago: executing program 2 (id=954): writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000140)='./cgroup/syz0\x00', 0xe) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x10e}, {0x18, 0x0, 0xe, "bb"}], 0x28}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e750", 0xb4}, {&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {0x0}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0", 0x71}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc44341ebc815cb2ea20165cd3a67d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0a268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35}, {0x20}, {0x6}]}) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x20470}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1.82193886s ago: executing program 4 (id=955): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x51, 0x0, 0x3, 0x3, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0xe0000}}) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@newtclass={0x2c, 0x28, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xf}, {0xffe0, 0xb}, {0xf, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002041}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.82081208s ago: executing program 0 (id=966): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="500000000000000029000000360000005e06000000000000c910fe0000aa00010000010007100000000302030700ff00000000000000050200040401fdc2040000000800140000"], 0x68}}], 0x1, 0x44004000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df7bbf3ce816"}}, 0x48}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000081"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r4, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) read$char_usb(r2, &(0x7f0000000140)=""/189, 0xfffffecd) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x14120, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) bind$inet(r8, 0x0, 0x0) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x4, 0x78, 0x64, 0x0, 0x2f, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x19, [@remote, @local, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xd, 0x0, 0x2, [0x9, 0x9, 0x1000, 0x7f, 0x64c5, 0x6, 0xb, 0x7f]}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x1, [{@loopback, 0x94000000}, {@loopback, 0x9}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x3, 0xa5}]}}, @address_reply={0x12, 0x0, 0x0, 0x21}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000810c01001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000) 1.802842822s ago: executing program 3 (id=956): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x10000000}}, [{}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x80000000, 0x10}, {}, {}, {}, {0x80000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x3}, {}, {0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc}, {}, {}, {0x7fff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x10, 0xffffffff}, {0x6}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x8000}], [{}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000047000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000016b7000000000000009500000000001000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0xb79, 0x0, {0x0, 0x1}, {0x3a, 0x1}, @cond=[{0x6, 0x0, 0x6, 0x47bd, 0x0, 0x200}, {0x6, 0x6ad, 0x8, 0x7, 0xb8, 0x8000}]}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000140)=""/183) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8eeb01001800000080dc25005679bf307805532bc0000000000c0000000c00000002000000000000"], 0x0, 0x26, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x324) 1.691961062s ago: executing program 4 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', r2, 0x29, 0x0, 0x7, 0x2, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x0, 0x20, 0x1, 0xa88b}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0xfb, 0x0, &(0x7f00000002c0)=""/251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r7, @ANYRES16=r6, @ANYBLOB='d'], 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000080)={0x21}) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@minixdf}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x7, 0x17, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}, @in={0x2, 0x0, @loopback}}]}, 0x48}}, 0x0) 1.679875863s ago: executing program 0 (id=959): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRESHEX=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x4, 0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000a80)={0x10, 0x17, 0x3, {0x7, './file0'}}, 0x10) r6 = dup3(r5, r3, 0x0) r7 = socket(0x23, 0x803, 0xd) r8 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800) r9 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x7}, 0x8) r10 = dup(r9) bind$unix(r10, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendfile(r6, r4, 0x0, 0x800008038) sendfile(r3, r4, 0x0, 0xef84) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = io_uring_setup(0x63d6, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r11, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, &(0x7f00000001c0), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) 1.574225612s ago: executing program 3 (id=960): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114d000000000085100000027c0ee4b92ace27d10a7c50fb1a000000850000004000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x8, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000110000000c00098008000100176700004b8c7617591ba24c28b4d7ae1c0b163703355df74ce3ee9e6b7bd0580176640e01209a8bdb223152775118741872e57416ed2eb8d61a136dd58ce908cbc6128cf8d93576f17af5371dcff22c3fac4f14d13214af209d285be8f8ba23e4a4f8908e47c846c31036cd9fd0a8a95870b34438c1742a1871b791682d5b15e2ef6e25cf89af386b94a6a2f1c6c460"], 0x20}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000680)={{}, {0xe}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_setup(0x15ae, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x40, 0x70}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000003000000", 0x30) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(r0, 0x801, 0x42, &(0x7f0000000580)="1800000009000000", 0x8) 1.514247378s ago: executing program 4 (id=961): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2005000000000000000000000000000000000000fbe88f556b09c7aebe29df0e8b9db36d247d18fa1c940b0ce14acb3da876", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100050000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="719e000016"]) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff00004485"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000090001007379dddc34abb3bdb9ed0000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) splice(r10, &(0x7f0000000080)=0xfffffffffffeffff, r8, &(0x7f0000000140)=0x4, 0x1a12, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) 1.453972453s ago: executing program 4 (id=962): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x10, 0x2, 0xb, 0x0, 0x3, 0x469c3eca66b4f47f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4}, 0x8, 0x1000, 0x1, 0x1d, 0x8000000000000000, 0x6, 0xbf6b, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x9, &(0x7f00000003c0)=[{0x4, 0x6, 0x1d, 0x5}, {0x1, 0x7, 0x6}, {0x6, 0x40, 0x2, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x0, 0x1, 0x0, 0x124}, {0x0, 0x1, 0xe5, 0xfffffbff}, {0x6, 0xc, 0x10, 0x8}, {0x0, 0x67, 0x5, 0x8}, {0xffff, 0x9, 0x0, 0xf}]}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x0, 0x1, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x60}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x6dd4}]}}]}, 0x88}, 0x1, 0x600000000000000}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/243, 0xf3}) capset(&(0x7f0000000080), &(0x7f0000000040)={0x2, 0x3}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004000000000000011001801000020696c2500000000002020207b1a00ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080), 0x1f) flistxattr(r5, 0x0, 0x0) 1.394299978s ago: executing program 4 (id=963): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f00000001c0)={[{@nombcache}, {@usrjquota}, {@discard}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000001140)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@acquire={0x13c, 0x17, 0x1, 0x0, 0xffffffff, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}}, @in6=@private1, {@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1}}, 0x0, 0x0, 0xfffffffd}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x13c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1}, {0x4}, {0x6}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00'/20, @ANYRES32=r3, @ANYBLOB="00000001000006004e2400000a000200bbbbbbbbbbbb0000"], 0xfffffffffffffe58}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_clone3(&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x13) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$nl_route(0x10, 0x3, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.333697383s ago: executing program 1 (id=964): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x10, 0x2, 0xb, 0x0, 0x3, 0x469c3eca66b4f47f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4}, 0x8, 0x1000, 0x1, 0x1d, 0x8000000000000000, 0x6, 0xbf6b, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x9, &(0x7f00000003c0)=[{0x4, 0x6, 0x1d, 0x5}, {0x1, 0x7, 0x6}, {0x6, 0x40, 0x2, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x0, 0x1, 0x0, 0x124}, {0x0, 0x1, 0xe5, 0xfffffbff}, {0x6, 0xc, 0x10, 0x8}, {0x0, 0x67, 0x5, 0x8}, {0xffff, 0x9, 0x0, 0xf}]}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x0, 0x1, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x60}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x6dd4}]}}]}, 0x88}, 0x1, 0x600000000000000}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/243, 0xf3}) capset(&(0x7f0000000080), &(0x7f0000000040)={0x2, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004000000000000011001801000020696c2500000000002020207b1a00ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080), 0x1f) flistxattr(r5, 0x0, 0x0) 1.300473106s ago: executing program 1 (id=965): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x56}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x136, 0x0) 1.267678169s ago: executing program 1 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="080009800800010000000000"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB, @ANYBLOB="df048094bacfdb2604213e0ece398d9f7f5efd5966d0384cf2fc3087f4faa9a7bdf8a1e0da0acdfb456285bc1b7c51f70d36cccb728f6494e1c3bfb14c23a8b61d999f912569e4992bad90b2225e939420df96d7c8049e7b49246b61cede96cdfc0fe0ea568f3c70acbe9832519ab47acf", @ANYRESDEC=r6, @ANYRES16=0x0, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) listen(r2, 0x0) shutdown(r2, 0x0) r10 = syz_usbip_server_init(0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x11, 0x9, 0x5, {{0xe, 0x4, 0x0, 0x30, 0x38, 0x65, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x35}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x52, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x7, 0xfa, [@local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x7f, 0x1, 0xf, 0x0, 0x4, @empty, @mcast2, 0x1, 0x7, 0x1ff, 0x766d}}) r17 = socket(0x2a, 0x2, 0x0) getsockname$packet(r17, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x488, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x458, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x4, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x6a9e, 0xffffffff, 0x4, 0x3a, 0x7, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x1, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x78, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x7, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x6, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x488}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x134, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8891}, 0x48800) write$usbip_server(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000300"/48], 0x30) 829.534018ms ago: executing program 0 (id=968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6810, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x202, 0x9, 0x0, 0x7, 0x0, 0xef9c, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bf", @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6e3b}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001440)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000004c0)={0xbe80b200, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f00000003c0)=""/161, 0xfffffffffffffd23, 0x0, 0x0}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', '', [], 0xa, "966e13109f8ea7c80509b7b21ce85b078b539a8df73e1d14658bd361240929dfa6493c4a0f023674da8237c0865bddc060ad269c6d541bba5359c9bba8ad3b8bd472f79d5603dbcf1c1b883dd75f7484ff82bb586bfcabbed02bc4907dad5698a5adccb95fc081040b116b724992d9c850387240a1922677d13171d1"}, 0xffffffc9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xe3, "428251231011a2b4901334af5af42039cb4ec7033cb206c347325a8b914559b75b163ba27e387e015257a813754d78a517eba9b7cf06a1fdeec11425d8ea959ef2167bb0ad3730e705100144ab541cac64fb028145e17c673d288b58339446d5ad628f141a2295fe30b5c615c94049b3c994fcaa48efada44c61090d9f84cb7d35078d3e1c2285e03d6af0ed7e8e484a10b844c09721bf3b8ae1dab9fcc880f6fb3a64e9aa0b305780c2ad6390119c4f9afa0ef5d0b8c7981d149983b9aa621efef522c3667cf00dccf4dd559f434df4325e695b8c14f738789939000883c9a379af64"}, &(0x7f0000000240)=0xeb) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r5, 0x10001, 0x1}, &(0x7f0000000540)=0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) 828.802257ms ago: executing program 2 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="00000000010095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x13}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_usbip_server_init(0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BLKIOOPT(r10, 0x1279, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") socket$unix(0x1, 0x2, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r12}, 0x10) 692.817679ms ago: executing program 3 (id=970): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x6, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='thermal_power_allocator\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1ffb}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r1, 0x2a, 0x2000, 0x0, @value}, 0x20) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x40088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1024f6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/17, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x2000400) r5 = fsmount(r2, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000040)=@v2, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffd, 0x14, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 616.042636ms ago: executing program 1 (id=971): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x400000030}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r9}, 0x10) r10 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r10, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 548.322632ms ago: executing program 0 (id=972): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffc01, 0x800}, 0x0, 0x4, 0x4, 0x5, 0x0, 0x2, 0xffbb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x0, 0x190, 0xc0, 0xffffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, 0xff000000, 0xff000000, 'syzkaller1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x4, 0x0, 0xbc5c6e8455f233f1, 0x1], 0x1, 0x4}, {0x4, [0x0, 0x6, 0x7, 0x0, 0x4, 0x3], 0x2}}}}, {{@ip={@loopback, @empty, 0xff, 0xff000000, 'geneve1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x2, 0x82}, 0x0, 0x10a0, 0x11c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8039, {0x2}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:wireless_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {r1, 0xd}}, 0xfffffee1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1081000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x20006, 0x0, 0x19, 0x14, "5f722b55c6c3ded638f80ac6cbddceec66b86b99cb0354fe511efbba02462824ee2852a5f5c5f2525733de6fbccb41ad5da9a3b739baf75412265cf5b26bf197", "b7ec4732b4f4a9e4a9b4cada263dfb17c20ea0a5144af540674ffd3f9228dc0d", [0x0, 0x4]}) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) getpid() ftruncate(0xffffffffffffffff, 0x80000) io_setup(0x5, &(0x7f0000000e80)) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) write$RDMA_USER_CM_CMD_NOTIFY(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa3, 0xa3, 0xc, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x4}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x73, 0x4}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @datasec={0x7, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x7f, 0x2}, {0x5, 0x3ff, 0x7}, {0x4, 0x0, 0x3ff}, {0x2, 0x5}], "2a89e5"}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}]}, {0x0, [0x0, 0x61, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f0000000180)=""/142, 0xc8, 0x8e, 0x0, 0x6, 0x0, @void, @value}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x1, 0x3, 0x3, 0x80, r7, 0x9, '\x00', r9, r8, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 545.396872ms ago: executing program 4 (id=973): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="020000007b000000004800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r4}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="228c7db44cf2069b0016c3d45c117e182d7f5a"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000011143dcf00000000000000000800"], 0x28}}, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pread64(r5, &(0x7f00000003c0)=""/180, 0xb4, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x82, 0x2}, 0x0, 0x0, 0x3, 0x9c84, 0x1, 0x0, 0x0, 0xfffc, 0x1b}) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) getsockopt$inet6_int(r11, 0x29, 0x18, 0x0, &(0x7f00000001c0)) write(r9, &(0x7f0000000200)='~', 0xf5) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="84010000100001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d96a41f000000000000000a0000000000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x3, 0xa, {{0xb, 0x4, 0x0, 0xf, 0x2c, 0x66, 0x0, 0xcf, 0x29, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0x17, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101]}]}}}}}) 207.148662ms ago: executing program 2 (id=974): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800181100004c9a8a9689177af438b8769ef0a2c873f71a3a193de64e1a1b22e123005db9412036b02846f3ee75916ff9ab4bf85b5c017505340bbf2154a8ee", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) creat(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800130000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000000bc0)=""/4082, 0xff2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, "7011"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x34020000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000e0a010200000000000000006f0000000959d69868c321ffa67dec49144ee700010073797a300000000014000000110042d1d8955246f7c4e9f8d001f0af03ddb2fd225a01515d3c6ec9201de8e554bef49f897d64dcea9e762f7b4e6d6a62ae8322c327a76096dbc86a800456a0babe0ec093b9fbdec2be957c76b73a27ab0540ae7171949308334a6515512dbb0054097f2d93"], 0x48}}, 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r14, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) 38.258786ms ago: executing program 2 (id=975): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x10, 0x2, 0xb, 0x0, 0x3, 0x469c3eca66b4f47f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4}, 0x8, 0x1000, 0x1, 0x1d, 0x8000000000000000, 0x6, 0xbf6b, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x9, &(0x7f00000003c0)=[{0x4, 0x6, 0x1d, 0x5}, {0x1, 0x7, 0x6}, {0x6, 0x40, 0x2, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x0, 0x1, 0x0, 0x124}, {0x0, 0x1, 0xe5, 0xfffffbff}, {0x6, 0xc, 0x10, 0x8}, {0x0, 0x67, 0x5, 0x8}, {0xffff, 0x9, 0x0, 0xf}]}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x0, 0x1, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x60}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x6dd4}]}}]}, 0x88}, 0x1, 0x600000000000000}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/243, 0xf3}) capset(&(0x7f0000000080), &(0x7f0000000040)={0x2, 0x3}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004000000000000011001801000020696c2500000000002020207b1a00ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080), 0x1f) flistxattr(r5, 0x0, 0x0) 0s ago: executing program 2 (id=976): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x10, 0x2, 0xb, 0x0, 0x3, 0x469c3eca66b4f47f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x4}, 0x8, 0x1000, 0x1, 0x1d, 0x8000000000000000, 0x6, 0xbf6b, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x9, &(0x7f00000003c0)=[{0x4, 0x6, 0x1d, 0x5}, {0x1, 0x7, 0x6}, {0x6, 0x40, 0x2, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x0, 0x1, 0x0, 0x124}, {0x0, 0x1, 0xe5, 0xfffffbff}, {0x6, 0xc, 0x10, 0x8}, {0x0, 0x67, 0x5, 0x8}, {0xffff, 0x9, 0x0, 0xf}]}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x0, 0x1, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_STATE, @CTA_PROTOINFO_SCTP_VTAG_REPLY, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x0, 0x3, 0x1, 0x0, 0x60}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x6dd4}]}}]}, 0x88}, 0x1, 0x600000000000000}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/243, 0xf3}) capset(&(0x7f0000000080), &(0x7f0000000040)={0x2, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004000000000000011001801000020696c2500000000002020207b1a00ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080), 0x1f) flistxattr(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): T6174] loop0: detected capacity change from 0 to 512 [ 73.724925][ T6174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.737803][ T6174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 73.746440][ T6174] System zones: 1-12 [ 73.752114][ T6177] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 73.761459][ T6174] EXT4-fs (loop0): 1 truncate cleaned up [ 73.768141][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.828752][ T6181] syzkaller0: entered allmulticast mode [ 73.841075][ T6181] syzkaller0 (unregistering): left allmulticast mode [ 73.883219][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.904178][ T6171] loop4: detected capacity change from 0 to 128 [ 73.908275][ T6195] loop0: detected capacity change from 0 to 128 [ 73.917411][ T6195] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.929990][ T6195] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.080339][ T6204] cgroup: Invalid name [ 74.558369][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 74.558382][ T29] audit: type=1326 audit(1726140277.859:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.598006][ T6214] program syz.3.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.609094][ T29] audit: type=1326 audit(1726140277.899:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.632440][ T29] audit: type=1326 audit(1726140277.899:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.655952][ T29] audit: type=1326 audit(1726140277.899:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.679297][ T29] audit: type=1326 audit(1726140277.899:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.702623][ T29] audit: type=1326 audit(1726140277.899:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.725970][ T29] audit: type=1326 audit(1726140277.899:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.749323][ T29] audit: type=1326 audit(1726140277.899:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.772658][ T29] audit: type=1326 audit(1726140277.899:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.796057][ T29] audit: type=1326 audit(1726140277.899:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 74.845070][ C0] net_ratelimit: 3 callbacks suppressed [ 74.845087][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 74.999561][ T6244] netlink: 'syz.0.333': attribute type 10 has an invalid length. [ 75.058098][ T6243] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 75.659430][ T6247] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 75.822323][ T6273] Cannot find set identified by id 0 to match [ 75.850466][ T6275] xt_cgroup: path and classid specified [ 75.884010][ T6277] block device autoloading is deprecated and will be removed. [ 75.891552][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 75.926672][ T6277] __nla_validate_parse: 6 callbacks suppressed [ 75.926685][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 75.965527][ T5069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.007784][ T6304] hub 9-0:1.0: USB hub found [ 76.012557][ T6304] hub 9-0:1.0: 8 ports detected [ 76.044131][ T6304] loop4: detected capacity change from 0 to 2048 [ 76.066882][ T6308] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 76.078804][ T6303] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 76.134810][ T5069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.270834][ T5069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.389389][ T5069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.521753][ T5069] bridge0: port 3(vlan0) entered disabled state [ 76.528971][ T5069] bridge_slave_1: left allmulticast mode [ 76.534638][ T5069] bridge_slave_1: left promiscuous mode [ 76.540480][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.548393][ T5069] bridge_slave_0: left allmulticast mode [ 76.554094][ T5069] bridge_slave_0: left promiscuous mode [ 76.560032][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.657893][ T5069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.668504][ T5069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.679087][ T5069] bond0 (unregistering): Released all slaves [ 76.721851][ T6314] chnl_net:caif_netlink_parms(): no params data found [ 76.776448][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.783626][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.792796][ T6314] bridge_slave_0: entered allmulticast mode [ 76.800271][ T6314] bridge_slave_0: entered promiscuous mode [ 76.817674][ T5069] hsr_slave_0: left promiscuous mode [ 76.823213][ T6495] random: crng reseeded on system resumption [ 76.831384][ T5069] hsr_slave_1: left promiscuous mode [ 76.870651][ T5069] veth1_macvtap: left promiscuous mode [ 76.876265][ T5069] veth0_macvtap: left promiscuous mode [ 76.881789][ T5069] veth1_vlan: left promiscuous mode [ 76.887241][ T5069] veth0_vlan: left allmulticast mode [ 76.892688][ T5069] veth0_vlan: left promiscuous mode [ 76.935094][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 77.003200][ T5069] team0 (unregistering): Port device team_slave_1 removed [ 77.015511][ T5069] team0 (unregistering): Port device team_slave_0 removed [ 77.055647][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062745][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.070652][ T6314] bridge_slave_1: entered allmulticast mode [ 77.078411][ T6314] bridge_slave_1: entered promiscuous mode [ 77.108516][ T6498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 77.117578][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 77.128418][ T6501] netlink: 'syz.4.351': attribute type 10 has an invalid length. [ 77.152500][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.163859][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.174307][ T6532] netlink: 116 bytes leftover after parsing attributes in process `syz.2.353'. [ 77.195777][ T6314] team0: Port device team_slave_0 added [ 77.202637][ T6314] team0: Port device team_slave_1 added [ 77.238348][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.245732][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.272062][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.283600][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.290592][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.316526][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.331046][ T6586] loop4: detected capacity change from 0 to 512 [ 77.342458][ T6586] ext4: Unknown parameter 'dont_hash' [ 77.362305][ T6586] loop4: detected capacity change from 0 to 2048 [ 77.381814][ T6314] hsr_slave_0: entered promiscuous mode [ 77.382613][ T6314] hsr_slave_1: entered promiscuous mode [ 77.426361][ T5069] IPVS: stop unused estimator thread 0... [ 77.561154][ T6700] team0: entered promiscuous mode [ 77.566447][ T6700] team_slave_0: entered promiscuous mode [ 77.572267][ T6700] team_slave_1: entered promiscuous mode [ 77.591676][ T6699] 9pnet_fd: Insufficient options for proto=fd [ 77.744588][ T6314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.755373][ T6314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.763992][ T6314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.772827][ T6314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.824578][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.842923][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.853632][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.860736][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.869933][ T6666] team0: left promiscuous mode [ 77.874815][ T6666] team_slave_0: left promiscuous mode [ 77.880376][ T6666] team_slave_1: left promiscuous mode [ 77.888582][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.895756][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.973900][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.975144][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 78.049393][ T6756] hub 9-0:1.0: USB hub found [ 78.054150][ T6756] hub 9-0:1.0: 8 ports detected [ 78.239983][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 78.248963][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 78.402274][ T6314] veth0_vlan: entered promiscuous mode [ 78.431840][ T6314] veth1_vlan: entered promiscuous mode [ 78.448047][ T6314] veth0_macvtap: entered promiscuous mode [ 78.455893][ T6314] veth1_macvtap: entered promiscuous mode [ 78.467562][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.478069][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.487999][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.498479][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.509276][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.520396][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.531029][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.540876][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.551353][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.562374][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.573165][ T6314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.581962][ T6314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.590687][ T6314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.599531][ T6314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.817749][ T6800] xt_TCPMSS: Only works on TCP SYN packets [ 78.826925][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 78.835872][ T6802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.368'. [ 78.847563][ T6802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.368'. [ 78.981369][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 79.001454][ T6795] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 79.015061][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 79.057475][ T6795] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 79.301554][ T6824] loop4: detected capacity change from 0 to 164 [ 79.318330][ T6824] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 79.329731][ T6824] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 79.413285][ T6836] block device autoloading is deprecated and will be removed. [ 79.430223][ T6834] loop4: detected capacity change from 0 to 8192 [ 79.541590][ T6854] loop4: detected capacity change from 0 to 256 [ 79.564652][ T6854] loop4: detected capacity change from 0 to 512 [ 79.572668][ T6854] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 79.640667][ T6858] hub 9-0:1.0: USB hub found [ 79.645453][ T6858] hub 9-0:1.0: 8 ports detected [ 79.709503][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 79.709523][ T29] audit: type=1400 audit(1726140282.979:4194): avc: denied { read write } for pid=5277 comm="syz-executor" name="loop3" dev="devtmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.738981][ T29] audit: type=1400 audit(1726140282.979:4195): avc: denied { open } for pid=5277 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.762379][ T29] audit: type=1400 audit(1726140283.009:4196): avc: denied { mount } for pid=6861 comm="syz.3.381" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.784367][ T29] audit: type=1400 audit(1726140283.019:4197): avc: denied { append } for pid=6861 comm="syz.3.381" name="mISDNtimer" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.807466][ T29] audit: type=1400 audit(1726140283.029:4198): avc: denied { unmount } for pid=5277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.855843][ T6854] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 79.872136][ T6854] @: (slave netdevsim1): Releasing backup interface [ 79.881735][ T6854] team0: Port device netdevsim1 added [ 79.894866][ T6854] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 79.916317][ T6854] team0: Port device netdevsim1 removed [ 79.926435][ T6854] @: (slave netdevsim1): Enslaving as an active interface with an up link [ 79.960582][ T6854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6854 comm=syz.4.380 [ 80.045126][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 80.058008][ T6871] loop4: detected capacity change from 0 to 128 [ 80.131621][ T29] audit: type=1400 audit(1726140283.429:4199): avc: denied { write } for pid=6863 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.151481][ T29] audit: type=1400 audit(1726140283.429:4200): avc: denied { mount } for pid=6863 comm="syz.3.382" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.225429][ T6843] delete_channel: no stack [ 80.357275][ T29] audit: type=1400 audit(1726140283.659:4201): avc: denied { create } for pid=6881 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.393525][ T29] audit: type=1400 audit(1726140283.679:4202): avc: denied { connect } for pid=6881 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.413200][ T29] audit: type=1400 audit(1726140283.679:4203): avc: denied { read } for pid=6881 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.844186][ T6912] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 80.911178][ T6925] syzkaller0: entered allmulticast mode [ 80.919726][ T6925] syzkaller0 (unregistering): left allmulticast mode [ 80.991465][ T6930] __nla_validate_parse: 5 callbacks suppressed [ 80.991482][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 81.085112][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.252873][ T6955] syz_tun: entered allmulticast mode [ 81.266369][ T6955] ALSA: seq fatal error: cannot create timer (-22) [ 81.321215][ T6951] syz_tun: left allmulticast mode [ 81.627941][ T6973] loop4: detected capacity change from 0 to 512 [ 81.634662][ T6973] ext4: Unknown parameter 'dont_hash' [ 81.657615][ T6973] loop4: detected capacity change from 0 to 2048 [ 81.709344][ T6982] loop4: detected capacity change from 0 to 128 [ 81.716445][ T6982] ext3: Unknown parameter 'uid' [ 81.750164][ T6989] bridge: RTM_NEWNEIGH with invalid ether address [ 81.758120][ T6982] syzkaller0: entered allmulticast mode [ 81.766036][ T6982] syzkaller0 (unregistering): left allmulticast mode [ 81.838766][ T6993] team0: entered promiscuous mode [ 81.843852][ T6993] team_slave_0: entered promiscuous mode [ 81.849784][ T6993] team_slave_1: entered promiscuous mode [ 82.058918][ T7008] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 82.113992][ T7015] loop4: detected capacity change from 0 to 128 [ 82.135147][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 82.167548][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 82.297732][ T7048] syz_tun: entered promiscuous mode [ 82.303928][ T7048] batadv_slave_0: entered promiscuous mode [ 82.435612][ T7064] netlink: 116 bytes leftover after parsing attributes in process `syz.3.414'. [ 82.441338][ T7060] syzkaller0: entered allmulticast mode [ 82.444796][ T7064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.414'. [ 82.461604][ T7060] syzkaller0 (unregistering): left allmulticast mode [ 82.462950][ T7064] tmpfs: Unknown parameter 'nrxinodes' [ 82.471216][ T7065] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 82.486073][ T7064] Invalid ELF header type: 3 != 1 [ 82.590672][ T6993] team0: left promiscuous mode [ 82.595708][ T6993] team_slave_0: left promiscuous mode [ 82.601247][ T6993] team_slave_1: left promiscuous mode [ 82.684194][ T7088] netlink: 116 bytes leftover after parsing attributes in process `syz.3.420'. [ 82.889672][ T7105] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 83.165107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 83.207095][ T7113] syz.1.436[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.207233][ T7113] syz.1.436[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.220082][ T7114] loop4: detected capacity change from 0 to 2048 [ 83.254145][ T7113] erspan0: entered promiscuous mode [ 83.261221][ T7113] erspan0: left promiscuous mode [ 83.279332][ T7114] Alternate GPT is invalid, using primary GPT. [ 83.285687][ T7114] loop4: p1 p2 p3 [ 83.301970][ T7123] lo speed is unknown, defaulting to 1000 [ 83.302388][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 83.324609][ T7123] lo speed is unknown, defaulting to 1000 [ 83.330744][ T7123] lo speed is unknown, defaulting to 1000 [ 83.338089][ T7123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.344526][ T7114] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 83.360435][ T7114] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 83.371723][ T7123] lo speed is unknown, defaulting to 1000 [ 83.378096][ T7123] lo speed is unknown, defaulting to 1000 [ 83.384165][ T7123] lo speed is unknown, defaulting to 1000 [ 83.390318][ T7123] lo speed is unknown, defaulting to 1000 [ 83.396687][ T7123] lo speed is unknown, defaulting to 1000 [ 83.397357][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 83.658746][ T7182] pim6reg9: entered allmulticast mode [ 83.691530][ T7192] netlink: 116 bytes leftover after parsing attributes in process `syz.3.433'. [ 83.754992][ T7196] hub 9-0:1.0: USB hub found [ 83.759809][ T7196] hub 9-0:1.0: 8 ports detected [ 84.080541][ T7206] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 84.088325][ T7206] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 84.096005][ T7206] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.434'. [ 84.215058][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 84.342738][ T7214] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 84.569141][ T7218] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 84.622541][ T7230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.629853][ T7230] IPv6: NLM_F_CREATE should be set when creating new route [ 84.638330][ T7230] netlink: 'syz.0.442': attribute type 27 has an invalid length. [ 84.665832][ T7231] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 84.729254][ T29] kauditd_printk_skb: 1177 callbacks suppressed [ 84.729270][ T29] audit: type=1400 audit(1726140288.029:5381): avc: denied { create } for pid=7229 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.757277][ T7230] sit0: left promiscuous mode [ 84.762013][ T7230] sit0: left allmulticast mode [ 84.769831][ T29] audit: type=1400 audit(1726140288.069:5382): avc: denied { create } for pid=7243 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.789507][ T29] audit: type=1400 audit(1726140288.069:5383): avc: denied { getopt } for pid=7243 comm="syz.4.443" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.809967][ T29] audit: type=1400 audit(1726140288.069:5384): avc: denied { listen } for pid=7229 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.829352][ T29] audit: type=1400 audit(1726140288.069:5385): avc: denied { create } for pid=7229 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.848894][ T29] audit: type=1400 audit(1726140288.089:5386): avc: denied { ioctl } for pid=7243 comm="syz.4.443" path="socket:[11821]" dev="sockfs" ino=11821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.897546][ T29] audit: type=1400 audit(1726140288.189:5387): avc: denied { listen } for pid=7243 comm="syz.4.443" lport=60243 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.920545][ T29] audit: type=1400 audit(1726140288.189:5388): avc: denied { accept } for pid=7243 comm="syz.4.443" lport=60243 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.943561][ T29] audit: type=1400 audit(1726140288.189:5389): avc: denied { write } for pid=7243 comm="syz.4.443" path="socket:[11829]" dev="sockfs" ino=11829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.967451][ T29] audit: type=1400 audit(1726140288.189:5390): avc: denied { setopt } for pid=7243 comm="syz.4.443" lport=60243 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.046002][ T7250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'. [ 85.245111][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 85.305350][ T7230] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.314423][ T7230] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.323530][ T7230] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.332627][ T7230] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.767926][ T7293] loop5: detected capacity change from 0 to 16385 [ 85.815213][ T7293] loop5: detected capacity change from 16385 to 16321 [ 85.851190][ T7295] netlink: 'syz.1.454': attribute type 5 has an invalid length. [ 85.967984][ T7310] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 86.013128][ T7312] __nla_validate_parse: 4 callbacks suppressed [ 86.013142][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 86.028895][ T7312] bridge_slave_1: left allmulticast mode [ 86.034564][ T7312] bridge_slave_1: left promiscuous mode [ 86.040302][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.048916][ T7312] bridge_slave_0: left allmulticast mode [ 86.054659][ T7312] bridge_slave_0: left promiscuous mode [ 86.060501][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.231863][ T7321] netlink: 116 bytes leftover after parsing attributes in process `syz.2.461'. [ 86.285088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 86.323116][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 86.333656][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 86.371126][ T7329] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 86.425148][ T7329] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 86.433894][ T7336] 9pnet_virtio: no channels available for device 127.0.0.1 [ 86.809280][ T7351] netlink: 116 bytes leftover after parsing attributes in process `syz.1.469'. [ 87.021560][ T7365] netlink: 'syz.4.468': attribute type 3 has an invalid length. [ 87.325266][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 87.452966][ T7380] lo speed is unknown, defaulting to 1000 [ 87.462177][ T7388] netlink: 116 bytes leftover after parsing attributes in process `syz.1.473'. [ 87.527781][ T7410] hsr_slave_0: left promiscuous mode [ 87.533639][ T7410] hsr_slave_1: left promiscuous mode [ 87.546872][ T7412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7412 comm=syz.3.476 [ 87.995623][ T7439] xt_CT: No such helper "pptp" [ 88.375108][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.422585][ T7442] lo speed is unknown, defaulting to 1000 [ 88.540638][ T7478] netlink: 116 bytes leftover after parsing attributes in process `syz.3.486'. [ 88.622236][ T7455] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 88.646469][ T7455] x_tables: ip_tables: osf match: only valid for protocol 6 [ 89.338420][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 89.382765][ T7521] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 89.403832][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 89.412790][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.557434][ T7540] netlink: 116 bytes leftover after parsing attributes in process `syz.0.500'. [ 89.719497][ T7553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.747684][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 89.747698][ T29] audit: type=1400 audit(1726140293.113:6040): avc: denied { create } for pid=7535 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 89.795814][ T29] audit: type=1400 audit(1726140293.143:6041): avc: denied { prog_load } for pid=7535 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.906688][ T29] audit: type=1400 audit(1726140293.273:6042): avc: denied { map_create } for pid=7535 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.944154][ T29] audit: type=1400 audit(1726140293.303:6043): avc: denied { mounton } for pid=7557 comm="syz.4.505" path="/106/file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 89.966754][ T29] audit: type=1400 audit(1726140293.303:6044): avc: denied { create } for pid=7557 comm="syz.4.505" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 89.988125][ T29] audit: type=1400 audit(1726140293.353:6045): avc: denied { prog_load } for pid=7535 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.007133][ T29] audit: type=1400 audit(1726140293.353:6046): avc: denied { prog_load } for pid=7557 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.029616][ T29] audit: type=1400 audit(1726140293.393:6047): avc: denied { bpf } for pid=7557 comm="syz.4.505" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 90.065980][ T29] audit: type=1400 audit(1726140293.393:6048): avc: denied { prog_load } for pid=7557 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.085077][ T29] audit: type=1400 audit(1726140293.393:6049): avc: denied { prog_load } for pid=7557 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.455065][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 91.438533][ T7600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7600 comm=syz.2.521 [ 91.485149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 91.531301][ T7604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.851909][ T7628] lo speed is unknown, defaulting to 1000 [ 92.525086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 93.520315][ T7744] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 93.528604][ T7744] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 93.565089][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 94.605107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 94.628955][ T7802] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 94.637509][ T7802] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 94.711808][ T7804] lo speed is unknown, defaulting to 1000 [ 94.756339][ T29] kauditd_printk_skb: 1286 callbacks suppressed [ 94.756355][ T29] audit: type=1400 audit(1726140298.123:7336): avc: denied { create } for pid=7803 comm="syz.3.581" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 94.809458][ T29] audit: type=1400 audit(1726140298.173:7337): avc: denied { read } for pid=7830 comm="syz.2.583" name="event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 94.832613][ T29] audit: type=1400 audit(1726140298.173:7338): avc: denied { map_create } for pid=7826 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.835030][ T29] audit: type=1400 audit(1726140298.173:7339): avc: denied { map_create } for pid=7830 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.872193][ T29] audit: type=1400 audit(1726140298.173:7340): avc: denied { prog_load } for pid=7830 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.872229][ T29] audit: type=1400 audit(1726140298.173:7341): avc: denied { prog_load } for pid=7830 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.872250][ T29] audit: type=1400 audit(1726140298.173:7342): avc: denied { mounton } for pid=7830 comm="syz.2.583" path="/120/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 94.872278][ T29] audit: type=1400 audit(1726140298.203:7343): avc: denied { prog_load } for pid=7826 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.872301][ T29] audit: type=1400 audit(1726140298.203:7344): avc: denied { create } for pid=7803 comm="syz.3.581" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 94.884398][ T29] audit: type=1400 audit(1726140298.223:7345): avc: denied { prog_load } for pid=7829 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.997094][ T7841] netlink: 'syz.3.591': attribute type 10 has an invalid length. [ 95.025222][ T7841] team0: Failed to send options change via netlink (err -105) [ 95.032798][ T7841] team0: Port device netdevsim1 added [ 95.047293][ T36] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 95.060387][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.3.591'. [ 95.107328][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 95.124121][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 95.193347][ T7859] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 95.252825][ T7851] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 95.272801][ T7868] 9pnet_virtio: no channels available for device 127.0.0.1 [ 95.287295][ T7846] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.329652][ T7846] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 95.391821][ T7849] lo speed is unknown, defaulting to 1000 [ 95.539815][ T7911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.544098][ T7906] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 95.557465][ T7906] dvmrp1: linktype set to 805 [ 95.640489][ T7914] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 95.648658][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 95.904030][ T7921] syz.4.602[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.904199][ T7921] syz.4.602[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.932537][ T7921] lo speed is unknown, defaulting to 1000 [ 96.424426][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 96.685126][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 97.265348][ T7978] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 97.294317][ T7978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.610'. [ 97.297535][ T7982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7982 comm=syz.1.612 [ 97.304678][ T7984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.356372][ T7980] pim6reg1: entered promiscuous mode [ 97.361794][ T7980] pim6reg1: entered allmulticast mode [ 97.471059][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 97.488196][ T7994] qrtr: Invalid version 139 [ 97.512023][ T8007] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.541634][ T8010] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 97.580723][ T8014] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 97.601962][ T8011] futex_wake_op: syz.1.619 tries to shift op by 32; fix this program [ 97.725066][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.223191][ T8022] xt_CT: No such helper "pptp" [ 98.490271][ T8034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.624'. [ 98.744892][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 98.757966][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 98.767547][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.928984][ T8044] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 98.944327][ T8044] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 98.967953][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 99.394220][ T8068] lo speed is unknown, defaulting to 1000 [ 99.496532][ T8052] 9pnet_fd: p9_fd_create_tcp (8052): problem connecting socket to 127.0.0.1 [ 99.805060][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.805131][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 99.805146][ T29] audit: type=1400 audit(1726140303.083:7928): avc: denied { ioctl } for pid=8093 comm="syz.3.632" path="socket:[13883]" dev="sockfs" ino=13883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.843021][ T29] audit: type=1400 audit(1726140303.123:7929): avc: denied { read } for pid=8093 comm="syz.3.632" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.867145][ T29] audit: type=1400 audit(1726140303.123:7930): avc: denied { open } for pid=8093 comm="syz.3.632" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.891729][ T29] audit: type=1400 audit(1726140303.123:7931): avc: denied { ioctl } for pid=8093 comm="syz.3.632" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.958116][ T29] audit: type=1326 audit(1726140303.323:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.1.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x0 [ 100.010768][ T8109] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.022663][ T8109] vhci_hcd: invalid port number 219 [ 100.027923][ T8109] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 100.046525][ T8109] futex_wake_op: syz.0.635 tries to shift op by 32; fix this program [ 100.054911][ T29] audit: type=1400 audit(1726140303.403:7933): avc: denied { bind } for pid=8108 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.090894][ T8112] __nla_validate_parse: 1 callbacks suppressed [ 100.090982][ T8112] netlink: 116 bytes leftover after parsing attributes in process `syz.4.636'. [ 100.097244][ T8113] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 100.161582][ T29] audit: type=1326 audit(1726140303.523:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8119 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dc8cdef9 code=0x7ffc0000 [ 100.185121][ T29] audit: type=1326 audit(1726140303.523:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8119 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dc8cdef9 code=0x7ffc0000 [ 100.208525][ T29] audit: type=1326 audit(1726140303.523:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8119 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54dc8cdef9 code=0x7ffc0000 [ 100.231922][ T29] audit: type=1326 audit(1726140303.523:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8119 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54dc8cdef9 code=0x7ffc0000 [ 100.257225][ T8116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.637'. [ 100.483359][ T8136] lo speed is unknown, defaulting to 1000 [ 100.552108][ T8136] xt_SECMARK: invalid security context 'unconfined' [ 100.557922][ T8133] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 100.650156][ T8171] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 100.668742][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 100.693952][ T8177] netlink: 116 bytes leftover after parsing attributes in process `syz.4.649'. [ 100.719415][ T8179] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 100.752116][ T8183] lo speed is unknown, defaulting to 1000 [ 100.855092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 101.063314][ T8224] 9pnet_fd: Insufficient options for proto=fd [ 101.457737][ T8241] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 101.582375][ T8231] lo speed is unknown, defaulting to 1000 [ 101.747867][ T8271] netlink: 116 bytes leftover after parsing attributes in process `syz.4.660'. [ 101.895052][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 101.948989][ T8274] netlink: 'syz.4.662': attribute type 21 has an invalid length. [ 101.956964][ T8274] netlink: 'syz.4.662': attribute type 15 has an invalid length. [ 101.964704][ T8274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.662'. [ 101.990519][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 102.099497][ T8280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8280 comm=syz.0.663 [ 102.112032][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 102.120973][ T8280] netlink: 'syz.0.663': attribute type 14 has an invalid length. [ 102.128739][ T8280] netlink: 'syz.0.663': attribute type 12 has an invalid length. [ 102.141356][ T8280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.150141][ T8280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.159037][ T8280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.167803][ T8280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.205362][ T8280] vxlan0: entered promiscuous mode [ 102.213853][ T3700] kernel write not supported for file /vcsa1 (pid: 3700 comm: kworker/0:4) [ 102.490041][ T8293] bond0: (slave bond_slave_0): Releasing backup interface [ 102.504287][ T8293] bond0: (slave bond_slave_1): Releasing backup interface [ 102.539433][ T8293] team0: Port device team_slave_0 removed [ 102.566787][ T8293] team0: Port device team_slave_1 removed [ 102.573794][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.581232][ T8293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.600759][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.608341][ T8293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.632043][ T8293] bond0: (slave netdevsim1): Releasing backup interface [ 102.684090][ T8294] team0: Port device wg2 added [ 102.925102][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 102.932813][ T8305] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 103.337269][ T8314] syz.0.678[8314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.452074][ T8322] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.755561][ T8342] netlink: 'syz.4.674': attribute type 10 has an invalid length. [ 103.975071][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.817075][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 104.817092][ T29] audit: type=1400 audit(1726140308.183:8559): avc: denied { create } for pid=8344 comm="syz.4.679" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.858221][ T8351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.878797][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.689'. [ 104.892296][ T29] audit: type=1326 audit(1726140308.253:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 104.915854][ T29] audit: type=1326 audit(1726140308.253:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 104.939187][ T29] audit: type=1326 audit(1726140308.253:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 104.962613][ T29] audit: type=1326 audit(1726140308.253:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 104.986058][ T29] audit: type=1326 audit(1726140308.253:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 105.009758][ T29] audit: type=1326 audit(1726140308.253:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 105.015071][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.033077][ T29] audit: type=1326 audit(1726140308.253:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 105.047619][ T8357] block device autoloading is deprecated and will be removed. [ 105.063305][ T29] audit: type=1326 audit(1726140308.253:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 105.063337][ T29] audit: type=1326 audit(1726140308.253:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b5a4def9 code=0x7ffc0000 [ 105.117346][ T8361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.158089][ T8348] lo speed is unknown, defaulting to 1000 [ 105.165993][ T8363] lo speed is unknown, defaulting to 1000 [ 105.198025][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'. [ 105.781393][ T8424] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 105.797136][ T8425] hub 9-0:1.0: USB hub found [ 105.801883][ T8425] hub 9-0:1.0: 8 ports detected [ 106.045053][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.250427][ T8439] siw: device registration error -23 [ 106.555744][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 106.572798][ T8454] @: renamed from bond0 (while UP) [ 106.594074][ T8454] lo speed is unknown, defaulting to 1000 [ 106.676642][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8481 comm=syz.4.696 [ 107.085068][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 107.111789][ T8489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.125090][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 108.456883][ T8523] netlink: 'syz.1.703': attribute type 21 has an invalid length. [ 108.464799][ T8523] netlink: 'syz.1.703': attribute type 15 has an invalid length. [ 108.472583][ T8523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.703'. [ 108.634994][ C0] sched: RT throttling activated [ 108.863863][ T8527] lo speed is unknown, defaulting to 1000 [ 108.953935][ T8563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.965531][ T8527] xt_SECMARK: invalid security context 'unconfined' [ 108.990450][ T8601] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 109.165066][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.393342][ T8625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.716'. [ 109.835180][ T8639] netlink: 116 bytes leftover after parsing attributes in process `syz.1.720'. [ 109.899940][ T8641] lo speed is unknown, defaulting to 1000 [ 109.912318][ T8636] netlink: 120 bytes leftover after parsing attributes in process `syz.4.718'. [ 109.930443][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 109.930458][ T29] audit: type=1400 audit(1726140313.293:8764): avc: denied { append } for pid=8646 comm="syz.1.722" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.987985][ T8656] xt_SECMARK: invalid security context 'unconfined' [ 110.034713][ T8673] siw: device registration error -23 [ 110.156398][ T8687] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.163859][ T29] audit: type=1400 audit(1726140313.523:8765): avc: denied { setopt } for pid=8684 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.205086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 110.218453][ T29] audit: type=1326 audit(1726140313.583:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.249743][ T29] audit: type=1326 audit(1726140313.613:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.273155][ T29] audit: type=1326 audit(1726140313.613:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.296506][ T29] audit: type=1326 audit(1726140313.613:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.319970][ T29] audit: type=1326 audit(1726140313.613:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.343302][ T29] audit: type=1326 audit(1726140313.613:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.347027][ T8692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.366875][ T29] audit: type=1326 audit(1726140313.613:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.399842][ T29] audit: type=1326 audit(1726140313.613:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce8ddef9 code=0x7ffc0000 [ 110.471887][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 110.571951][ T8701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=8701 comm=syz.4.736 [ 110.616846][ T8703] netlink: 'syz.3.728': attribute type 21 has an invalid length. [ 110.624609][ T8703] netlink: 'syz.3.728': attribute type 15 has an invalid length. [ 110.632389][ T8703] netlink: 156 bytes leftover after parsing attributes in process `syz.3.728'. [ 110.672005][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 110.680986][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 110.734266][ T8712] netlink: 52 bytes leftover after parsing attributes in process `syz.4.730'. [ 110.788850][ T8717] netlink: 116 bytes leftover after parsing attributes in process `syz.1.732'. [ 110.943549][ T8722] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 111.224548][ T8728] lo speed is unknown, defaulting to 1000 [ 111.255059][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 111.553030][ T8728] warn_alloc: 1 callbacks suppressed [ 111.553051][ T8728] syz.2.734: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 111.573275][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.2.734 Not tainted 6.11.0-rc7-syzkaller-00039-g77f587896757 #0 [ 111.583933][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.594022][ T8728] Call Trace: [ 111.597298][ T8728] [ 111.600235][ T8728] dump_stack_lvl+0xf2/0x150 [ 111.604865][ T8728] dump_stack+0x15/0x20 [ 111.609082][ T8728] warn_alloc+0x145/0x1b0 [ 111.613448][ T8728] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 111.619488][ T8728] ? reweight_entity+0x28/0x360 [ 111.624342][ T8728] __vmalloc_node_range_noprof+0xaa/0xec0 [ 111.630075][ T8728] ? ttwu_do_activate+0x1c7/0x200 [ 111.635143][ T8728] ? __rcu_read_unlock+0x4e/0x70 [ 111.640086][ T8728] ? avc_has_perm_noaudit+0x1cc/0x210 [ 111.645470][ T8728] ? xskq_create+0x36/0xd0 [ 111.649903][ T8728] vmalloc_user_noprof+0x59/0x70 [ 111.655014][ T8728] ? xskq_create+0x79/0xd0 [ 111.659452][ T8728] xskq_create+0x79/0xd0 [ 111.663712][ T8728] xsk_init_queue+0x82/0xd0 [ 111.668263][ T8728] xsk_setsockopt+0x409/0x520 [ 111.672959][ T8728] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.678272][ T8728] __sys_setsockopt+0x1d8/0x250 [ 111.683131][ T8728] __x64_sys_setsockopt+0x66/0x80 [ 111.688644][ T8728] x64_sys_call+0x278d/0x2d60 [ 111.693333][ T8728] do_syscall_64+0xc9/0x1c0 [ 111.697893][ T8728] ? clear_bhb_loop+0x55/0xb0 [ 111.702574][ T8728] ? clear_bhb_loop+0x55/0xb0 [ 111.707252][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.713260][ T8728] RIP: 0033:0x7f2dce8ddef9 [ 111.717691][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.737413][ T8728] RSP: 002b:00007f2dcd557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.745844][ T8728] RAX: ffffffffffffffda RBX: 00007f2dcea95f80 RCX: 00007f2dce8ddef9 [ 111.753810][ T8728] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 111.761777][ T8728] RBP: 00007f2dce950b76 R08: 0000000000000020 R09: 0000000000000000 [ 111.769743][ T8728] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 111.777716][ T8728] R13: 0000000000000000 R14: 00007f2dcea95f80 R15: 00007ffd165c13d8 [ 111.785765][ T8728] [ 111.789040][ T8728] Mem-Info: [ 111.792245][ T8728] active_anon:17160 inactive_anon:0 isolated_anon:1 [ 111.792245][ T8728] active_file:3881 inactive_file:18120 isolated_file:0 [ 111.792245][ T8728] unevictable:5566 dirty:488 writeback:0 [ 111.792245][ T8728] slab_reclaimable:2654 slab_unreclaimable:14464 [ 111.792245][ T8728] mapped:27248 shmem:10030 pagetables:790 [ 111.792245][ T8728] sec_pagetables:0 bounce:0 [ 111.792245][ T8728] kernel_misc_reclaimable:0 [ 111.792245][ T8728] free:1887578 free_pcp:4239 free_cma:0 [ 111.837938][ T8728] Node 0 active_anon:76132kB inactive_anon:0kB active_file:15444kB inactive_file:81456kB unevictable:208kB isolated(anon):0kB isolated(file):0kB mapped:102056kB dirty:1952kB writeback:0kB shmem:40128kB writeback_tmp:0kB kernel_stack:3264kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 111.866077][ T8728] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.866164][ T8728] lowmem_reserve[]: 0 2866 7844 0 [ 111.866188][ T8728] Node 0 DMA32 free:2950336kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 111.866337][ T8728] lowmem_reserve[]: 0 0 4978 0 [ 111.866382][ T8728] Node 0 Normal free:4584556kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:60704kB inactive_anon:0kB active_file:15444kB inactive_file:81456kB unevictable:208kB writepending:1952kB present:5242880kB managed:5098208kB mlocked:144kB bounce:0kB free_pcp:34524kB local_pcp:4060kB free_cma:0kB [ 111.866440][ T8728] lowmem_reserve[]: 0 0 0 0 [ 111.866544][ T8728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.866731][ T8728] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950336kB [ 111.867037][ T8728] Node 0 Normal: 3*4kB (UE) 0*8kB 2*16kB (UE) 52*32kB (UE) 123*64kB (UME) 96*128kB (UME) 159*256kB (UE) 130*512kB (UME) 91*1024kB (UME) 56*2048kB (UE) 1037*4096kB (UM) = 4584556kB [ 111.867225][ T8728] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 111.867240][ T8728] 32063 total pagecache pages [ 111.867247][ T8728] 11 pages in swap cache [ 111.867254][ T8728] Free swap = 124176kB [ 111.867260][ T8728] Total swap = 124996kB [ 111.867267][ T8728] 2097051 pages RAM [ 111.867273][ T8728] 0 pages HighMem/MovableOnly [ 111.867279][ T8728] 80167 pages reserved [ 112.170699][ T8784] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 112.285127][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.306540][ T8795] netlink: 116 bytes leftover after parsing attributes in process `syz.4.744'. [ 112.669266][ T8818] netlink: 'syz.0.748': attribute type 21 has an invalid length. [ 112.677127][ T8818] netlink: 'syz.0.748': attribute type 15 has an invalid length. [ 112.684887][ T8818] netlink: 156 bytes leftover after parsing attributes in process `syz.0.748'. [ 113.001746][ T8824] program syz.3.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.325100][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.462306][ T8870] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6 [ 113.551724][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 113.616351][ T8875] bond2: entered promiscuous mode [ 113.621480][ T8875] bond2: entered allmulticast mode [ 113.627052][ T8875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.646890][ T8875] bond2 (unregistering): Released all slaves [ 113.676147][ T8943] netlink: 116 bytes leftover after parsing attributes in process `syz.3.757'. [ 113.733067][ T8954] lo speed is unknown, defaulting to 1000 [ 113.894482][ T8990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.915824][ T8990] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 113.936009][ T8990] bond0: (slave caif0): Error -95 calling set_mac_address [ 114.158970][ T8990] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 114.194624][ T9000] capability: warning: `syz.2.767' uses 32-bit capabilities (legacy support in use) [ 114.227080][ T9000] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.234515][ T9000] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 114.365120][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.409099][ T9008] xt_TCPMSS: Only works on TCP SYN packets [ 114.574273][ T9020] siw: device registration error -23 [ 114.675662][ T9041] Restarting kernel threads ... done. [ 114.733306][ T9041] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 114.741836][ T9041] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 114.816860][ T9054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.877758][ T9036] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 114.918310][ T9063] Illegal XDP return value 143544672 on prog (id 527) dev N/A, expect packet loss! [ 114.944500][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 114.944516][ T29] audit: type=1326 audit(1726140318.303:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.2.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dce8ddef9 code=0x0 [ 114.995375][ T29] audit: type=1326 audit(1726140318.353:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.018953][ T29] audit: type=1326 audit(1726140318.353:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.042317][ T29] audit: type=1326 audit(1726140318.363:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.048871][ T9068] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 115.066344][ T29] audit: type=1326 audit(1726140318.363:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.096810][ T29] audit: type=1326 audit(1726140318.363:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.120195][ T29] audit: type=1326 audit(1726140318.363:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.143717][ T29] audit: type=1326 audit(1726140318.363:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.167051][ T29] audit: type=1326 audit(1726140318.363:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.190371][ T29] audit: type=1326 audit(1726140318.363:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 115.273696][ T9076] netlink: 'syz.4.785': attribute type 21 has an invalid length. [ 115.301186][ T9077] lo speed is unknown, defaulting to 1000 [ 115.360409][ T9102] can0: slcan on ttyS3. [ 115.415855][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 116.120887][ T7261] IPVS: starting estimator thread 0... [ 116.165469][ T9110] can0 (unregistered): slcan off ttyS3. [ 116.181849][ T9148] program syz.3.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.194445][ T9150] program syz.1.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.250218][ T9144] IPVS: using max 2352 ests per chain, 117600 per kthread [ 116.314715][ T9173] __nla_validate_parse: 7 callbacks suppressed [ 116.314730][ T9173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.797'. [ 116.445110][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 116.479245][ T9180] syz.2.796[9180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.479350][ T9180] syz.2.796[9180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.499683][ T9180] lo speed is unknown, defaulting to 1000 [ 117.485059][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.525121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.565073][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.252033][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 120.252048][ T29] audit: type=1400 audit(1726140323.613:9207): avc: denied { read write } for pid=9216 comm="syz.3.804" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.286076][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.296153][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.303579][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.311030][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.318478][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.325900][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.333372][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.340875][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.342622][ T29] audit: type=1400 audit(1726140323.653:9208): avc: denied { open } for pid=9216 comm="syz.3.804" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.348307][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.379028][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.386457][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.393861][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.401386][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.408817][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.416239][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.423686][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.431111][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.438580][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.445069][ T29] audit: type=1326 audit(1726140323.743:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.445978][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.469269][ T29] audit: type=1326 audit(1726140323.743:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.476741][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.500149][ T29] audit: type=1326 audit(1726140323.743:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.507536][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.530750][ T29] audit: type=1326 audit(1726140323.743:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.530811][ T29] audit: type=1326 audit(1726140323.743:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.538259][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.561485][ T29] audit: type=1326 audit(1726140323.743:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.584659][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.592048][ T29] audit: type=1326 audit(1726140323.743:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.615363][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.622671][ T29] audit: type=1326 audit(1726140323.743:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 120.645934][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.683934][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.691343][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.698759][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.706184][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.713661][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.721086][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.728489][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.735937][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.743343][ T3700] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.767208][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.806416][ T9236] sctp: [Deprecated]: syz.4.809 (pid 9236) Use of int in maxseg socket option. [ 120.806416][ T9236] Use struct sctp_assoc_value instead [ 120.826156][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 120.839431][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'. [ 120.883216][ T3700] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 121.068387][ T9256] block device autoloading is deprecated and will be removed. [ 121.234570][ T9273] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6 [ 121.243928][ T9275] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 121.291352][ T9281] syz.2.819[9281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.291458][ T9281] syz.2.819[9281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.360625][ T9286] xt_hashlimit: invalid rate [ 121.389607][ T9291] netlink: 'syz.4.817': attribute type 10 has an invalid length. [ 121.502773][ T9293] lo speed is unknown, defaulting to 1000 [ 121.533316][ T9297] loop3: detected capacity change from 0 to 512 [ 121.548891][ T9297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.562199][ T9297] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.656563][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.806214][ T5277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.877424][ T9337] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 122.149623][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 122.235611][ T9359] syz.4.831[9359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.235680][ T9359] syz.4.831[9359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.354675][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 122.374925][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 122.401722][ T9374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 122.685062][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.777021][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 122.834279][ T9422] loop3: detected capacity change from 0 to 1024 [ 122.841507][ T9422] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.852054][ T9422] JBD2: no valid journal superblock found [ 122.857855][ T9422] EXT4-fs (loop3): Could not load journal inode [ 123.376118][ T9447] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 123.601150][ T9454] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 123.617567][ T9454] team0: Port device dummy0 added [ 123.725081][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.927036][ T9471] netlink: 116 bytes leftover after parsing attributes in process `syz.4.844'. [ 124.539743][ T9499] syz.3.849[9499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.539886][ T9499] syz.3.849[9499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.649107][ T9507] bond0: entered promiscuous mode [ 124.665474][ T9507] bond0: entered allmulticast mode [ 124.670814][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.687333][ T9507] bond0 (unregistering): Released all slaves [ 124.765084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.795548][ T9578] syz.1.853[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.795622][ T9578] syz.1.853[9578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.850174][ T9583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.917502][ T9588] netlink: 'syz.3.855': attribute type 7 has an invalid length. [ 124.938236][ T9588] lo speed is unknown, defaulting to 1000 [ 124.962695][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 124.980572][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 125.083911][ T9620] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 125.133921][ T9624] netlink: 116 bytes leftover after parsing attributes in process `syz.0.859'. [ 125.134157][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.150636][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.158053][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.165489][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.172961][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.180385][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.187788][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.195233][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.202614][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.210026][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.217449][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.224858][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.232280][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.239687][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.247157][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.254528][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.261978][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.269359][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.276736][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.284173][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.291570][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.299023][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.306433][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.313845][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.321240][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.328805][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.336242][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.343648][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.351082][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.358466][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.366007][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.373414][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.380805][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.388184][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.395598][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.402993][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.410573][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.418117][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.425528][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.432913][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.440294][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.447697][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.455095][ T3700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.463353][ T3700] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.508976][ T9644] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.550466][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 125.570442][ T9649] netlink: 'syz.4.865': attribute type 27 has an invalid length. [ 125.578525][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 125.578540][ T29] audit: type=1326 audit(1726140328.933:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.608079][ T29] audit: type=1326 audit(1726140328.933:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.631407][ T29] audit: type=1326 audit(1726140328.933:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.654873][ T29] audit: type=1326 audit(1726140328.933:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.678216][ T29] audit: type=1326 audit(1726140328.933:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.714719][ T29] audit: type=1326 audit(1726140328.943:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.738115][ T29] audit: type=1326 audit(1726140329.003:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.761544][ T29] audit: type=1326 audit(1726140329.003:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.784863][ T29] audit: type=1326 audit(1726140329.003:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.808260][ T29] audit: type=1326 audit(1726140329.003:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x7ffc0000 [ 125.815112][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.854671][ T9666] loop3: detected capacity change from 0 to 4096 [ 125.886198][ T9666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.905724][ T9666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.085265][ T9673] netlink: 'syz.0.868': attribute type 3 has an invalid length. [ 126.339404][ T9649] 0ªX¹¦À: left allmulticast mode [ 126.845095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 126.943306][ T9649] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.952593][ T9649] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.961665][ T9649] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.970601][ T9649] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.006514][ T9649] ip6erspan0: left promiscuous mode [ 127.030176][ T9649] bond0: left allmulticast mode [ 127.078843][ T9678] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 127.087165][ T9678] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 127.326597][ T9709] __nla_validate_parse: 3 callbacks suppressed [ 127.326617][ T9709] netlink: 116 bytes leftover after parsing attributes in process `syz.3.875'. [ 127.379795][ T9714] block device autoloading is deprecated and will be removed. [ 127.476266][ T9722] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 127.550679][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 127.560686][ T9725] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (128) [ 127.646627][ T9729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 127.672309][ T9729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 127.690927][ T9729] loop1: detected capacity change from 0 to 128 [ 127.698711][ T9729] vfat: Unknown parameter '' [ 127.885059][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.055293][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.062808][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.070239][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.077654][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.085191][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.092579][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.100027][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.107434][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.114839][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.122253][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.129812][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.137251][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.144715][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.152193][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.159593][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.167114][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.174617][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.182038][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.189448][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.196904][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.204304][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.211756][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.219358][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.226909][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.234344][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.241769][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.249414][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.256802][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.264183][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.271582][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.278981][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.286550][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.293943][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.301358][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.308815][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.316310][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.323775][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.331182][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.338673][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.346092][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.353485][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.360902][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.368388][ T7241] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.389136][ T9744] loop3: detected capacity change from 0 to 4096 [ 128.506802][ T9744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.521656][ T9744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.532701][ T7241] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 128.591572][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 128.600873][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 128.871865][ T9792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9792 comm=syz.3.888 [ 128.918800][ T9793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.926398][ T9793] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 128.935078][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.404461][ T9808] syz.0.891[9808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.404753][ T9808] syz.0.891[9808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.558457][ T9808] loop0: detected capacity change from 0 to 512 [ 129.599430][ T9808] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.627139][ T9808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.664504][ T9818] SET target dimension over the limit! [ 129.671968][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.681692][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.854259][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.975056][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.982906][ T9839] loop0: detected capacity change from 0 to 4096 [ 129.995814][ T9839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.270183][ T9850] lo speed is unknown, defaulting to 1000 [ 130.296321][ T9870] syz.4.896 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.397716][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 130.449811][ T9883] lo speed is unknown, defaulting to 1000 [ 130.588272][ T9910] siw: device registration error -23 [ 130.603353][ T9909] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 130.610120][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.617807][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 130.626524][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 130.626613][ T29] audit: type=1400 audit(1726140333.993:10428): avc: denied { accept } for pid=9907 comm="syz.3.901" lport=35577 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.655954][ T29] audit: type=1400 audit(1726140333.993:10429): avc: denied { write } for pid=9907 comm="syz.3.901" lport=35577 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 130.689444][ T9909] loop1: detected capacity change from 0 to 512 [ 130.704349][ T29] audit: type=1400 audit(1726140334.023:10430): avc: denied { setopt } for pid=9907 comm="syz.3.901" lport=35577 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 130.737547][ T29] audit: type=1326 audit(1726140334.093:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.761107][ T29] audit: type=1326 audit(1726140334.093:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.784646][ T29] audit: type=1326 audit(1726140334.103:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.808264][ T29] audit: type=1326 audit(1726140334.103:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.831689][ T29] audit: type=1326 audit(1726140334.103:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.866815][ T9909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.885105][ T9909] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.895075][ T29] audit: type=1326 audit(1726140334.103:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.918973][ T29] audit: type=1326 audit(1726140334.103:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e75edef9 code=0x7ffc0000 [ 130.947146][ T998] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 130.967710][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.971513][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 130.998972][ T9912] vhci_hcd: connection closed [ 130.999289][ T36] vhci_hcd: stop threads [ 131.008292][ T36] vhci_hcd: release socket [ 131.012716][ T36] vhci_hcd: disconnect device [ 131.015073][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.049162][ T9927] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 131.083341][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.090934][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.098426][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.105850][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.113292][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.120696][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.128169][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.135602][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.143019][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.150489][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.157901][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.165329][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x2 [ 131.172755][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.180173][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.187584][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.195031][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.202441][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.209917][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.217391][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.224779][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.232205][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.239598][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.247013][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.254450][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.261855][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.269280][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.276696][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.284090][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.291823][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.299378][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.306806][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.314349][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.321758][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.329256][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.336645][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.344037][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.351550][ T7241] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 131.365625][ T7241] hid-generic 0001:0000:0000.0007: hidraw0: HID v7.f7 Device [syz1] on syz1 [ 131.387274][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 131.390155][ T9943] loop0: detected capacity change from 0 to 512 [ 131.430272][ T9943] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.907: casefold flag without casefold feature [ 131.449230][ T9943] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.907: couldn't read orphan inode 15 (err -117) [ 131.476497][ T4090] syz_tun (unregistering): left promiscuous mode [ 131.483468][ T9943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.531376][ T6314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.657669][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 131.706691][ T9943] Invalid option length (234) for dns_resolver key [ 131.781932][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.812158][ T9974] Cannot find del_set index 4 as target [ 131.878024][ T9958] lo speed is unknown, defaulting to 1000 [ 131.963100][ T9988] loop0: detected capacity change from 0 to 512 [ 131.977661][ T55] @: (slave netdevsim1): Releasing backup interface [ 132.004646][ T9988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.023715][ T9988] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.033255][ T9958] chnl_net:caif_netlink_parms(): no params data found [ 132.037029][ T9988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.914: bg 0: block 248: padding at end of block bitmap is not set [ 132.055033][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 132.063533][ T9988] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.914: Failed to acquire dquot type 1 [ 132.080942][ T9988] EXT4-fs (loop0): 1 truncate cleaned up [ 132.093900][ T9988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.141103][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.148267][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.157650][ T9958] bridge_slave_0: entered allmulticast mode [ 132.165105][ T9958] bridge_slave_0: entered promiscuous mode [ 132.174529][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.181777][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.199391][ T9958] bridge_slave_1: entered allmulticast mode [ 132.207116][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.207687][ T9958] bridge_slave_1: entered promiscuous mode [ 132.283118][T10160] loop0: detected capacity change from 0 to 2048 [ 132.292907][ T55] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.302774][T10160] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 132.312732][T10160] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.323700][T10160] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 132.333787][T10160] EXT4-fs (loop0): group descriptors corrupted! [ 132.340444][ T55] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.352581][ T55] @ (unregistering): Released all slaves [ 132.361468][ T55] bond0 (unregistering): Released all slaves [ 132.370405][ T55] bond1 (unregistering): Released all slaves [ 132.379355][ T55] bond2 (unregistering): Released all slaves [ 132.391608][T10165] loop3: detected capacity change from 0 to 512 [ 132.406523][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.413962][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.421422][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.428944][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.436524][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.443954][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.451457][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.451616][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'. [ 132.458917][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.471405][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.475168][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.491612][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.492412][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.499019][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.499041][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.522907][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.530421][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.537867][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.545486][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.553076][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.560523][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.567912][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.575345][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.582741][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.590198][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.597650][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.605113][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.612553][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.617904][T10206] blktrace: Concurrent blktraces are not allowed on loop5 [ 132.620019][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.634709][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.642134][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.649608][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.657016][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.664407][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.671816][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.679269][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.686855][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.694234][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.701656][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.709095][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.716483][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.723914][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.731416][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.738886][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.746348][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.753804][ T7240] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.763908][ T7240] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 132.784243][ T9958] team0: Port device team_slave_0 added [ 132.785557][T10206] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 132.794540][ T9958] team0: Port device team_slave_1 added [ 132.821113][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.828176][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.854258][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.867211][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.874230][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.900208][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.921482][ T55] batadv_slave_0: left promiscuous mode [ 132.932143][T10259] loop0: detected capacity change from 0 to 512 [ 132.940514][ T55] hsr_slave_0: left promiscuous mode [ 132.947518][ T55] hsr_slave_1: left promiscuous mode [ 132.963999][T10259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.977870][T10259] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.095035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.214823][T10256] loop1: detected capacity change from 0 to 1024 [ 133.264031][T10270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.281314][ T55] team0 (unregistering): Port device team_slave_1 removed [ 133.306980][T10256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.328465][ T55] team0 (unregistering): Port device team_slave_0 removed [ 133.435672][T10256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.611235][ T9958] hsr_slave_0: entered promiscuous mode [ 133.629571][T10304] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 133.642899][ T9958] hsr_slave_1: entered promiscuous mode [ 133.677507][ T6314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.820429][T10321] loop1: detected capacity change from 0 to 1024 [ 133.834337][T10321] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 133.852382][T10321] loop1: detected capacity change from 0 to 512 [ 133.904076][T10321] loop1: detected capacity change from 0 to 1024 [ 133.938053][T10321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.970680][ T6314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.135050][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.003897][T10406] netlink: 116 bytes leftover after parsing attributes in process `syz.3.928'. [ 135.053836][ T9958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.072921][ T9958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.083471][ T9958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.093921][ T9958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.165049][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.176801][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.191276][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.201277][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.208552][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.225941][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.233005][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.249836][ T9958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.260381][ T9958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.308960][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.375446][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.393461][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.395940][T10435] ipt_REJECT: ECHOREPLY no longer supported. [ 135.400998][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.414334][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.421755][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.429155][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.436640][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.444084][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.451628][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.459112][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.466535][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.473926][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.481421][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.488867][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.496381][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.503789][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.511369][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.518775][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.526178][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.533598][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.541031][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.548474][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.555919][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.563306][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.570740][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.578289][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.585710][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.586603][T10440] loop1: detected capacity change from 0 to 1024 [ 135.593078][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.606875][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.614308][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.621730][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.629145][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.630693][T10440] EXT4-fs: Ignoring removed orlov option [ 135.636545][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.649628][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.655599][T10440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.657035][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.671088][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.678500][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.685956][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.693475][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.700972][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.708395][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.715838][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.723226][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.730645][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.738150][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.745590][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.753259][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.760679][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.768101][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.775596][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.782976][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.790376][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.797792][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.805244][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.812634][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.820142][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.827542][ T7256] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.858324][T10440] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e028, mo2=0002] [ 135.867192][T10440] System zones: 0-1, 3-12 [ 135.875966][T10440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.897006][ T7256] hid-generic 0000:0000:0000.0009: hidraw0: HID vffffff.f7 Device [syz0] on syz0 [ 135.942006][ T9958] veth0_vlan: entered promiscuous mode [ 135.962627][ T9958] veth1_vlan: entered promiscuous mode [ 136.002133][ T9958] veth0_macvtap: entered promiscuous mode [ 136.014442][ T9958] veth1_macvtap: entered promiscuous mode [ 136.031163][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.041678][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.051642][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.062207][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.062212][ T998] usb 3-1: enqueue for inactive port 0 [ 136.062234][ T998] usb 3-1: enqueue for inactive port 0 [ 136.085212][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.093620][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.104163][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.114068][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.124599][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.135066][ T998] vhci_hcd: vhci_device speed not set [ 136.135945][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.159442][ T9958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.168267][ T9958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.177157][ T9958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.185922][ T9958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.205057][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.246704][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 136.246720][ T29] audit: type=1400 audit(1726140339.603:11032): avc: denied { mounton } for pid=9958 comm="syz-executor" path="/root/syzkaller.VtRjWx/syz-tmp" dev="sda1" ino=8204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 136.278114][ T6314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.302296][ T29] audit: type=1400 audit(1726140339.643:11033): avc: denied { mount } for pid=9958 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.324547][ T29] audit: type=1400 audit(1726140339.653:11034): avc: denied { mounton } for pid=9958 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 136.393786][ T29] audit: type=1400 audit(1726140339.753:11035): avc: denied { read } for pid=10474 comm="syz.1.934" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.417014][ T29] audit: type=1400 audit(1726140339.753:11036): avc: denied { open } for pid=10474 comm="syz.1.934" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.471937][T10471] syzkaller0: entered promiscuous mode [ 136.477487][T10471] syzkaller0: entered allmulticast mode [ 136.552320][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10488 comm=syz.3.937 [ 136.554855][ T29] audit: type=1400 audit(1726140339.913:11037): avc: denied { create } for pid=10487 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.565948][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10488 comm=syz.3.937 [ 136.585479][ T29] audit: type=1400 audit(1726140339.913:11038): avc: denied { write } for pid=10487 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.608512][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10488 comm=syz.3.937 [ 136.618079][ T29] audit: type=1400 audit(1726140339.913:11039): avc: denied { ioctl } for pid=10487 comm="syz.3.937" path="socket:[18381]" dev="sockfs" ino=18381 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.655925][ T29] audit: type=1400 audit(1726140339.913:11040): avc: denied { nlmsg_write } for pid=10487 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.676948][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.935'. [ 136.690870][ T29] audit: type=1326 audit(1726140340.053:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29336edef9 code=0x0 [ 136.730210][T10490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.796504][T10500] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 136.863653][ T7256] hid-generic 0000:0000:0000.000A: item fetching failed at offset 0/2 [ 136.872358][ T7256] hid-generic 0000:0000:0000.000A: probe with driver hid-generic failed with error -22 [ 136.891965][T10502] netlink: 830 bytes leftover after parsing attributes in process `syz.2.939'. [ 136.904400][T10502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.023459][T10512] netlink: 116 bytes leftover after parsing attributes in process `syz.4.940'. [ 137.175391][T10522] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 137.186612][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 137.245243][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.343650][T10527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 137.350800][T10527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.358471][T10527] vhci_hcd vhci_hcd.0: Device attached [ 137.422430][T10530] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 137.424280][T10534] pim6reg: entered allmulticast mode [ 137.435485][ T55] vhci_hcd: stop threads [ 137.439730][ T55] vhci_hcd: release socket [ 137.444183][ T55] vhci_hcd: disconnect device [ 137.453746][T10534] pim6reg: left allmulticast mode [ 137.508378][T10539] loop0: detected capacity change from 0 to 512 [ 137.518654][T10539] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.945: casefold flag without casefold feature [ 137.531626][T10539] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.945: couldn't read orphan inode 15 (err -117) [ 137.546339][T10539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.674696][T10542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 137.681327][T10542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.688932][T10542] vhci_hcd vhci_hcd.0: Device attached [ 137.714544][T10542] loop3: detected capacity change from 0 to 512 [ 137.738108][T10542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.757440][T10542] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.772976][T10543] vhci_hcd: connection closed [ 137.773167][ T1854] vhci_hcd: stop threads [ 137.782333][ T1854] vhci_hcd: release socket [ 137.786794][ T1854] vhci_hcd: disconnect device [ 137.925682][T10552] netlink: 116 bytes leftover after parsing attributes in process `syz.2.958'. [ 138.034961][T10567] netlink: 116 bytes leftover after parsing attributes in process `syz.2.951'. [ 138.139096][T10579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.183884][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.285120][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.322335][ T5277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.344323][T10593] loop3: detected capacity change from 0 to 512 [ 138.359143][T10593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.372186][T10595] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 138.390236][T10593] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.461913][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 138.539005][ T5277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.545425][T10617] loop0: detected capacity change from 0 to 4096 [ 138.559963][T10617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.584763][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 138.604215][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.961'. [ 138.617450][T10617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.678703][T10628] netlink: 116 bytes leftover after parsing attributes in process `syz.4.962'. [ 138.794484][T10634] netlink: 116 bytes leftover after parsing attributes in process `syz.1.964'. [ 138.872529][T10640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 138.879229][T10640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.886858][T10640] vhci_hcd vhci_hcd.0: Device attached [ 138.935316][T10641] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 138.942800][ T55] vhci_hcd: stop threads [ 138.947151][ T55] vhci_hcd: release socket [ 138.951582][ T55] vhci_hcd: disconnect device [ 139.303164][T10647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 139.309861][T10647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.317386][T10647] vhci_hcd vhci_hcd.0: Device attached [ 139.325044][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.342975][T10650] vhci_hcd: connection closed [ 139.343338][ T36] vhci_hcd: stop threads [ 139.352391][ T36] vhci_hcd: release socket [ 139.356890][ T36] vhci_hcd: disconnect device [ 139.374117][T10653] loop0: detected capacity change from 0 to 2048 [ 139.386489][T10653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.473200][T10649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.968: bg 0: block 234: padding at end of block bitmap is not set [ 139.491685][T10649] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 234 with error 117 [ 139.509776][T10649] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.509776][T10649] [ 139.578135][ T4472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.636898][T10667] loop0: detected capacity change from 0 to 8192 [ 139.978157][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 140.086442][T10682] netlink: 116 bytes leftover after parsing attributes in process `syz.2.975'. [ 140.130911][T10685] netlink: 116 bytes leftover after parsing attributes in process `syz.2.976'. [ 140.146670][T10676] ================================================================== [ 140.154783][T10676] BUG: KCSAN: data-race in dio_bio_end_io / dio_new_bio [ 140.161746][T10676] [ 140.164064][T10676] read-write to 0xffff88810407a058 of 8 bytes by interrupt on cpu 0: [ 140.172125][T10676] dio_bio_end_io+0x53/0xd0 [ 140.176649][T10676] bio_endio+0x369/0x410 [ 140.180909][T10676] blk_update_request+0x382/0x880 [ 140.185940][T10676] blk_mq_end_request+0x26/0x50 [ 140.190800][T10676] lo_complete_rq+0xce/0x180 [ 140.195415][T10676] blk_done_softirq+0x74/0xb0 [ 140.200096][T10676] handle_softirqs+0xc3/0x280 [ 140.204773][T10676] irq_exit_rcu+0x3e/0x90 [ 140.209133][T10676] sysvec_apic_timer_interrupt+0x73/0x80 [ 140.214782][T10676] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.220779][T10676] selinux_file_permission+0x246/0x360 [ 140.226240][T10676] security_file_permission+0x43/0x70 [ 140.231613][T10676] vfs_iter_write+0x152/0x5d0 [ 140.236292][T10676] loop_process_work+0xad3/0x1230 [ 140.241321][T10676] loop_workfn+0x31/0x40 [ 140.245567][T10676] process_scheduled_works+0x483/0x9a0 [ 140.251041][T10676] worker_thread+0x526/0x6e0 [ 140.255648][T10676] kthread+0x1d1/0x210 [ 140.259718][T10676] ret_from_fork+0x4b/0x60 [ 140.264133][T10676] ret_from_fork_asm+0x1a/0x30 [ 140.268901][T10676] [ 140.271218][T10676] read to 0xffff88810407a058 of 8 bytes by task 10676 on cpu 1: [ 140.278839][T10676] dio_new_bio+0x249/0x460 [ 140.283258][T10676] dio_send_cur_page+0x1f2/0x7a0 [ 140.288207][T10676] submit_page_section+0x1a3/0x5b0 [ 140.293318][T10676] __blockdev_direct_IO+0x11c1/0x1e90 [ 140.298689][T10676] fat_direct_IO+0x110/0x1e0 [ 140.303272][T10676] generic_file_direct_write+0xaf/0x200 [ 140.308813][T10676] __generic_file_write_iter+0xae/0x120 [ 140.314356][T10676] generic_file_write_iter+0x7d/0x1d0 [ 140.319734][T10676] do_iter_readv_writev+0x3b0/0x470 [ 140.324960][T10676] vfs_writev+0x2e0/0x880 [ 140.329308][T10676] __se_sys_pwritev2+0x10c/0x1d0 [ 140.334288][T10676] __x64_sys_pwritev2+0x78/0x90 [ 140.339151][T10676] x64_sys_call+0x271f/0x2d60 [ 140.343835][T10676] do_syscall_64+0xc9/0x1c0 [ 140.348344][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.354346][T10676] [ 140.356667][T10676] value changed: 0xffff888142f0ea80 -> 0xffff888142f0e540 [ 140.363774][T10676] [ 140.366103][T10676] Reported by Kernel Concurrency Sanitizer on: [ 140.372243][T10676] CPU: 1 UID: 0 PID: 10676 Comm: syz.0.972 Not tainted 6.11.0-rc7-syzkaller-00039-g77f587896757 #0 [ 140.382918][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.393069][T10676] ================================================================== [ 140.405057][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.637609][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.696876][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.766771][ T50] bond0: (slave netdevsim1): Releasing backup interface [ 140.776340][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.827148][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.007162][ T50] bond0 (unregistering): Released all slaves [ 141.066575][ T50] tipc: Disabling bearer [ 141.071590][ T50] tipc: Left network mode [ 141.118989][ T50] hsr_slave_0: left promiscuous mode [ 141.124692][ T50] hsr_slave_1: left promiscuous mode [ 141.452596][ T50] IPVS: stop unused estimator thread 0...