last executing test programs: 2m46.517781326s ago: executing program 3 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f00000011c0)=[{0x0, 0x1}, {&(0x7f0000000000)="ffff", 0x2}], 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:devicekit_disk_exec_t:s0\x00', 0x2b, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r4 = syz_open_dev$loop(0x0, 0x81, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2m44.035127751s ago: executing program 3 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 2m43.768110136s ago: executing program 3 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m43.694396937s ago: executing program 3 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) fcntl$getown(r4, 0x9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x81, 0x9}}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='xen_mc_flush_reason\x00', r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file1\x00', 0x1d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x0, 0x28, 0x0, 0xffffffff, 0x80000000}, 0x28) 2m43.427858041s ago: executing program 3 (id=690): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x20000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x40}, 0x24004800) recvfrom$l2tp(r7, 0x0, 0x0, 0x40010120, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x95}], 0xe) 2m43.216869735s ago: executing program 3 (id=696): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m43.165961046s ago: executing program 32 (id=696): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m53.368161704s ago: executing program 5 (id=1743): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x21) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) unshare(0x22020400) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x5) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=0x4, 0x8, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000}, 0x18) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r3, 0x4004743c, &(0x7f0000000180)={0x20, 0x0}) 1m53.05969876s ago: executing program 5 (id=1751): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsuid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) 1m52.847827514s ago: executing program 5 (id=1756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f00000000c0), &(0x7f0000000400)=r4}, 0x20) r6 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffff8, 0x1, 0xfffd, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000680)='dirsync\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x14, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb853b37000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x35, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, r3}, 0x6c) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='rxrpc_rx_icmp\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001740)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$nl_netfilter(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c0000001007010129bd7000ffdbdf25050000062a4ad95a8673f06d0a8f016dbe5f0137503b48a18ffff5e34224ff533b882ae639d49d38bc0e4a27bc6641826f1b1e88d2cb21923eabdf9968f04ba23654b064a0b06c095d1aa1bb4d892f9726ae01c18fb869fe373e5593286e361295a19bc489665ac04ab4080b722a1bf0ada6c1ecba3d8037d21dd4e8a6a3b189a185bfb91f0fe95820e1bd5e"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 1m52.47187829s ago: executing program 5 (id=1766): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0xfffffffe, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4070, 0xfe6}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0xd, 0x6, 0x0, 0x42, 0x4f6, 0xd8, 0x1}, &(0x7f00000002c0)={0x80000001, 0x7fffffffffffffff, 0xfff, 0x3, 0x0, 0x9, 0x8, 0x10}, &(0x7f0000000300)={0xffffffff, 0x47, 0x6, 0x9, 0x9, 0x8000000000000000, 0x800, 0x6}, &(0x7f0000000380), &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x8, 0x6}, 0x16020, 0x0, 0x9, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) 1m52.302376864s ago: executing program 5 (id=1770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x4800, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m52.204120715s ago: executing program 5 (id=1771): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35fec79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfaf98219fef1aedf5bc9cb6f6b993cb35bab801ffb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5834032b60ea06c76137c9a2f2e20244b5fda8c58a17d1e7b63", 0xa8}], 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) truncate(&(0x7f0000000100)='./bus\x00', 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) lseek(0xffffffffffffffff, 0x1fff9, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r7]) 1m52.203826845s ago: executing program 33 (id=1771): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35fec79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfaf98219fef1aedf5bc9cb6f6b993cb35bab801ffb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5834032b60ea06c76137c9a2f2e20244b5fda8c58a17d1e7b63", 0xa8}], 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r6 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) truncate(&(0x7f0000000100)='./bus\x00', 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) lseek(0xffffffffffffffff, 0x1fff9, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r7]) 4.103936015s ago: executing program 4 (id=3417): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000f317110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x0) 3.755480781s ago: executing program 6 (id=3429): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0adf", 0x2}], 0x1) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1a748d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x0, 0xff, 0x7e}, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x58, r2, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0f9cface289b270116caab11c430b8a1cc389f9b"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c2421968782d5fa}, 0x4000004) 3.155195222s ago: executing program 6 (id=3436): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, &(0x7f00000003c0)='./file0\x00') r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2c}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0xfffffffffffffe00, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20002810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f00000004c0), &(0x7f0000001c40)=r8}, 0x20) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SCSI_IOCTL_START_UNIT(r10, 0x5) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x18, 0x5, 0x2, 0x2, 0x0, 0x70bd27}, 0x10}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x1e2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r3) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.534467153s ago: executing program 4 (id=3445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000300)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e0, &(0x7f0000002d40)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@private0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xffffd, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000df2b000000f8ffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r3, r0, 0x0) finit_module(r3, 0x0, 0x0) 2.263520118s ago: executing program 4 (id=3448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5}, 0x38) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x800, 0x0, 0x0, 0x4, "0062ba7d820000001652bdc5fcbdc8dace6b04"}) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7", 0x7, 0xfffffffffffffffc) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r5, &(0x7f0000000080)='3', 0x1, 0x0) 2.19861109s ago: executing program 6 (id=3450): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_set_self_attr(0x64, &(0x7f0000001c80)=ANY=[@ANYBLOB="6500000000000000d3030000000000002000"/32], 0x20, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640fffffff905000100060000000900020273797a3200000000050004000000000011000300686173683a69702c6d61726b000000000500050002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000003108761583e0f5dc88f06010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.758579697s ago: executing program 1 (id=3460): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, &(0x7f00000003c0)='./file0\x00') r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2c}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0xfffffffffffffe00, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20002810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f00000004c0), &(0x7f0000001c40)=r8}, 0x20) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SCSI_IOCTL_START_UNIT(r10, 0x5) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x18, 0x5, 0x2, 0x2, 0x0, 0x70bd27}, 0x10}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x1e2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r3) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.685938709s ago: executing program 2 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 1.496833273s ago: executing program 2 (id=3463): socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.475381332s ago: executing program 2 (id=3465): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a000100"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.322718805s ago: executing program 6 (id=3466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3, 0x12) 1.311988575s ago: executing program 4 (id=3467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs(r1, &(0x7f0000000040)='net/dev_mcast\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003d00000000000000950004000000000014c2f078923726d82cc058352a6e65228bbb6f6476e50c630ae8bafbcea733c197c08e55f69fd4301e0c24b521"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000fcdbcf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000300000000000000000000000000000000000032d296f2ea99314ddaaccf9b613ab840dd6bc3f4d52a4f15a12aa18dcabe00f4d1f9e936656224c6fdf08b12f2e364fe56c57838af7c26c4650096b5909038673adc83aad6e287773b4e1274f7c91e9976d445d8915c096335cb7a3be0c6693e6eca70d80b669eb6cf957b7cd388d9057a8e1dd62ec6338142e65f1ddeffb171ec12c7cbab6c3bf4cc44e5f9820092a98c26fdaf0e6b19268d36149d4c71100b0542447ed6f34e06cd84d16eb5cbeed4f3545c34c0d6c3842d3352aa1043c640b84c1c1e000f320257"], 0x0, 0x27}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0xb9, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.240089077s ago: executing program 4 (id=3468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') write$P9_RWALK(r4, &(0x7f0000000340)={0x30, 0x6f, 0x2, {0x3, [{0x20, 0x0, 0x2}, {0x2, 0x3, 0x3}, {0x10, 0x3, 0x5}]}}, 0x30) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 1.234171837s ago: executing program 4 (id=3469): socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) r2 = socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) getpeername(r2, 0x0, &(0x7f0000000080)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.08834638s ago: executing program 1 (id=3471): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='dctcp\x00', 0xfda5) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r11 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r11, &(0x7f0000000440)=""/248, 0xf8, 0x22, 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r13, 0x0, 0x0) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r13) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0x10, 0x1}, {0xf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x820) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040)="69199a52d675947fcb10581f67b18b4c262eff7dc7e19c3a37e1a12a4f7d70c2635253f454c5fc47a2606f0b427507d1d9c760afb6", &(0x7f0000000200)=""/99, &(0x7f0000000380)="60bb04076ed6c088a4067b07d3807ce94ee21a88a8ac70f73601d11024ee0c39bc024905b4cf7589f476077c2719775c01754923633352ab7d04043f6143e56654236ab2cf87935feda2d08d9f32d5167ee0ea727b6af32e9fa3626cf206b844919a0933cb99307966e2653fb8b9c96ca6c00ad71bce533c89bbe2c5251b2e98fe8d0e0c88231378ff8264b33236e84fc3", &(0x7f0000000280)="c5ef3e39e4fef704508657511157f8c921525bfa1162b38b06e469a6635da1075f385e26dc5d6997", 0x400, r1, 0x4}, 0x38) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYRESHEX=r4], 0x44}}, 0x0) 1.04666759s ago: executing program 1 (id=3473): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 997.656141ms ago: executing program 1 (id=3474): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = io_uring_setup(0x6c4, &(0x7f0000000300)={0x0, 0x4075, 0x18, 0x2, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x183040, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @window={0x3, 0x3, 0xe72}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'vlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000f80)={'gre0\x00', &(0x7f0000000e80)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x7, 0xa9d, {{0x2f, 0x4, 0x3, 0x8, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0x2b, 0xa8, [@loopback, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0x27, 0xf2, [@broadcast, @loopback, @multicast1, @empty, @broadcast, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @cipso={0x86, 0x54, 0x3, [{0x7, 0x12, "b434e6471035a8a7642dd91e8258b13e"}, {0x0, 0x6, "a3523156"}, {0x6, 0x2}, {0x0, 0x11, "6515eab8d97878bc3d04e751d8a2d1"}, {0x5, 0x12, "da8b4ae82ac4251a9a03c37b9a5d57ac"}, {0x6, 0x11, "a47e6b454e88929322760ba31e1ab8"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000840), 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x264, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8011}, 0x200040c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='page_pool_release\x00'}, 0x18) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r4) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x54, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x8001}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 945.008212ms ago: executing program 1 (id=3476): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") mmap(&(0x7f00002e9000/0x3000)=nil, 0x3000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 764.037255ms ago: executing program 1 (id=3477): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_set_self_attr(0x64, &(0x7f0000001c80)=ANY=[@ANYBLOB="6500000000000000d3030000000000002000"/32], 0x20, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640fffffff905000100060000000900020273797a3200000000050004000000000011000300686173683a69702c6d61726b000000000500050002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000003108761583e0f5dc88f06010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 616.114758ms ago: executing program 2 (id=3480): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 481.337501ms ago: executing program 2 (id=3482): creat(&(0x7f0000000280)='./bus\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250100000006000a004e2300f69c5f7eb5b9e3c81a9840f8281e0008000800e00000020500020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{}, {}, {}], &(0x7f0000000640)=0x18) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r4}, 0x18) unshare(0x64000600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x700, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$selinux_access(r3, &(0x7f0000000b00)=ANY=[@ANYBLOB="73797374656d5f753a6f62947577eefd258c75ea897556a06a6563745f723a6770675f6167656e745f657865635f743a73302075"], 0x46) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000030000000000000f040000000000305f006b12b2aaa5e7dfee2478e395143d87acad6def2eafaa33c73844b31a9a1e58567cb5a58f001c085795b531c490ee6c5df7b94c03be59206d"], 0x0, 0x29, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 241.513965ms ago: executing program 0 (id=3487): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000300)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e0, &(0x7f0000002d40)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@private0, 0x0}, &(0x7f0000000340)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xffffd, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000df2b000000f8ffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r3, r0, 0x0) finit_module(r3, 0x0, 0x0) 192.276106ms ago: executing program 6 (id=3488): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 182.795436ms ago: executing program 0 (id=3489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs(r1, &(0x7f0000000040)='net/dev_mcast\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003d00000000000000950004000000000014c2f078923726d82cc058352a6e65228bbb6f6476e50c630ae8bafbcea733c197c08e55f69fd4301e0c24b521"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="47e11bd3", @ANYRES16=r5, @ANYBLOB="010000000000fcdbcf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000300000000000000000000000000000000000032d296f2ea99314ddaaccf9b613ab840dd6bc3f4d52a4f15a12aa18dcabe00f4d1f9e936656224c6fdf08b12f2e364fe56c57838af7c26c4650096b5909038673adc83aad6e287773b4e1274f7c91e9976d445d8915c096335cb7a3be0c6693e6eca70d80b669eb6cf957b7cd388d9057a8e1dd62ec6338142e65f1ddeffb171ec12c7cbab6c3bf4cc44e5f9820092a98c26fdaf0e6b19268d36149d4c71100b0542447ed6f34e06cd84d16eb5cbeed4f3545c34c0d6c3842d3352aa1043c640b84c1c1e000f320257"], 0x0, 0x27}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0xb9, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 152.625486ms ago: executing program 0 (id=3490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x84, 0x30, 0x12f, 0x3, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0xc, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x84}}, 0xc0) 110.667597ms ago: executing program 2 (id=3491): syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@fat=@uid}, {@numtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x33, 0x62, 0x65, 0x31, 0x33, 0x66], 0x2d, [0x0, 0x39, 0x62, 0x61], 0x2d, [0x33, 0x38, 0x39, 0x33], 0x2d, [0x38, 0x65, 0x36, 0x37], 0x2d, [0x62, 0x62, 0x62, 0x32, 0x64, 0x63, 0x34, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000107b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x0) 110.240747ms ago: executing program 0 (id=3492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8094) 87.805757ms ago: executing program 0 (id=3493): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x10810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) 957.529µs ago: executing program 0 (id=3494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsuid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) 0s ago: executing program 6 (id=3495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') write$P9_RWALK(r4, &(0x7f0000000340)={0x30, 0x6f, 0x2, {0x3, [{0x20, 0x0, 0x2}, {0x2, 0x3, 0x3}, {0x10, 0x3, 0x5}]}}, 0x30) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) kernel console output (not intermixed with test programs): ily 0 port 20000 - 0 [ 141.770367][ T4380] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 142.124284][ T29] audit: type=1400 audit(1758203427.737:8169): avc: denied { bind } for pid=9594 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.924487][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2150'. [ 143.934151][ T9642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2150'. [ 143.957676][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2150'. [ 144.281626][ T9674] tipc: Enabled bearer , priority 0 [ 144.290104][ T9674] tipc: Resetting bearer [ 144.299029][ T29] audit: type=1400 audit(1758203429.917:8170): avc: denied { setopt } for pid=9675 comm="syz.6.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.332879][ T9673] tipc: Disabling bearer [ 144.352068][ T9678] lo speed is unknown, defaulting to 1000 [ 144.775426][ T29] audit: type=1400 audit(1758203430.397:8171): avc: denied { read } for pid=9699 comm="syz.4.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.028629][ T9703] lo speed is unknown, defaulting to 1000 [ 146.367048][ T9755] syzkaller0: entered promiscuous mode [ 146.372608][ T9755] syzkaller0: entered allmulticast mode [ 146.421075][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.486138][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.508901][ T9764] netlink: 'syz.2.2203': attribute type 39 has an invalid length. [ 147.041642][ T9784] tmpfs: Bad value for 'mpol' [ 147.390057][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2210'. [ 147.741734][ T29] audit: type=1326 audit(1758203433.357:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.6.2218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2f4e8eba9 code=0x0 [ 148.653113][ T9818] tipc: Enabled bearer , priority 0 [ 148.723209][ T9818] syzkaller0: entered promiscuous mode [ 148.729735][ T9818] syzkaller0: entered allmulticast mode [ 148.835092][ T9823] tmpfs: Bad value for 'mpol' [ 148.866239][ T9824] tipc: Resetting bearer [ 148.918461][ T9816] tipc: Resetting bearer [ 148.994727][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2227'. [ 149.064394][ T9816] tipc: Disabling bearer [ 149.091744][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.102611][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.939165][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 150.091206][ T9858] tmpfs: Bad value for 'mpol' [ 150.252789][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'. [ 150.864394][ T9885] syzkaller0: entered promiscuous mode [ 150.872308][ T9885] syzkaller0: entered allmulticast mode [ 150.910860][ T9887] hub 9-0:1.0: USB hub found [ 150.917287][ T9887] hub 9-0:1.0: 8 ports detected [ 150.927685][ T29] audit: type=1400 audit(1758203436.547:8173): avc: denied { write } for pid=9883 comm="syz.6.2246" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 151.032492][ T9890] tmpfs: Bad value for 'mpol' [ 151.397119][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.419673][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.658574][ T9902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2251'. [ 152.049311][ T9904] tipc: Enabled bearer , priority 0 [ 152.079920][ T9904] syzkaller0: entered promiscuous mode [ 152.085571][ T9904] syzkaller0: entered allmulticast mode [ 152.120316][ T9904] tipc: Resetting bearer [ 152.133596][ T9916] lo speed is unknown, defaulting to 1000 [ 152.143172][ T9904] tipc: Resetting bearer [ 152.150687][ T9904] tipc: Disabling bearer [ 152.351762][ T9927] veth0_to_team: entered promiscuous mode [ 152.358619][ T9927] veth0_to_team: entered allmulticast mode [ 152.368342][ T9927] SELinux: failed to load policy [ 153.190046][ T29] audit: type=1400 audit(1758203437.987:8174): avc: denied { load_policy } for pid=9908 comm="syz.6.2256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.211442][ T29] audit: type=1400 audit(1758203437.997:8175): avc: denied { bind } for pid=9923 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.303221][ T9937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2266'. [ 153.391592][ T9939] tmpfs: Bad value for 'mpol' [ 153.578255][ T9953] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 153.586087][ T9953] netlink: 'syz.1.2268': attribute type 2 has an invalid length. [ 153.842512][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 153.957024][ T9952] lo speed is unknown, defaulting to 1000 [ 154.102286][ T9964] netlink: 'syz.2.2272': attribute type 8 has an invalid length. [ 154.122226][ T9964] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 154.301474][ T9971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2274'. [ 154.315633][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2274'. [ 154.326821][ T9971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2274'. [ 154.587704][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 154.653580][ T29] audit: type=1400 audit(1758203440.267:8176): avc: denied { create } for pid=9976 comm="syz.2.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.863166][ T29] audit: type=1400 audit(1758203440.477:8177): avc: denied { sqpoll } for pid=9965 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.884396][ T29] audit: type=1400 audit(1758203440.477:8178): avc: denied { allowed } for pid=9965 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.033872][ T29] audit: type=1400 audit(1758203440.647:8179): avc: denied { create } for pid=10039 comm="syz.0.2277" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.129079][ T29] audit: type=1400 audit(1758203440.687:8180): avc: denied { map } for pid=10039 comm="syz.0.2277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.154555][ T29] audit: type=1400 audit(1758203440.687:8181): avc: denied { read write } for pid=10039 comm="syz.0.2277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.180553][ T29] audit: type=1400 audit(1758203440.687:8182): avc: denied { read write } for pid=10039 comm="syz.0.2277" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 155.938029][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 155.938046][ T29] audit: type=1400 audit(1758203441.197:8192): avc: denied { create } for pid=10046 comm="syz.2.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.964726][ T29] audit: type=1400 audit(1758203441.197:8193): avc: denied { write } for pid=10046 comm="syz.2.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.985200][ T29] audit: type=1400 audit(1758203441.257:8194): avc: denied { map_create } for pid=10041 comm="syz.4.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.004406][ T29] audit: type=1400 audit(1758203441.257:8195): avc: denied { map_read map_write } for pid=10041 comm="syz.4.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.087693][ T29] audit: type=1400 audit(1758203441.647:8196): avc: denied { create } for pid=10051 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.123342][ T29] audit: type=1400 audit(1758203441.737:8197): avc: denied { create } for pid=10055 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.142460][T10056] lo speed is unknown, defaulting to 1000 [ 156.177230][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 156.192055][ T29] audit: type=1400 audit(1758203441.807:8198): avc: denied { read } for pid=10059 comm="syz.2.2284" dev="nsfs" ino=4026532840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.214510][ T29] audit: type=1400 audit(1758203441.807:8199): avc: denied { open } for pid=10059 comm="syz.2.2284" path="net:[4026532840]" dev="nsfs" ino=4026532840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.238941][ T29] audit: type=1400 audit(1758203441.807:8200): avc: denied { ioctl } for pid=10059 comm="syz.2.2284" path="socket:[30383]" dev="sockfs" ino=30383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.249721][T10064] tmpfs: Bad value for 'mpol' [ 156.265882][ T29] audit: type=1400 audit(1758203441.807:8201): avc: denied { create } for pid=10059 comm="syz.2.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.289560][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'. [ 156.353279][T10067] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 156.361984][T10067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2279'. [ 156.620456][T10079] SELinux: failed to load policy [ 156.799584][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.808048][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.526598][T10126] program syz.2.2307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.552327][T10126] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 158.753920][T10132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2308'. [ 158.791913][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2308'. [ 158.898480][T10132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2308'. [ 160.014538][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2323'. [ 160.340025][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 160.387179][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2326'. [ 161.077407][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 161.077422][ T29] audit: type=1400 audit(1758203446.697:8256): avc: denied { create } for pid=10215 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.103749][T10219] tipc: Enabled bearer , priority 0 [ 161.157030][T10219] tipc: Resetting bearer [ 161.183772][T10216] tipc: Disabling bearer [ 161.210318][ T29] audit: type=1400 audit(1758203446.697:8257): avc: denied { write } for pid=10215 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.263820][ T29] audit: type=1400 audit(1758203446.877:8258): avc: denied { ioctl } for pid=10226 comm="syz.2.2341" path="socket:[31228]" dev="sockfs" ino=31228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.379133][T10235] support for cryptoloop has been removed. Use dm-crypt instead. [ 161.448977][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 161.473639][ T29] audit: type=1400 audit(1758203447.087:8259): avc: denied { bind } for pid=10238 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.596275][ T29] audit: type=1400 audit(1758203447.217:8260): avc: denied { shutdown } for pid=10226 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.814184][ T29] audit: type=1400 audit(1758203447.427:8261): avc: denied { name_bind } for pid=10252 comm="syz.1.2349" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 161.941556][ T29] audit: type=1400 audit(1758203447.557:8262): avc: denied { create } for pid=10254 comm="syz.4.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.962145][ T29] audit: type=1400 audit(1758203447.557:8263): avc: denied { read } for pid=10254 comm="syz.4.2350" path="socket:[31306]" dev="sockfs" ino=31306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.315064][ T29] audit: type=1400 audit(1758203447.917:8264): avc: denied { ioctl } for pid=10271 comm="syz.1.2358" path="socket:[30608]" dev="sockfs" ino=30608 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.381006][T10211] kexec: Could not allocate control_code_buffer [ 162.464611][T10277] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2360'. [ 163.646902][T10289] can0: slcan on ptm0. [ 163.686245][ T29] audit: type=1400 audit(1758203449.277:8265): avc: denied { create } for pid=10281 comm="syz.2.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.365282][T10281] can0 (unregistered): slcan off ptm0. [ 164.822442][T10311] tmpfs: Bad value for 'mpol' [ 165.969560][T10325] tipc: Enabled bearer , priority 0 [ 165.986516][T10320] tipc: Resetting bearer [ 165.999371][T10319] tipc: Disabling bearer [ 166.048670][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 166.619182][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.656322][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.071693][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 167.071707][ T29] audit: type=1400 audit(1758203452.687:8276): avc: denied { create } for pid=10364 comm="syz.6.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.170902][ T29] audit: type=1400 audit(1758203452.697:8277): avc: denied { ioctl } for pid=10364 comm="syz.6.2392" path="socket:[31485]" dev="sockfs" ino=31485 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.195925][ T29] audit: type=1400 audit(1758203452.707:8278): avc: denied { write } for pid=10364 comm="syz.6.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.261305][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.310262][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.343874][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.377134][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.388044][ T29] audit: type=1400 audit(1758203452.917:8279): avc: denied { getopt } for pid=10373 comm="syz.6.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.407806][ T29] audit: type=1400 audit(1758203452.997:8280): avc: denied { write } for pid=10379 comm="syz.6.2399" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.950135][ T29] audit: type=1400 audit(1758203453.567:8281): avc: denied { setcheckreqprot } for pid=10389 comm="syz.2.2404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 168.894910][ T29] audit: type=1400 audit(1758203454.507:8282): avc: denied { setopt } for pid=10404 comm="syz.6.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.451048][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2406'. [ 169.482078][T10415] geneve3: entered allmulticast mode [ 169.537342][ T29] audit: type=1400 audit(1758203455.127:8283): avc: denied { create } for pid=10394 comm="syz.1.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.558017][ T29] audit: type=1400 audit(1758203455.127:8284): avc: denied { connect } for pid=10394 comm="syz.1.2406" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.637386][ T29] audit: type=1400 audit(1758203455.247:8285): avc: denied { read } for pid=10427 comm="syz.0.2418" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.844210][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2420'. [ 169.977754][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2420'. [ 170.033952][T10442] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2420'. [ 170.529815][T10461] tipc: Enabling of bearer rejected, failed to enable media [ 170.640579][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 170.660644][T10469] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 170.668581][T10469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2433'. [ 170.978958][T10469] dummy0: entered promiscuous mode [ 171.112789][T10469] bond0: (slave dummy0): Releasing backup interface [ 171.120422][T10469] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 171.145550][T10469] bridge0: port 1(dummy0) entered blocking state [ 171.151972][T10469] bridge0: port 1(dummy0) entered disabled state [ 171.166363][T10469] dummy0: entered allmulticast mode [ 172.365095][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 172.371331][ T29] audit: type=1400 audit(1758203457.467:8307): avc: denied { create } for pid=10503 comm="syz.4.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.391976][ T29] audit: type=1400 audit(1758203457.467:8308): avc: denied { map_create } for pid=10503 comm="syz.4.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.411216][ T29] audit: type=1400 audit(1758203457.467:8309): avc: denied { map_read map_write } for pid=10503 comm="syz.4.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.481245][T10506] vlan0: left promiscuous mode [ 172.488261][T10506] bridge1: left allmulticast mode [ 172.657904][ T29] audit: type=1400 audit(1758203458.097:8310): avc: denied { write } for pid=10485 comm="syz.0.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.678391][ T29] audit: type=1400 audit(1758203458.097:8311): avc: denied { read } for pid=10485 comm="syz.0.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.698845][ T29] audit: type=1400 audit(1758203458.117:8312): avc: denied { create } for pid=10512 comm="syz.2.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.718651][ T29] audit: type=1400 audit(1758203458.117:8313): avc: denied { write } for pid=10512 comm="syz.2.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.738134][ T29] audit: type=1400 audit(1758203458.117:8314): avc: denied { getopt } for pid=10512 comm="syz.2.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.757886][ T29] audit: type=1400 audit(1758203458.167:8315): avc: denied { create } for pid=10514 comm="syz.1.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.777646][ T29] audit: type=1400 audit(1758203458.167:8316): avc: denied { ioctl } for pid=10514 comm="syz.1.2449" path="socket:[32212]" dev="sockfs" ino=32212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.862315][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.921786][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.360526][ T9995] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.383052][ T9995] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.401850][ T9995] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.421359][ T9995] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.440393][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2456'. [ 173.449679][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2456'. [ 173.481383][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2456'. [ 173.670824][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 174.449247][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.460952][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.945219][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2473'. [ 175.089863][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2473'. [ 175.124519][T10586] netlink: 'syz.4.2474': attribute type 1 has an invalid length. [ 175.132815][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2473'. [ 175.208549][T10590] tmpfs: Bad value for 'mpol' [ 175.325857][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.359468][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.685021][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.694729][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.387269][T10645] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2487'. [ 176.404388][T10638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2487'. [ 176.404920][T10645] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2487'. [ 176.798517][T10677] tmpfs: Unsupported parameter 'huge' [ 177.387162][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 177.387178][ T29] audit: type=1400 audit(1758203463.007:8367): avc: denied { connect } for pid=10689 comm="syz.4.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.414352][ T29] audit: type=1400 audit(1758203463.007:8368): avc: denied { write } for pid=10689 comm="syz.4.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.835139][ T29] audit: type=1400 audit(1758203464.217:8369): avc: denied { write } for pid=10709 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.855514][ T29] audit: type=1400 audit(1758203464.217:8370): avc: denied { nlmsg_write } for pid=10709 comm="syz.4.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.876205][ T29] audit: type=1400 audit(1758203464.227:8371): avc: denied { create } for pid=10711 comm="syz.6.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.895686][ T29] audit: type=1400 audit(1758203464.227:8372): avc: denied { connect } for pid=10711 comm="syz.6.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.511917][T10749] tipc: Enabling of bearer rejected, failed to enable media [ 179.785604][T10768] syzkaller0: entered promiscuous mode [ 179.791128][T10768] syzkaller0: entered allmulticast mode [ 179.875051][ T29] audit: type=1400 audit(1758203464.807:8373): avc: denied { name_bind } for pid=10725 comm="syz.1.2508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 179.898722][ T29] audit: type=1400 audit(1758203464.807:8374): avc: denied { node_bind } for pid=10725 comm="syz.1.2508" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 179.999291][ T29] audit: type=1400 audit(1758203465.617:8375): avc: denied { create } for pid=10784 comm="syz.2.2518" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.000745][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 180.020140][ T29] audit: type=1400 audit(1758203465.617:8376): avc: denied { append } for pid=10784 comm="syz.2.2518" name="file0" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.228919][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.238658][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.939527][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.948154][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.827664][T10838] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 181.861875][T10838] SELinux: failed to load policy [ 182.567752][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 182.567765][ T29] audit: type=1400 audit(1758203468.177:8384): avc: denied { write } for pid=10873 comm="syz.0.2539" name="fib_trie" dev="proc" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.846710][ T29] audit: type=1400 audit(1758203468.267:8385): avc: denied { create } for pid=10874 comm="syz.1.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.866315][ T29] audit: type=1400 audit(1758203468.287:8386): avc: denied { setopt } for pid=10874 comm="syz.1.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.885804][ T29] audit: type=1400 audit(1758203468.347:8387): avc: denied { block_suspend } for pid=10874 comm="syz.1.2538" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.108482][ T29] audit: type=1400 audit(1758203468.727:8388): avc: denied { create } for pid=10891 comm="syz.6.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.180825][T10892] netlink: 'syz.6.2541': attribute type 10 has an invalid length. [ 183.217860][ T29] audit: type=1400 audit(1758203468.727:8389): avc: denied { ioctl } for pid=10891 comm="syz.6.2541" path="socket:[32904]" dev="sockfs" ino=32904 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.285509][ T29] audit: type=1400 audit(1758203468.887:8390): avc: denied { read write } for pid=10908 comm="syz.6.2543" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 183.310821][ T29] audit: type=1400 audit(1758203468.887:8391): avc: denied { open } for pid=10908 comm="syz.6.2543" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 183.336956][ T29] audit: type=1400 audit(1758203468.907:8392): avc: denied { write } for pid=10910 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.666545][T10955] tipc: Enabling of bearer rejected, failed to enable media [ 183.790186][ T29] audit: type=1400 audit(1758203469.407:8393): avc: denied { bind } for pid=10969 comm="syz.6.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.816230][T10973] netlink: 'syz.0.2548': attribute type 8 has an invalid length. [ 184.640077][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.649576][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.248715][T10973] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.259578][T10991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2552'. [ 185.377168][T11015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11015 comm=syz.2.2556 [ 185.380993][T11016] tipc: Enabled bearer , priority 0 [ 185.397028][T11017] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2557'. [ 185.398104][T11016] syzkaller0: entered promiscuous mode [ 185.411536][T11016] syzkaller0: entered allmulticast mode [ 185.542109][T11016] tipc: Resetting bearer [ 185.600690][T11014] tipc: Resetting bearer [ 185.646860][T11014] tipc: Disabling bearer [ 185.732766][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2562'. [ 186.026345][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2567'. [ 186.036598][T11045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2567'. [ 186.042706][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.047393][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2567'. [ 186.054907][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.634116][T11059] loop4: detected capacity change from 0 to 128 [ 186.674586][T11059] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 186.716697][T11063] bridge0: entered promiscuous mode [ 186.721973][T11063] macsec1: entered promiscuous mode [ 186.730949][T11063] bridge0: port 3(macsec1) entered blocking state [ 186.737598][T11063] bridge0: port 3(macsec1) entered disabled state [ 186.745287][T11063] macsec1: entered allmulticast mode [ 186.750615][T11063] bridge0: entered allmulticast mode [ 186.757091][T11063] macsec1: left allmulticast mode [ 186.761593][T11059] syz.4.2572: attempt to access beyond end of device [ 186.761593][T11059] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 186.762132][T11063] bridge0: left allmulticast mode [ 186.786746][T11063] bridge0: left promiscuous mode [ 186.800843][ T9996] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 186.940338][T11077] netlink: 'syz.6.2579': attribute type 4 has an invalid length. [ 186.982210][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 187.021589][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 187.034698][T11084] loop4: detected capacity change from 0 to 2048 [ 187.097040][T11084] loop4: p4 < > [ 187.267587][T11094] loop6: detected capacity change from 0 to 164 [ 187.294582][T11094] Unable to read rock-ridge attributes [ 187.345910][T11097] netlink: 'syz.1.2586': attribute type 8 has an invalid length. [ 187.353905][T11097] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.403883][T11094] netlink: 'syz.6.2585': attribute type 10 has an invalid length. [ 187.422381][T11094] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.434897][T11094] Unable to read rock-ridge attributes [ 187.441375][T11094] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 187.537204][T11106] bridge0: entered promiscuous mode [ 187.542482][T11106] macsec1: entered promiscuous mode [ 187.548967][T11106] bridge0: port 3(macsec1) entered blocking state [ 187.555419][T11106] bridge0: port 3(macsec1) entered disabled state [ 187.562282][T11106] macsec1: entered allmulticast mode [ 187.567599][T11106] bridge0: entered allmulticast mode [ 187.573658][T11106] macsec1: left allmulticast mode [ 187.578739][T11106] bridge0: left allmulticast mode [ 187.584571][T11106] bridge0: left promiscuous mode [ 187.684758][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 187.704846][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 187.768418][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.779814][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.800691][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 187.800705][ T29] audit: type=1400 audit(1758203473.417:8412): avc: denied { create } for pid=11128 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.831089][ T29] audit: type=1400 audit(1758203473.427:8413): avc: denied { ioctl } for pid=11128 comm="+}[@" path="socket:[33968]" dev="sockfs" ino=33968 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.881595][T11131] netlink: 'syz.0.2600': attribute type 4 has an invalid length. [ 187.891272][ T29] audit: type=1400 audit(1758203473.517:8414): avc: denied { write } for pid=11128 comm="+}[@" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.926763][ T29] audit: type=1400 audit(1758203473.547:8415): avc: denied { create } for pid=11128 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.948945][T11129] loop6: detected capacity change from 0 to 512 [ 187.955699][ T29] audit: type=1400 audit(1758203473.567:8416): avc: denied { read } for pid=11128 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.974799][ T29] audit: type=1400 audit(1758203473.567:8417): avc: denied { setopt } for pid=11128 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.993858][ T29] audit: type=1400 audit(1758203473.577:8418): avc: denied { mounton } for pid=11128 comm="+}[@" path="/167/file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.023505][T11129] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 188.026953][T11139] bridge0: entered promiscuous mode [ 188.040517][T11139] macsec1: entered promiscuous mode [ 188.046279][T11139] bridge0: port 1(macsec1) entered blocking state [ 188.046312][T11129] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 188.052761][T11139] bridge0: port 1(macsec1) entered disabled state [ 188.066264][T11129] EXT4-fs (loop6): 1 orphan inode deleted [ 188.071107][T11139] macsec1: entered allmulticast mode [ 188.079942][T11129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.081959][T11139] bridge0: entered allmulticast mode [ 188.102783][T11129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.116715][T11139] macsec1: left allmulticast mode [ 188.121743][T11139] bridge0: left allmulticast mode [ 188.129776][ T29] audit: type=1400 audit(1758203473.727:8419): avc: denied { mount } for pid=11128 comm="+}[@" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.157498][T11139] bridge0: left promiscuous mode [ 188.616008][ T29] audit: type=1400 audit(1758203474.197:8420): avc: denied { kexec_image_load } for pid=11128 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 188.918466][T11157] netlink: 'syz.6.2608': attribute type 4 has an invalid length. [ 189.147054][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.157057][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.509612][T11181] loop4: detected capacity change from 0 to 512 [ 189.520788][T11181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 189.534069][T11181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 189.547350][T11181] EXT4-fs (loop4): 1 orphan inode deleted [ 189.553515][T11181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.567862][T11181] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.646887][T11194] netlink: 'syz.2.2621': attribute type 4 has an invalid length. [ 189.850022][ T29] audit: type=1400 audit(1758203475.467:8421): avc: denied { create } for pid=11220 comm="syz.6.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.947416][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.955945][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.084067][T11233] random: crng reseeded on system resumption [ 190.362371][T11253] __nla_validate_parse: 22 callbacks suppressed [ 190.362384][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'. [ 190.378422][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'. [ 190.389117][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'. [ 190.664026][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 190.859162][T11266] tmpfs: Bad value for 'mpol' [ 191.433481][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2654'. [ 191.462350][T11285] lo speed is unknown, defaulting to 1000 [ 191.467340][T11287] tipc: Enabled bearer , priority 0 [ 191.477608][T11287] syzkaller0: entered promiscuous mode [ 191.483149][T11287] syzkaller0: entered allmulticast mode [ 191.519999][T11287] tipc: Resetting bearer [ 191.544848][T11286] tipc: Resetting bearer [ 191.564793][T11286] tipc: Disabling bearer [ 191.628611][T11294] loop6: detected capacity change from 0 to 512 [ 191.642327][T11294] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 191.657550][T11294] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 191.678695][T11294] EXT4-fs (loop6): 1 orphan inode deleted [ 191.691643][T11294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.707921][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.766884][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2662'. [ 191.876462][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 191.888603][T11315] vxlan1: entered promiscuous mode [ 191.894741][T10023] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.903956][T10023] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.912715][ T9999] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.921046][ T9999] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.099556][T11318] netlink: 'syz.4.2667': attribute type 4 has an invalid length. [ 192.161963][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2670'. [ 192.183606][T11324] lo speed is unknown, defaulting to 1000 [ 192.350174][T11329] loop4: detected capacity change from 0 to 128 [ 192.358317][T11329] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 192.388590][T11329] syz.4.2672: attempt to access beyond end of device [ 192.388590][T11329] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 192.393138][T11331] syzkaller0: entered promiscuous mode [ 192.407379][T11331] syzkaller0: entered allmulticast mode [ 192.424889][ T9996] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 192.463896][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 192.513114][T11341] loop4: detected capacity change from 0 to 2048 [ 192.538300][T11341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.565657][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.591154][T11345] netlink: 'syz.1.2679': attribute type 4 has an invalid length. [ 192.781599][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 192.809361][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 192.809375][ T29] audit: type=1326 audit(1758203478.427:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e0cd7eba9 code=0x7ffc0000 [ 192.840919][ T29] audit: type=1326 audit(1758203478.427:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e0cd7ebe3 code=0x7ffc0000 [ 192.865174][ T29] audit: type=1326 audit(1758203478.427:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e0cd7d65f code=0x7ffc0000 [ 192.889485][ T29] audit: type=1326 audit(1758203478.427:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6e0cd7ec37 code=0x7ffc0000 [ 192.914032][ T29] audit: type=1326 audit(1758203478.427:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e0cd7d510 code=0x7ffc0000 [ 192.938662][ T29] audit: type=1326 audit(1758203478.427:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6e0cd7d80a code=0x7ffc0000 [ 192.963000][ T29] audit: type=1326 audit(1758203478.427:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0cd7eba9 code=0x7ffc0000 [ 192.999393][T11366] Invalid ELF header magic: != ELF [ 193.014176][ T29] audit: type=1326 audit(1758203478.537:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0cd7eba9 code=0x7ffc0000 [ 193.038992][ T29] audit: type=1326 audit(1758203478.607:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0cd7eba9 code=0x7ffc0000 [ 193.063633][ T29] audit: type=1326 audit(1758203478.607:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0cd7eba9 code=0x7ffc0000 [ 193.123273][T11370] macsec1: entered promiscuous mode [ 193.129810][T11370] bridge0: entered promiscuous mode [ 193.141923][T11370] bridge0: port 2(macsec1) entered blocking state [ 193.149451][T11370] bridge0: port 2(macsec1) entered disabled state [ 193.172040][T11370] macsec1: entered allmulticast mode [ 193.178516][T11370] bridge0: entered allmulticast mode [ 193.210711][T11370] macsec1: left allmulticast mode [ 193.216914][T11370] bridge0: left allmulticast mode [ 193.236337][T11370] bridge0: left promiscuous mode [ 193.343487][T11386] netlink: 'syz.0.2696': attribute type 18 has an invalid length. [ 193.358773][T11386] vxlan0: entered promiscuous mode [ 193.371405][T10009] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.381329][T11385] tipc: Enabled bearer , priority 0 [ 193.392362][T10009] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.403056][T11385] syzkaller0: entered promiscuous mode [ 193.409565][T11385] syzkaller0: entered allmulticast mode [ 193.431228][T10009] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.443716][T11385] tipc: Resetting bearer [ 193.457357][T10009] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.472245][T11384] tipc: Resetting bearer [ 193.487116][T11384] tipc: Disabling bearer [ 193.746643][T11416] tipc: Enabled bearer , priority 0 [ 193.761220][T11416] syzkaller0: entered promiscuous mode [ 193.766748][T11416] syzkaller0: entered allmulticast mode [ 193.776299][T11416] tipc: Resetting bearer [ 193.798521][T11415] tipc: Resetting bearer [ 193.808007][T11415] tipc: Disabling bearer [ 193.853112][T11432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.855245][T11433] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 193.864348][T11432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.878860][T11433] SELinux: failed to load policy [ 193.913420][T11435] Invalid ELF header magic: != ELF [ 195.049675][T11500] tipc: Enabled bearer , priority 0 [ 195.076433][T11500] syzkaller0: entered promiscuous mode [ 195.081970][T11500] syzkaller0: entered allmulticast mode [ 195.189040][T11500] tipc: Resetting bearer [ 195.237142][T11499] tipc: Resetting bearer [ 195.468190][T11499] tipc: Disabling bearer [ 195.538797][T11523] __nla_validate_parse: 5 callbacks suppressed [ 195.538810][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2731'. [ 195.768659][T11549] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 195.831022][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 196.116680][T11611] loop6: detected capacity change from 0 to 128 [ 196.144855][T11611] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 196.209199][T11611] syz.6.2738: attempt to access beyond end of device [ 196.209199][T11611] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 196.226037][T11624] netlink: 'syz.4.2742': attribute type 4 has an invalid length. [ 196.257374][ T9996] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 196.445059][T11641] random: crng reseeded on system resumption [ 197.109989][T11653] netlink: 'syz.0.2754': attribute type 10 has an invalid length. [ 197.253418][T11655] Invalid ELF header magic: != ELF [ 197.320891][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'. [ 197.500663][T11679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11679 comm=syz.0.2767 [ 197.517513][T11673] netlink: 'syz.1.2764': attribute type 4 has an invalid length. [ 197.549910][T11677] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:dc5c:4cff:fee0:6783 error=-28 [ 197.609159][T11677] infiniband !yz!: set down [ 197.613749][T11677] infiniband !yz!: added team_slave_0 [ 197.637082][T11677] RDS/IB: !yz!: added [ 197.644738][T11677] smc: adding ib device !yz! with port count 1 [ 197.652138][T11677] smc: ib device !yz! port 1 has pnetid [ 197.933172][T11705] random: crng reseeded on system resumption [ 198.252371][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 198.252387][ T29] audit: type=1326 audit(1758203483.867:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.6.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.358783][ T29] audit: type=1326 audit(1758203483.917:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.6.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.494573][ T29] audit: type=1400 audit(1758203484.107:8840): avc: denied { unmount } for pid=8580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 198.524027][T11710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11710 comm=syz.4.2778 [ 198.569073][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2780'. [ 198.578416][ T29] audit: type=1326 audit(1758203484.137:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.601994][ T29] audit: type=1326 audit(1758203484.137:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.625478][ T29] audit: type=1326 audit(1758203484.137:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.649048][ T29] audit: type=1326 audit(1758203484.137:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.672636][ T29] audit: type=1326 audit(1758203484.137:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.696169][ T29] audit: type=1326 audit(1758203484.137:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.719631][ T29] audit: type=1326 audit(1758203484.137:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.6.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2f4e8eba9 code=0x7ffc0000 [ 198.797147][T11708] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 198.864183][T11722] macsec1: entered promiscuous mode [ 198.869550][T11722] bridge0: entered promiscuous mode [ 198.882227][T11722] bridge0: port 2(macsec1) entered blocking state [ 198.889871][T11722] bridge0: port 2(macsec1) entered disabled state [ 198.897670][T11722] macsec1: entered allmulticast mode [ 198.902961][T11722] bridge0: entered allmulticast mode [ 198.931115][T11722] macsec1: left allmulticast mode [ 198.937180][T11722] bridge0: left allmulticast mode [ 198.943356][T11726] netlink: 'syz.6.2781': attribute type 4 has an invalid length. [ 198.954493][T11722] bridge0: left promiscuous mode [ 199.050930][T11740] loop6: detected capacity change from 0 to 128 [ 199.076382][T11740] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 199.098532][T11743] syzkaller0: entered promiscuous mode [ 199.104014][T11743] syzkaller0: entered allmulticast mode [ 199.169974][T11740] syz.6.2788: attempt to access beyond end of device [ 199.169974][T11740] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 199.237476][ T9999] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 199.257543][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 199.272474][T11763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11763 comm=syz.6.2792 [ 199.309602][T11766] loop6: detected capacity change from 0 to 164 [ 199.320744][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 199.341637][T11766] Unable to read rock-ridge attributes [ 199.464484][T11776] tipc: Enabling of bearer rejected, failed to enable media [ 199.502666][T11786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11786 comm=syz.2.2804 [ 199.518683][T11766] netlink: 'syz.6.2794': attribute type 10 has an invalid length. [ 199.533194][T11766] Unable to read rock-ridge attributes [ 199.542755][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2805'. [ 199.552584][T11766] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 199.698244][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 199.873843][T11800] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 199.942332][T11816] loop6: detected capacity change from 0 to 2048 [ 199.970487][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2816'. [ 199.996529][T11824] syzkaller0: entered promiscuous mode [ 200.002153][T11824] syzkaller0: entered allmulticast mode [ 200.034006][T11816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.137725][ T8580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.180109][T11835] netlink: 'syz.1.2820': attribute type 10 has an invalid length. [ 200.407431][T11874] netlink: 'syz.2.2837': attribute type 10 has an invalid length. [ 200.490723][T11886] tipc: Enabled bearer , priority 0 [ 200.499823][T11886] tipc: Resetting bearer [ 200.508030][T11885] tipc: Disabling bearer [ 201.108920][T11903] validate_nla: 1 callbacks suppressed [ 201.108969][T11903] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 201.123530][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2849'. [ 201.364026][T11909] netlink: 'syz.1.2851': attribute type 4 has an invalid length. [ 201.533394][T11936] program syz.0.2864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.544802][T11936] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.557900][T11936] netlink: '+}[@': attribute type 1 has an invalid length. [ 201.566143][T11936] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 201.577247][T11936] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.637566][T11936] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.697800][T11936] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.727108][T11940] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 201.734882][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 201.757396][T11936] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.771609][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2866'. [ 201.817695][ T9982] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.830165][ T9982] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.846191][ T9982] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.858234][ T9982] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.939307][T11954] Invalid ELF header magic: != ELF [ 202.056233][T11962] netlink: 'syz.1.2875': attribute type 10 has an invalid length. [ 202.115412][T11967] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 202.123191][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 202.258150][T11971] syzkaller0: entered promiscuous mode [ 202.263723][T11971] syzkaller0: entered allmulticast mode [ 202.401077][T11975] netlink: 'syz.4.2881': attribute type 4 has an invalid length. [ 202.543370][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 202.573001][T11989] loop6: detected capacity change from 0 to 2048 [ 202.626913][T11989] loop6: p4 < > [ 202.661521][T12002] syzkaller0: entered promiscuous mode [ 202.667054][T12002] syzkaller0: entered allmulticast mode [ 202.829013][T12009] netlink: 'syz.2.2895': attribute type 4 has an invalid length. [ 203.384491][T12046] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2904'. [ 203.406123][T12047] program syz.0.2905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.435639][T12047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.456104][T12047] netlink: '+}[@': attribute type 1 has an invalid length. [ 203.463375][T12047] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 203.499823][T12047] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.513208][T12052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12052 comm=syz.4.2907 [ 203.547936][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 203.547953][ T29] audit: type=1400 audit(1758203489.167:9156): avc: denied { mounton } for pid=12054 comm="syz.1.2909" path="/575/file0" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 203.630329][T12055] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.691641][T12047] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.711646][ T29] audit: type=1400 audit(1758203489.197:9157): avc: denied { mount } for pid=12054 comm="syz.1.2909" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.735003][ T29] audit: type=1400 audit(1758203489.197:9158): avc: denied { mounton } for pid=12054 comm="syz.1.2909" path="/575/bus" dev="tmpfs" ino=3021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.758669][ T29] audit: type=1326 audit(1758203489.197:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445f11eba9 code=0x7ffc0000 [ 203.783263][ T29] audit: type=1326 audit(1758203489.197:9160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445f11eba9 code=0x7ffc0000 [ 203.807688][ T29] audit: type=1400 audit(1758203489.197:9161): avc: denied { create } for pid=12054 comm="syz.1.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.829162][ T29] audit: type=1326 audit(1758203489.197:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445f11eba9 code=0x7ffc0000 [ 203.852664][ T29] audit: type=1326 audit(1758203489.247:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f445f11eba9 code=0x7ffc0000 [ 203.877142][ T29] audit: type=1400 audit(1758203489.247:9164): avc: denied { write } for pid=12054 comm="syz.1.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.898331][ T29] audit: type=1326 audit(1758203489.287:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445f11eba9 code=0x7ffc0000 [ 203.973168][T12074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2916'. [ 203.982837][T12047] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.996896][T12080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2918'. [ 204.047631][T12047] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.124053][ T9999] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.148910][ T8862] bond0: (slave syz_tun): Releasing backup interface [ 204.159056][T12095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12095 comm=syz.2.2921 [ 204.182967][T10008] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.202558][T10008] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.217934][ T9999] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.230886][T10008] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.257519][ T9999] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.286540][ T9999] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.309514][T12108] syzkaller0: entered promiscuous mode [ 204.316083][T12108] syzkaller0: entered allmulticast mode [ 204.385450][ T9999] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.413937][T12092] lo speed is unknown, defaulting to 1000 [ 204.502433][ T9999] dummy0: left allmulticast mode [ 204.518918][ T9999] dummy0: left promiscuous mode [ 204.524019][ T9999] bridge0: port 1(dummy0) entered disabled state [ 204.920150][T12128] program syz.6.2931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.930563][T12128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 204.940915][T12128] netlink: '+}[@': attribute type 1 has an invalid length. [ 204.968556][ T9999] bond0 (unregistering): (slave team0): Releasing backup interface [ 204.977290][ T9999] bond0 (unregistering): Released all slaves [ 204.985760][ T9999] bond1 (unregistering): Released all slaves [ 204.994749][ T9999] bond2 (unregistering): Released all slaves [ 205.002880][ T9999] bond3 (unregistering): Released all slaves [ 205.031155][T12128] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.063442][T12134] syzkaller0: entered promiscuous mode [ 205.069952][T12134] syzkaller0: entered allmulticast mode [ 205.080313][ T9999] tipc: Left network mode [ 205.108826][T12136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12136 comm=syz.0.2934 [ 205.148576][T12128] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.193947][ T9999] hsr_slave_0: left promiscuous mode [ 205.200475][ T9999] hsr_slave_1: left promiscuous mode [ 205.274338][T12128] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.313715][T12092] chnl_net:caif_netlink_parms(): no params data found [ 205.334239][T12128] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.386889][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.394058][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.411498][T12092] bridge_slave_0: entered allmulticast mode [ 205.418890][T12160] vhci_hcd: invalid port number 254 [ 205.424133][T12160] vhci_hcd: invalid port number 254 [ 205.470978][T12092] bridge_slave_0: entered promiscuous mode [ 205.496499][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.503625][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.521118][T12092] bridge_slave_1: entered allmulticast mode [ 205.528013][T12092] bridge_slave_1: entered promiscuous mode [ 205.550211][T12092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.563798][ T9982] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.574185][T12092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.607001][T10023] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.616185][T10023] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.624398][T10023] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.653538][T12092] team0: Port device team_slave_0 added [ 205.669340][T12092] team0: Port device team_slave_1 added [ 205.703759][T12092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.711768][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.738598][T12092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.754977][T12092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.762903][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.789839][T12092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.828586][T12092] hsr_slave_0: entered promiscuous mode [ 205.834752][T12092] hsr_slave_1: entered promiscuous mode [ 206.112142][T12092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.122066][T12092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.131501][T12092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.140549][T12092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.181565][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.196947][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.207998][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.215123][ T9999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.227812][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.234881][T10023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.297846][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.412372][T12092] veth0_vlan: entered promiscuous mode [ 206.421618][T12092] veth1_vlan: entered promiscuous mode [ 206.441214][T12092] veth0_macvtap: entered promiscuous mode [ 206.449982][T12092] veth1_macvtap: entered promiscuous mode [ 206.462940][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.477712][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.490287][T10023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.499238][T10023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.508162][ T9982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.526335][ T9982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.578321][T12242] loop4: detected capacity change from 0 to 128 [ 206.587093][T12242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 206.654622][T12242] syz.4.2919: attempt to access beyond end of device [ 206.654622][T12242] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 206.770514][ T9982] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 207.173800][T12270] Invalid ELF header magic: != ELF [ 207.186279][T12271] __nla_validate_parse: 2 callbacks suppressed [ 207.186295][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2974'. [ 207.264782][T12277] syzkaller1: entered promiscuous mode [ 207.271326][T12277] syzkaller1: entered allmulticast mode [ 207.944890][T12290] Invalid ELF header magic: != ELF [ 208.316892][T12306] loop6: detected capacity change from 0 to 128 [ 208.324205][T12306] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 208.379293][T12306] syz.6.2992: attempt to access beyond end of device [ 208.379293][T12306] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 208.427354][ T9979] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 208.477144][T12318] syzkaller0: entered promiscuous mode [ 208.482698][T12318] syzkaller0: entered allmulticast mode [ 208.587134][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 208.587150][ T29] audit: type=1326 audit(1758203494.207:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 208.628231][T12292] chnl_net:caif_netlink_parms(): no params data found [ 208.633640][ T29] audit: type=1326 audit(1758203494.237:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 208.657964][ T29] audit: type=1326 audit(1758203494.237:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 208.681006][ T29] audit: type=1326 audit(1758203494.237:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 208.684440][T12332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12332 comm=syz.4.3002 [ 208.727327][T12334] syzkaller0: entered promiscuous mode [ 208.732843][T12334] syzkaller0: entered allmulticast mode [ 208.762840][T12292] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.770991][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.779925][T12292] bridge_slave_0: entered allmulticast mode [ 208.787357][T12292] bridge_slave_0: entered promiscuous mode [ 208.794286][T12292] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.802440][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.810675][T12292] bridge_slave_1: entered allmulticast mode [ 208.817978][T12292] bridge_slave_1: entered promiscuous mode [ 208.837666][T12292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.849251][T12292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.871900][T12292] team0: Port device team_slave_0 added [ 208.879692][T12292] team0: Port device team_slave_1 added [ 208.901183][T12292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.909190][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.936232][T12292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.948911][T12292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.956863][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.982802][T12292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.012769][T12292] hsr_slave_0: entered promiscuous mode [ 209.019003][T12292] hsr_slave_1: entered promiscuous mode [ 209.024953][T12292] debugfs: 'hsr0' already exists in 'hsr' [ 209.030715][T12292] Cannot create hsr debugfs directory [ 209.093327][T12292] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.104283][T12292] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.109986][ T29] audit: type=1400 audit(1758203494.727:9408): avc: denied { bind } for pid=12375 comm="syz.4.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.133821][ T29] audit: type=1400 audit(1758203494.747:9409): avc: denied { listen } for pid=12375 comm="syz.4.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.154856][ T29] audit: type=1400 audit(1758203494.777:9410): avc: denied { accept } for pid=12375 comm="syz.4.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.174956][ T29] audit: type=1400 audit(1758203494.777:9411): avc: denied { read } for pid=12375 comm="syz.4.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.227680][T12292] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.237233][T12380] vhci_hcd: invalid port number 254 [ 209.237559][T12292] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.242701][T12380] vhci_hcd: invalid port number 254 [ 209.279874][ T29] audit: type=1326 audit(1758203494.897:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 209.306489][ T29] audit: type=1326 audit(1758203494.897:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.4.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 209.331767][T12292] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.341757][T12292] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.378469][T12292] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.388261][T12292] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.453868][T12292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.468389][T12292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.479999][T12292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.489287][T12401] vhci_hcd: invalid port number 254 [ 209.490920][T12292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.494506][T12401] vhci_hcd: invalid port number 254 [ 209.554241][T12292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.562790][T12415] validate_nla: 2 callbacks suppressed [ 209.562803][T12415] netlink: 'syz.0.3029': attribute type 4 has an invalid length. [ 209.566965][T12292] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.589192][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.596328][ T9980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.609523][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.616607][ T9980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.645847][T12292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.710830][T12292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.887526][T12441] Invalid ELF header magic: != ELF [ 210.038266][T12447] netlink: 'syz.1.3039': attribute type 4 has an invalid length. [ 210.054858][T12292] veth0_vlan: entered promiscuous mode [ 210.091677][T12292] veth1_vlan: entered promiscuous mode [ 210.161243][T12292] veth0_macvtap: entered promiscuous mode [ 210.182256][T12449] syzkaller0: entered promiscuous mode [ 210.187994][T12449] syzkaller0: entered allmulticast mode [ 210.199657][T12292] veth1_macvtap: entered promiscuous mode [ 210.227704][T12292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.240056][T12292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.252477][ T9987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.274364][ T9987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.290207][ T9987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.302192][ T9987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.449104][T10004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.506461][T10004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.526995][T12484] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 210.549102][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.558712][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.572947][T10004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.600268][T12466] chnl_net:caif_netlink_parms(): no params data found [ 210.609553][T10004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.657933][T12466] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.665069][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.673541][T12466] bridge_slave_0: entered allmulticast mode [ 210.681107][T12466] bridge_slave_0: entered promiscuous mode [ 210.688885][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.697014][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.704165][T12466] bridge_slave_1: entered allmulticast mode [ 210.710815][T12466] bridge_slave_1: entered promiscuous mode [ 210.735722][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.749869][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.765066][T12501] vlan0: entered promiscuous mode [ 210.786570][T12466] team0: Port device team_slave_0 added [ 210.797339][T12466] team0: Port device team_slave_1 added [ 210.818166][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.825148][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.851054][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.862692][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.870650][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.897313][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.909218][T10004] gretap0: left allmulticast mode [ 210.914257][T10004] gretap0: left promiscuous mode [ 210.920333][T10004] bridge0: port 3(gretap0) entered disabled state [ 210.929154][T10004] bridge_slave_1: left allmulticast mode [ 210.934828][T10004] bridge_slave_1: left promiscuous mode [ 210.940669][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.950811][T10004] bridge_slave_0: left allmulticast mode [ 210.957380][T10004] bridge_slave_0: left promiscuous mode [ 210.963039][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.974078][T12513] loop4: detected capacity change from 0 to 164 [ 210.981369][T12513] Unable to read rock-ridge attributes [ 211.026229][T12513] netlink: 'syz.4.3063': attribute type 10 has an invalid length. [ 211.068363][T10004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.077426][T12520] Unable to read rock-ridge attributes [ 211.083734][T12520] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 211.097517][T10004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.111855][T10004] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 211.132391][T10004] bond0 (unregistering): Released all slaves [ 211.141733][T10004] bond1 (unregistering): Released all slaves [ 211.153011][T10004] bond2 (unregistering): Released all slaves [ 211.162191][T10004] bond3 (unregistering): Released all slaves [ 211.180439][T12513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.213800][T12527] bridge: RTM_NEWNEIGH with invalid ether address [ 211.243176][T10004] tipc: Left network mode [ 211.256749][T12466] hsr_slave_0: entered promiscuous mode [ 211.267654][T12466] hsr_slave_1: entered promiscuous mode [ 211.280300][T12466] debugfs: 'hsr0' already exists in 'hsr' [ 211.286123][T12466] Cannot create hsr debugfs directory [ 211.334079][T12543] netlink: 'syz.2.3072': attribute type 4 has an invalid length. [ 211.362004][T10004] hsr_slave_0: left promiscuous mode [ 211.372105][T10004] hsr_slave_1: left promiscuous mode [ 211.379745][T10004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.395141][T10004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.549075][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.560018][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.001196][T12579] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.123021][T12583] bridge: RTM_NEWNEIGH with invalid ether address [ 212.284462][T12466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.304514][T12466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.319236][T12466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.357498][T12466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.430671][T12622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.440389][T12466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.461387][T12622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.462774][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.486717][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.493783][ T9979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.510381][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.517532][ T9979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.537568][T12466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.548903][T12466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.606641][T12631] !yz!: rxe_newlink: already configured on team_slave_0 [ 212.629500][T12466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.692285][T12466] veth0_vlan: entered promiscuous mode [ 212.702678][T12466] veth1_vlan: entered promiscuous mode [ 212.709027][T12649] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3101'. [ 212.723461][T12466] veth0_macvtap: entered promiscuous mode [ 212.732041][T12466] veth1_macvtap: entered promiscuous mode [ 212.744292][T12466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.756378][T12466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.769070][T10004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.778909][T10004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.805210][T10004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.824152][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3103'. [ 212.833671][T10004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.913299][T12667] tipc: Started in network mode [ 212.919270][T12667] tipc: Node identity 6a943d70b04c, cluster identity 4711 [ 212.927408][T12667] tipc: Enabled bearer , priority 0 [ 212.985872][T12667] syzkaller0: entered promiscuous mode [ 212.991387][T12667] syzkaller0: entered allmulticast mode [ 213.008615][T12666] tipc: Resetting bearer [ 213.029406][T12666] tipc: Disabling bearer [ 213.150181][T12676] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.185056][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3113'. [ 213.250029][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.266863][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.272956][T12696] loop6: detected capacity change from 0 to 2048 [ 213.276110][T12697] syzkaller0: entered promiscuous mode [ 213.286468][T12697] syzkaller0: entered allmulticast mode [ 213.298113][T12699] tmpfs: Bad value for 'mpol' [ 213.307844][T12696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.336886][ T8580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.698949][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 213.698966][ T29] audit: type=1400 audit(1758203499.257:9633): avc: denied { write } for pid=12705 comm="syz.1.3124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 213.854041][ T29] audit: type=1400 audit(1758203499.467:9634): avc: denied { map_create } for pid=12708 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.864003][T12718] random: crng reseeded on system resumption [ 213.874652][ T29] audit: type=1400 audit(1758203499.467:9635): avc: denied { bpf } for pid=12708 comm="syz.2.3125" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.956331][ T29] audit: type=1400 audit(1758203499.467:9636): avc: denied { map_read map_write } for pid=12708 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.977239][ T29] audit: type=1400 audit(1758203499.467:9637): avc: denied { prog_load } for pid=12708 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.997448][ T29] audit: type=1400 audit(1758203499.467:9638): avc: denied { perfmon } for pid=12708 comm="syz.2.3125" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.019436][ T29] audit: type=1400 audit(1758203499.467:9639): avc: denied { read append } for pid=12708 comm="syz.2.3125" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.044260][ T29] audit: type=1400 audit(1758203499.467:9640): avc: denied { ioctl open } for pid=12708 comm="syz.2.3125" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.069334][ T29] audit: type=1400 audit(1758203499.527:9641): avc: denied { execmem } for pid=12717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 214.089841][ T29] audit: type=1400 audit(1758203499.567:9642): avc: denied { read } for pid=12719 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.175721][ T9979] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.256119][T12723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3127'. [ 214.327352][ T9979] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.417770][ T9979] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.497844][ T9979] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.550214][T12744] loop6: detected capacity change from 0 to 2048 [ 214.588825][T12744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.604893][ T9979] batadv1: left allmulticast mode [ 214.610042][ T9979] batadv1: left promiscuous mode [ 214.615195][ T9979] bridge0: port 3(batadv1) entered disabled state [ 214.647360][ T9979] bridge_slave_1: left allmulticast mode [ 214.653021][ T9979] bridge_slave_1: left promiscuous mode [ 214.658773][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.668716][ T8580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.683478][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.692190][ T9979] bridge_slave_0: left allmulticast mode [ 214.697909][ T9979] bridge_slave_0: left promiscuous mode [ 214.703600][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.705281][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.115402][ T9979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.132281][ T9979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.151691][ T9979] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 215.171896][ T9979] bond0 (unregistering): Released all slaves [ 215.228769][ T9979] tipc: Left network mode [ 215.717019][T12719] chnl_net:caif_netlink_parms(): no params data found [ 215.774726][T12863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'. [ 215.847735][ T9979] hsr_slave_0: left promiscuous mode [ 215.853427][ T9979] hsr_slave_1: left promiscuous mode [ 215.860990][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.869138][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.939157][ T9979] team0 (unregistering): Port device team_slave_1 removed [ 215.957006][ T9979] team0 (unregistering): Port device team_slave_0 removed [ 215.985859][T12890] netlink: 'syz.2.3147': attribute type 8 has an invalid length. [ 216.018618][T12890] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 216.079409][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.086531][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.094108][T12719] bridge_slave_0: entered allmulticast mode [ 216.100918][T12719] bridge_slave_0: entered promiscuous mode [ 216.107891][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.115056][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.122342][T12719] bridge_slave_1: entered allmulticast mode [ 216.128868][T12719] bridge_slave_1: entered promiscuous mode [ 216.157906][T12719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.169903][T12719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.210457][T12912] !yz!: rxe_newlink: already configured on team_slave_0 [ 216.210499][T12719] team0: Port device team_slave_0 added [ 216.224602][T12719] team0: Port device team_slave_1 added [ 216.243394][T12719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.250408][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.276438][T12719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.287955][T12719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.294898][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.320842][T12719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.348603][T12719] hsr_slave_0: entered promiscuous mode [ 216.354854][T12719] hsr_slave_1: entered promiscuous mode [ 216.362380][T12719] debugfs: 'hsr0' already exists in 'hsr' [ 216.368171][T12719] Cannot create hsr debugfs directory [ 216.430824][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3154'. [ 216.473481][T12933] netlink: 'syz.6.3155': attribute type 4 has an invalid length. [ 216.609181][T12940] syzkaller0: entered promiscuous mode [ 216.614671][T12940] syzkaller0: entered allmulticast mode [ 216.705596][T12719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.786212][T12719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.795064][T12719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.804176][T12719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.817554][T12947] bridge: RTM_NEWNEIGH with invalid ether address [ 216.845335][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3164'. [ 216.860330][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.874276][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.887745][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.894873][ T9987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.908190][T10004] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.915259][T10004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.941901][T12719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.943344][T12967] netlink: 'syz.4.3165': attribute type 8 has an invalid length. [ 216.964498][T12967] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 216.978622][T12966] netlink: 'syz.6.3167': attribute type 4 has an invalid length. [ 217.021355][T12719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.079875][T12719] veth0_vlan: entered promiscuous mode [ 217.087751][T12719] veth1_vlan: entered promiscuous mode [ 217.102539][T12719] veth0_macvtap: entered promiscuous mode [ 217.109940][T12719] veth1_macvtap: entered promiscuous mode [ 217.120281][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.131643][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.142769][ T9987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.151962][ T9987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.161242][ T9987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.171422][T10004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.922447][T12997] loop6: detected capacity change from 0 to 164 [ 217.929716][T12997] Unable to read rock-ridge attributes [ 217.966726][T12997] netlink: 'syz.6.3174': attribute type 10 has an invalid length. [ 217.974906][T12997] Unable to read rock-ridge attributes [ 217.981623][T12997] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.086210][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3178'. [ 218.173719][T13015] netlink: 'syz.0.3183': attribute type 4 has an invalid length. [ 218.194777][T13020] loop6: detected capacity change from 0 to 2048 [ 218.207169][T13020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.239066][ T8580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.397283][T13036] syzkaller0: entered promiscuous mode [ 218.402785][T13036] syzkaller0: entered allmulticast mode [ 218.602924][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.620931][T13041] tipc: Enabling of bearer rejected, failed to enable media [ 218.632961][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.641373][T13041] syzkaller0: entered promiscuous mode [ 218.646877][T13041] syzkaller0: entered allmulticast mode [ 218.772433][T13043] bridge0: entered promiscuous mode [ 218.777892][T13043] macsec1: entered promiscuous mode [ 218.838511][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 218.838527][ T29] audit: type=1326 audit(1758203504.457:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.839236][T13047] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 218.845472][ T29] audit: type=1326 audit(1758203504.457:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.898358][ T29] audit: type=1326 audit(1758203504.457:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.921847][ T29] audit: type=1326 audit(1758203504.457:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.946018][ T29] audit: type=1326 audit(1758203504.497:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.969520][ T29] audit: type=1326 audit(1758203504.497:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 218.993000][ T29] audit: type=1326 audit(1758203504.497:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 219.016459][ T29] audit: type=1326 audit(1758203504.497:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 219.039987][ T29] audit: type=1326 audit(1758203504.497:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b17aeba9 code=0x7ffc0000 [ 219.066077][ T29] audit: type=1326 audit(1758203504.677:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13048 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 219.121582][T13053] Invalid ELF header magic: != ELF [ 219.177645][T13058] syzkaller0: entered promiscuous mode [ 219.183211][T13058] syzkaller0: entered allmulticast mode [ 219.281632][T13078] loop6: detected capacity change from 0 to 128 [ 219.288738][T13078] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 219.323774][T13078] syz.6.3210: attempt to access beyond end of device [ 219.323774][T13078] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 219.346633][ T9987] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 219.396041][T13087] bridge: RTM_NEWNEIGH with invalid ether address [ 219.432920][T13089] !yz!: rxe_newlink: already configured on team_slave_0 [ 219.535402][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.544022][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.890928][T13097] program syz.4.3218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.900383][T13097] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 219.910592][T13097] netlink: '+}[@': attribute type 1 has an invalid length. [ 219.917888][T13097] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 219.928958][T13097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.987816][T13097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.047899][T13097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.088589][T13097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.106869][T13103] loop6: detected capacity change from 0 to 128 [ 220.114235][T13103] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.151414][T13103] syz.6.3221: attempt to access beyond end of device [ 220.151414][T13103] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 220.177066][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.185431][T13111] bridge: RTM_NEWNEIGH with invalid ether address [ 220.185609][T10016] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.204934][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.213792][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.224096][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.294464][T13117] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 220.320328][T13121] loop6: detected capacity change from 0 to 512 [ 220.330611][T13121] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 220.342787][T13121] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 220.354927][T13121] EXT4-fs (loop6): 1 orphan inode deleted [ 220.361173][T13121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.382433][T13121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.500659][T13133] tipc: Enabling of bearer rejected, failed to enable media [ 220.510916][T13133] syzkaller0: entered promiscuous mode [ 220.516509][T13133] syzkaller0: entered allmulticast mode [ 220.668357][T13141] loop6: detected capacity change from 0 to 128 [ 220.676753][T13141] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.719271][T13141] syz.6.3236: attempt to access beyond end of device [ 220.719271][T13141] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 220.747024][T10016] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.959887][T13151] loop6: detected capacity change from 0 to 512 [ 220.969046][T13151] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 220.981990][T13151] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 220.994818][T13151] EXT4-fs (loop6): 1 orphan inode deleted [ 221.001647][T13151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.016078][T13151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.163351][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.171885][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.244317][T13175] netlink: 'syz.0.3252': attribute type 4 has an invalid length. [ 221.769940][T13208] syzkaller0: entered promiscuous mode [ 221.775538][T13208] syzkaller0: entered allmulticast mode [ 222.114119][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.122980][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.249328][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'. [ 222.570918][T13245] netlink: 'syz.2.3282': attribute type 4 has an invalid length. [ 222.621922][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3284'. [ 222.740527][T13264] tipc: Enabled bearer , priority 0 [ 222.756535][T13264] tipc: Resetting bearer [ 222.800952][T13262] tipc: Disabling bearer [ 222.849256][T13270] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 222.996523][T13261] random: crng reseeded on system resumption [ 223.004025][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.039539][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.058222][T13277] netlink: 'syz.1.3297': attribute type 4 has an invalid length. [ 223.083335][T13283] netlink: 'syz.6.3299': attribute type 4 has an invalid length. [ 223.361109][T13315] netlink: 'syz.6.3312': attribute type 4 has an invalid length. [ 223.687017][T13321] loop6: detected capacity change from 0 to 512 [ 223.718536][T13324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3314'. [ 223.850846][T13321] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 223.869759][T13321] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 223.870323][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 223.870338][ T29] audit: type=1326 audit(1758203509.487:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 223.906800][T13321] EXT4-fs (loop6): 1 orphan inode deleted [ 223.911340][ T29] audit: type=1326 audit(1758203509.487:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 223.942280][ T29] audit: type=1326 audit(1758203509.517:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 223.945525][T13321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.965979][ T29] audit: type=1326 audit(1758203509.517:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.001490][ T29] audit: type=1326 audit(1758203509.517:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.025051][ T29] audit: type=1326 audit(1758203509.517:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.048698][ T29] audit: type=1326 audit(1758203509.517:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.072256][ T29] audit: type=1326 audit(1758203509.517:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.081109][T13321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.095812][ T29] audit: type=1326 audit(1758203509.517:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.128323][ T29] audit: type=1326 audit(1758203509.517:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13323 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe4d0eba9 code=0x7ffc0000 [ 224.282090][T13333] netlink: 'syz.2.3316': attribute type 4 has an invalid length. [ 224.345201][T13337] netlink: 'syz.1.3319': attribute type 4 has an invalid length. [ 224.401067][T13352] syzkaller1: entered promiscuous mode [ 224.406738][T13352] syzkaller1: entered allmulticast mode [ 224.407909][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.421128][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.421752][T13346] tipc: Enabling of bearer rejected, failed to enable media [ 224.443065][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 224.453046][T13346] syzkaller0: entered promiscuous mode [ 224.458613][T13346] syzkaller0: entered allmulticast mode [ 224.571224][T13366] loop6: detected capacity change from 0 to 164 [ 224.578509][T13366] Unable to read rock-ridge attributes [ 224.624963][T13366] Unable to read rock-ridge attributes [ 224.631099][T13366] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 224.641981][T13370] netlink: 'syz.2.3335': attribute type 4 has an invalid length. [ 224.695682][T13375] program syz.2.3337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.705502][T13375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 224.720435][T13375] netlink: '+}[@': attribute type 1 has an invalid length. [ 224.727734][T13375] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 224.737764][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3338'. [ 224.748983][T13375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.804313][T13375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.879373][T13375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.939779][T13375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.958125][T13380] syzkaller0: entered promiscuous mode [ 224.963663][T13380] syzkaller0: entered allmulticast mode [ 225.004959][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.016856][T10016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.027605][T10016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.039319][T10016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.072158][T13386] bridge0: entered promiscuous mode [ 225.080528][T13386] macsec1: entered promiscuous mode [ 225.087876][T13386] bridge0: port 3(macsec1) entered blocking state [ 225.094351][T13386] bridge0: port 3(macsec1) entered disabled state [ 225.101202][T13386] macsec1: entered allmulticast mode [ 225.106536][T13386] bridge0: entered allmulticast mode [ 225.113145][T13386] macsec1: left allmulticast mode [ 225.118281][T13386] bridge0: left allmulticast mode [ 225.123497][T13386] bridge0: left promiscuous mode [ 225.135825][T13388] tipc: Enabling of bearer rejected, failed to enable media [ 225.144514][T13388] syzkaller0: entered promiscuous mode [ 225.150025][T13388] syzkaller0: entered allmulticast mode [ 225.276626][T13397] netlink: 'syz.4.3347': attribute type 4 has an invalid length. [ 225.292361][T13406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.299877][T13404] loop6: detected capacity change from 0 to 2048 [ 225.308423][T13406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.312622][T13402] bridge: RTM_NEWNEIGH with invalid ether address [ 225.342553][T13404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.355693][T13412] syzkaller0: entered promiscuous mode [ 225.359805][T13415] loop4: detected capacity change from 0 to 164 [ 225.361174][T13412] syzkaller0: entered allmulticast mode [ 225.373978][T13415] Unable to read rock-ridge attributes [ 225.386151][ T8580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.438389][T13415] Unable to read rock-ridge attributes [ 225.444490][T13415] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 225.458214][T13417] loop6: detected capacity change from 0 to 512 [ 225.467302][T13417] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 225.490249][T13417] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 225.502522][T13417] EXT4-fs (loop6): 1 orphan inode deleted [ 225.508850][T13417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.510284][T13425] loop4: detected capacity change from 0 to 128 [ 225.524199][T13417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.556239][T13425] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 225.586282][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3362'. [ 225.620373][T13425] syz.4.3358: attempt to access beyond end of device [ 225.620373][T13425] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 225.644219][ T9987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 225.674524][T13441] syzkaller1: entered promiscuous mode [ 225.680038][T13441] syzkaller1: entered allmulticast mode [ 225.680197][T13442] loop6: detected capacity change from 0 to 2048 [ 225.715600][T13442] loop6: p4 < > [ 225.771367][T13448] tipc: Enabled bearer , priority 0 [ 225.778469][T13448] syzkaller0: entered promiscuous mode [ 225.783928][T13448] syzkaller0: entered allmulticast mode [ 225.793931][T13448] tipc: Resetting bearer [ 225.801006][T13447] tipc: Resetting bearer [ 225.809188][T13447] tipc: Disabling bearer [ 225.880306][T13450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 226.472700][T13467] loop6: detected capacity change from 0 to 128 [ 226.483403][T13467] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 226.531856][T13467] syz.6.3376: attempt to access beyond end of device [ 226.531856][T13467] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 226.550939][T13469] validate_nla: 2 callbacks suppressed [ 226.550974][T13469] netlink: 'syz.0.3377': attribute type 4 has an invalid length. [ 226.564786][T10016] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 226.601337][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.611733][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.699037][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'. [ 226.841074][T13492] vlan0: entered promiscuous mode [ 226.864392][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3389'. [ 226.881522][T13496] loop4: detected capacity change from 0 to 2048 [ 226.945464][T13496] loop4: p4 < > [ 226.957992][T13498] Invalid ELF header magic: != ELF [ 227.000310][T13501] bridge0: entered promiscuous mode [ 227.005683][T13501] macsec1: entered promiscuous mode [ 227.011947][T13501] bridge0: port 3(macsec1) entered blocking state [ 227.018430][T13501] bridge0: port 3(macsec1) entered disabled state [ 227.024933][T13501] macsec1: entered allmulticast mode [ 227.030235][T13501] bridge0: entered allmulticast mode [ 227.036066][T13501] macsec1: left allmulticast mode [ 227.041093][T13501] bridge0: left allmulticast mode [ 227.046634][T13501] bridge0: left promiscuous mode [ 227.101244][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 227.147878][T13507] netlink: 'syz.0.3393': attribute type 4 has an invalid length. [ 227.292952][T13523] vlan0: entered promiscuous mode [ 227.568131][T13530] random: crng reseeded on system resumption [ 227.717497][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 227.882520][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.935724][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.163056][T13552] bridge: RTM_NEWNEIGH with invalid ether address [ 228.187000][T13554] bridge0: entered promiscuous mode [ 228.229976][T13554] macsec1: entered promiscuous mode [ 228.247229][T13554] bridge0: port 3(macsec1) entered blocking state [ 228.253751][T13554] bridge0: port 3(macsec1) entered disabled state [ 228.306667][T13554] macsec1: entered allmulticast mode [ 228.312005][T13554] bridge0: entered allmulticast mode [ 228.345585][T13554] macsec1: left allmulticast mode [ 228.350633][T13554] bridge0: left allmulticast mode [ 228.376073][T13554] bridge0: left promiscuous mode [ 228.601016][T13572] random: crng reseeded on system resumption [ 228.638412][T13573] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 228.702183][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3427'. [ 228.732398][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.750806][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.991494][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 228.991507][ T29] audit: type=1326 audit(1758203514.607:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.075452][ T29] audit: type=1326 audit(1758203514.647:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.194842][ T29] audit: type=1326 audit(1758203514.807:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.221393][ T29] audit: type=1326 audit(1758203514.837:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.261700][ T29] audit: type=1326 audit(1758203514.877:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.315332][ T29] audit: type=1326 audit(1758203514.877:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.339014][ T29] audit: type=1326 audit(1758203514.877:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.362764][ T29] audit: type=1326 audit(1758203514.897:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.386392][ T29] audit: type=1326 audit(1758203514.897:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.409979][ T29] audit: type=1326 audit(1758203514.897:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13585 comm="syz.2.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fdee3a4eba9 code=0x7ffc0000 [ 229.509563][T13611] program syz.6.3436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.545285][T13611] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 229.566131][T13619] Invalid ELF header magic: != ELF [ 229.687163][T13611] netlink: '+}[@': attribute type 1 has an invalid length. [ 229.694500][T13611] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 229.750826][T13611] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.894183][T13628] syzkaller0: entered promiscuous mode [ 229.899741][T13628] syzkaller0: entered allmulticast mode [ 229.968575][T13611] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.997042][T13632] loop4: detected capacity change from 0 to 128 [ 230.039865][T13632] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 230.067736][T13611] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.158269][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'. [ 230.176773][T13611] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.190730][T13632] syz.4.3445: attempt to access beyond end of device [ 230.190730][T13632] loop4: rw=0, sector=97, nr_sectors = 944 limit=128 [ 230.217064][T10004] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 230.235639][ T9980] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.257937][ T9980] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.272520][ T9980] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.281640][ T9980] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.487731][T13651] loop6: detected capacity change from 0 to 2048 [ 230.517320][T13651] loop6: p4 < > [ 230.604405][T13659] tipc: Enabling of bearer rejected, failed to enable media [ 230.616063][T13659] syzkaller0: entered promiscuous mode [ 230.621537][T13659] syzkaller0: entered allmulticast mode [ 230.799673][T13671] program syz.1.3460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.809298][T13671] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 230.820234][T13671] netlink: '+}[@': attribute type 1 has an invalid length. [ 230.827520][T13671] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 230.858686][T13671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.877822][T13673] bridge0: entered promiscuous mode [ 230.883365][T13673] macsec1: entered promiscuous mode [ 230.892469][T13673] bridge0: port 3(macsec1) entered blocking state [ 230.898955][T13673] bridge0: port 3(macsec1) entered disabled state [ 230.907071][T13673] macsec1: entered allmulticast mode [ 230.912373][T13673] bridge0: entered allmulticast mode [ 230.918523][T13673] macsec1: left allmulticast mode [ 230.923550][T13673] bridge0: left allmulticast mode [ 230.929017][T13673] bridge0: left promiscuous mode [ 230.937063][T13666] netlink: 'syz.0.3459': attribute type 4 has an invalid length. [ 230.946991][T13671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.994931][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3464'. [ 231.030258][T13671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.058416][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 231.137559][T13671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.205302][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 231.268973][ T9980] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.280716][ T9980] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.297609][ T9980] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.307134][ T9980] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.316471][T13693] netlink: 'syz.4.3469': attribute type 8 has an invalid length. [ 231.324226][T13693] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.510877][T13705] netlink: 'syz.1.3474': attribute type 4 has an invalid length. [ 231.833986][T13718] tipc: Started in network mode [ 231.838939][T13718] tipc: Node identity 2a0402ce1f8b, cluster identity 4711 [ 231.846189][T13718] tipc: Enabled bearer , priority 0 [ 231.864047][T13718] syzkaller0: entered promiscuous mode [ 231.869607][T13718] syzkaller0: entered allmulticast mode [ 231.891497][T13718] tipc: Resetting bearer [ 231.904872][T13717] tipc: Resetting bearer [ 231.919917][T13717] tipc: Disabling bearer [ 232.013502][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3482'. [ 232.215473][T13733] netlink: 'syz.0.3486': attribute type 4 has an invalid length. [ 232.262266][T13735] Invalid ELF header magic: != ELF [ 232.492126][T13755] ================================================================== [ 232.500251][T13755] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 232.507300][T13755] [ 232.509626][T13755] write to 0xffff88813afa84c8 of 8 bytes by task 9987 on cpu 1: [ 232.517251][T13755] release_task+0x6f9/0xb60 [ 232.521779][T13755] wait_consider_task+0x114a/0x1660 [ 232.526974][T13755] __do_wait+0x34a/0x510 [ 232.531217][T13755] do_wait+0xb7/0x260 [ 232.535199][T13755] kernel_wait+0x51/0xc0 [ 232.539441][T13755] call_usermodehelper_exec_work+0x9c/0x160 [ 232.545335][T13755] process_scheduled_works+0x4cb/0x9d0 [ 232.550797][T13755] worker_thread+0x582/0x770 [ 232.555390][T13755] kthread+0x489/0x510 [ 232.559454][T13755] ret_from_fork+0x11f/0x1b0 [ 232.564045][T13755] ret_from_fork_asm+0x1a/0x30 [ 232.568814][T13755] [ 232.571128][T13755] read to 0xffff88813afa8000 of 3264 bytes by task 13755 on cpu 0: [ 232.579005][T13755] memcpy_and_pad+0x48/0x80 [ 232.583504][T13755] arch_dup_task_struct+0x2c/0x40 [ 232.588531][T13755] dup_task_struct+0x83/0x6a0 [ 232.593209][T13755] copy_process+0x399/0x2000 [ 232.597803][T13755] kernel_clone+0x16c/0x5c0 [ 232.602307][T13755] __se_sys_clone3+0x1c2/0x200 [ 232.607068][T13755] __x64_sys_clone3+0x31/0x40 [ 232.611743][T13755] x64_sys_call+0x1fc9/0x2ff0 [ 232.616411][T13755] do_syscall_64+0xd2/0x200 [ 232.620919][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.626804][T13755] [ 232.629118][T13755] Reported by Kernel Concurrency Sanitizer on: [ 232.635255][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.6.3495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.645059][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.655120][T13755] ================================================================== [ 232.668651][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 232.700736][T13746] random: crng reseeded on system resumption