last executing test programs: 5.479067538s ago: executing program 3 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 5.444708851s ago: executing program 3 (id=2132): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x40020200) 3.429589017s ago: executing program 2 (id=2154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 3.346298624s ago: executing program 2 (id=2155): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 3.256274991s ago: executing program 2 (id=2157): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="f72bacc3ca1aaadf08e239411cbcf4b2ef918084f500db36e2ef38b56d756f04", 0x20, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000957273091ff8fe3bb844d787724e59ae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltaction={0x110, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x110}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x1000}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x2e0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) 3.159363509s ago: executing program 0 (id=2160): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="f72bacc3ca1aaadf08e239411cbcf4b2ef918084f500db36e2ef38b56d756f04", 0x20, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000957273091ff8fe3bb844d787724e59ae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltaction={0x120, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x120}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x1000}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x2e0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) 2.962823726s ago: executing program 2 (id=2162): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x401}, [@TCA_NETEM_ECN={0x8}]}}}]}, 0x54}}, 0x8000) 2.90592237s ago: executing program 2 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) 2.534049751s ago: executing program 3 (id=2164): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="036157dd", 0x4}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="4d5722d585a850bb45d5cde008004590e8280000000000029078000000"], 0x0) 2.475483876s ago: executing program 3 (id=2166): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf", 0x1f}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="286204a4d9bf62e40000000060cdbd15b1476b0000000000000000005210f9bd79bb62b6ed60e0bc3d955d9ab26cf0c1940e4768cd521f518c29b5f9555f3ef748d7551463c039cdadeb86e6ad2ea662f9a66616168f731dfcbbdae0b37ad731668c4c9f92039b88b8cd9ff930fd3861f1ccfcc5f516fb942cf61be7ec082822b65fcca9316ff788201c68870b751b8b8f5ba321149085eccdb2abbe8a663d14d3709c60334eb139a6b64bab9e9bcfc3e31cd58f08ca28be35423361b9755440aa0ee9d827ecbdccd24d3a66cbfea5c45d4d942cfabb763c53458396ccd8726e22e4ad9d6408fbf001b6bb74a8ba9712bd5e7c92956f799d0b1cd35ae8060163ad019e9478a99734a469dc614f60fa581056bc16f058c731425d37857b5dec9f61c919d3dbc8617f8fe1dfb5914f9e"], 0x50) r2 = socket$inet(0x2, 0x1, 0x100) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f000053e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000a828c3e54727f16b558374b69a1d10bfcc7b5fee608366ef5a93bcd78e77ea7f1ae58dbb040a8f987ae356bfb25045554fe928791d699b19f1d7a1ca300d8659a0a09a1a825003ebd282d35a9ef4eb5457eb63cd6ccd3126e050aafffd0ebaaa3b3f6a95cf056091154a6e8b66697c13b177ff6333ff768ec9d9c0e6b380aa0a606d2b22a8f3dad026e3526b88964d42a4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r9, 0x0, 0xb}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x1, 0xfffffffa, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x0, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x2, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x55, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x5, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x1, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0xa, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x7fffffff, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0x1d, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0x3, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x2, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x4, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11}, 0x9) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x0) 2.465148387s ago: executing program 0 (id=2168): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) unshare(0x40020200) 2.409934521s ago: executing program 4 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x43}, 0x18) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 2.048192271s ago: executing program 3 (id=2173): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xb, 0x3, 0x7, 0xe2, 0x400}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x200040b4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x4000336, 0x40, 0x3e5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0xfffe}, [{0x3, 0xf97, 0x4, 0xd, 0x8001c8, 0xe2, 0xfe10, 0x3}], "", ['\x00']}, 0x178) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.024993033s ago: executing program 2 (id=2174): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) unshare(0x40020200) 2.023811893s ago: executing program 3 (id=2176): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x100) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd']) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.598120008s ago: executing program 0 (id=2181): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, 0x0, &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.597537278s ago: executing program 4 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0x0) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.553900951s ago: executing program 4 (id=2183): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 1.171140113s ago: executing program 4 (id=2184): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf", 0x1f}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = socket$inet(0x2, 0x1, 0x100) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f000053e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000a828c3e54727f16b558374b69a1d10bfcc7b5fee608366ef5a93bcd78e77ea7f1ae58dbb040a8f987ae356bfb25045554fe928791d699b19f1d7a1ca300d8659a0a09a1a825003ebd282d35a9ef4eb5457eb63cd6ccd3126e050aafffd0ebaaa3b3f6a95cf056091154a6e8b66697c13b177ff6333ff768ec9d9c0e6b380aa0a606d2b22a8f3dad026e3526b88964d42a4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r9, 0x0, 0xb}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x1, 0xfffffffa, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x0, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x2, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x55, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x5, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x1, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0xa, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x7fffffff, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0x1d, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0x3, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x2, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x4, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11}, 0x9) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x0) 999.201367ms ago: executing program 4 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) 746.209938ms ago: executing program 1 (id=2187): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="03dfffffff000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008000"/17], 0x50) 686.042233ms ago: executing program 1 (id=2188): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="036157dd", 0x4}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="4d5722d585a850bb45d5cde008004590e82800000000000290780000001affffffff1600907800000000ec"], 0x0) 685.567763ms ago: executing program 0 (id=2189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0x15, 0x3, "e4624777db9d97adbf2cd16d6fb1131fe4"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r8, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r11, @ANYBLOB='(\x00/'], 0x44}}, 0x44040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000008e9a818dd9150343950dd640b02c70921300e45451a8fe4b2ff775fd823b4bcd335cda086accd5b314b744d1356aa0ae5153c7ff850f7102b3fbc6d0eb454ec970", @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf25180000000c000600010000000100000008000300", @ANYRES32=r6, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=r2, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=r11, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24004411}, 0x20000000) 632.483977ms ago: executing program 1 (id=2190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$selinux_context(r1, &(0x7f00000003c0)='system_u:object_r:modules_conf_t:s0\x00', 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='xen_mc_callback\x00', 0xffffffffffffffff, 0x0, 0x50}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r2, 0x1e, 0xe18, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x200000000}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x90000, 0x100, 0xa}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4092}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) 561.888273ms ago: executing program 1 (id=2191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0x164, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0x15, 0x3, "e4624777db9d97adbf2cd16d6fb1131fe4"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="430000007dd5609c9a9d5d5c82f6e163a0f00cd9f6892165083dd71e150c1226541f1cb9501a765ec4bb315d", @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf252800000005002b000200000008002c000100000005002e006f00000008000200", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x20000000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r9, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r12, @ANYBLOB='(\x00/'], 0x44}}, 0x44040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000008e9a818dd9150343950dd640b02c70921300e45451a8fe4b2ff775fd823b4bcd335cda086accd5b314b744d1356aa0ae5153c7ff850f7102b3fbc6d0eb454ec970", @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf25180000000c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=r2, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24004411}, 0x20000000) 140.199558ms ago: executing program 4 (id=2192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x43}, 0x18) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 125.023509ms ago: executing program 0 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) 124.100229ms ago: executing program 1 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 26.940897ms ago: executing program 0 (id=2195): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf", 0x1f}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x8008801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = socket$inet(0x2, 0x1, 0x100) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f000053e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000a828c3e54727f16b558374b69a1d10bfcc7b5fee608366ef5a93bcd78e77ea7f1ae58dbb040a8f987ae356bfb25045554fe928791d699b19f1d7a1ca300d8659a0a09a1a825003ebd282d35a9ef4eb5457eb63cd6ccd3126e050aafffd0ebaaa3b3f6a95cf056091154a6e8b66697c13b177ff6333ff768ec9d9c0e6b380aa0a606d2b22a8f3dad026e3526b88964d42a4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r9, 0x0, 0xb}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x1, 0xfffffffa, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x0, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x2, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x55, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x5, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x1, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0xa, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x7fffffff, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0x1d, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0x3, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x2, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x4, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11}, 0x9) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x0) 0s ago: executing program 1 (id=2196): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="f72bacc3ca1aaadf08e239411cbcf4b2ef918084f500db36e2ef38b56d756f04", 0x20, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000957273091ff8fe3bb844d787724e59ae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltaction={0xc8, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xc8}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x1000}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x2e0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) kernel console output (not intermixed with test programs): hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.513873][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.521267][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.528759][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.536170][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x4 [ 84.543575][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.551017][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.554266][ T5752] validate_nla: 15 callbacks suppressed [ 84.554281][ T5752] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 84.558494][ T3407] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 84.638954][ T3407] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.664853][ T5759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 84.695707][ T5765] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 84.702899][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 84.753582][ T5765] $Hÿ: (slave dummy0): Releasing backup interface [ 84.799187][ T5765] dummy0: left promiscuous mode [ 84.819186][ T5769] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 84.866458][ T5765] dummy0: entered promiscuous mode [ 84.876542][ T5765] dummy0: entered allmulticast mode [ 84.890067][ T5765] team0: Port device dummy0 added [ 84.912520][ T5769] dummy0: left promiscuous mode [ 84.925496][ T5769] dummy0: left allmulticast mode [ 84.938566][ T5769] team0: Port device dummy0 removed [ 84.953469][ T5769] dummy0: entered promiscuous mode [ 84.964493][ T5769] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 84.983345][ T5773] netlink: 2056 bytes leftover after parsing attributes in process `syz.1.829'. [ 85.091606][ T5778] netlink: 2056 bytes leftover after parsing attributes in process `syz.2.831'. [ 85.110519][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 85.201435][ T36] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.342693][ T5790] serio: Serial port ptm0 [ 85.496620][ T5808] pimreg: entered allmulticast mode [ 85.531315][ T5808] pimreg: left allmulticast mode [ 85.636961][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 85.706992][ T1036] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.764288][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 86.265516][ T5835] serio: Serial port ptm0 [ 86.884203][ T5848] loop4: detected capacity change from 0 to 512 [ 86.905157][ T5848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.923142][ T5861] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 86.947947][ T5862] __nla_validate_parse: 1 callbacks suppressed [ 86.948056][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 86.964022][ T5864] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 86.985129][ T5861] $Hÿ: (slave dummy0): Releasing backup interface [ 86.992147][ T5861] dummy0: left promiscuous mode [ 87.000420][ T5861] dummy0: entered promiscuous mode [ 87.005832][ T5861] dummy0: entered allmulticast mode [ 87.011296][ T5861] team0: Port device dummy0 added [ 87.045359][ T5861] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 87.056816][ T5868] loop2: detected capacity change from 0 to 128 [ 87.064366][ T5861] dummy0: left promiscuous mode [ 87.070312][ T5868] FAT-fs (loop2): Directory bread(block 162) failed [ 87.077175][ T5861] dummy0: left allmulticast mode [ 87.085706][ T5861] team0: Port device dummy0 removed [ 87.091867][ T5868] FAT-fs (loop2): Directory bread(block 163) failed [ 87.100122][ T5861] dummy0: entered promiscuous mode [ 87.106718][ T5861] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 87.116394][ T5868] FAT-fs (loop2): Directory bread(block 164) failed [ 87.123026][ T5868] FAT-fs (loop2): Directory bread(block 165) failed [ 87.130428][ T5868] FAT-fs (loop2): Directory bread(block 166) failed [ 87.150466][ T5868] FAT-fs (loop2): Directory bread(block 167) failed [ 87.157850][ T5868] FAT-fs (loop2): Directory bread(block 168) failed [ 87.164648][ T5868] FAT-fs (loop2): Directory bread(block 169) failed [ 87.172445][ T5868] FAT-fs (loop2): Directory bread(block 162) failed [ 87.180404][ T5868] FAT-fs (loop2): Directory bread(block 163) failed [ 87.188061][ T5868] syz.2.865: attempt to access beyond end of device [ 87.188061][ T5868] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 87.203733][ T5868] syz.2.865: attempt to access beyond end of device [ 87.203733][ T5868] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 87.349025][ T5876] serio: Serial port ptm0 [ 87.380433][ T5886] netlink: 92 bytes leftover after parsing attributes in process `syz.2.872'. [ 87.453802][ T5891] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 87.476350][ T5891] $Hÿ: (slave dummy0): Releasing backup interface [ 87.485415][ T5891] dummy0: left promiscuous mode [ 87.500732][ T5891] dummy0: entered promiscuous mode [ 87.508503][ T5894] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 87.519851][ T5891] dummy0: entered allmulticast mode [ 87.526556][ T5891] team0: Port device dummy0 added [ 87.549885][ T5894] dummy0: left promiscuous mode [ 87.556084][ T5894] dummy0: left allmulticast mode [ 87.563611][ T5894] team0: Port device dummy0 removed [ 87.579890][ T5894] dummy0: entered promiscuous mode [ 87.595552][ T5894] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 87.596304][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.642955][ T5905] loop4: detected capacity change from 0 to 128 [ 87.650317][ T5905] FAT-fs (loop4): Directory bread(block 162) failed [ 87.659204][ T5905] FAT-fs (loop4): Directory bread(block 163) failed [ 87.692966][ T5911] netlink: 'syz.2.883': attribute type 3 has an invalid length. [ 87.700779][ T5905] FAT-fs (loop4): Directory bread(block 164) failed [ 87.728055][ T5905] FAT-fs (loop4): Directory bread(block 165) failed [ 87.728719][ T5913] netlink: 92 bytes leftover after parsing attributes in process `syz.0.884'. [ 87.734730][ T5905] FAT-fs (loop4): Directory bread(block 166) failed [ 87.771036][ T5905] FAT-fs (loop4): Directory bread(block 167) failed [ 87.792392][ T5905] FAT-fs (loop4): Directory bread(block 168) failed [ 87.811916][ T5905] FAT-fs (loop4): Directory bread(block 169) failed [ 87.825011][ T5905] FAT-fs (loop4): Directory bread(block 162) failed [ 87.832033][ T5905] FAT-fs (loop4): Directory bread(block 163) failed [ 87.843550][ T5905] syz.4.879: attempt to access beyond end of device [ 87.843550][ T5905] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 87.858411][ T5905] syz.4.879: attempt to access beyond end of device [ 87.858411][ T5905] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 87.887201][ T5925] loop1: detected capacity change from 0 to 512 [ 87.927390][ T5935] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 87.935881][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.955579][ T5935] $Hÿ: (slave dummy0): Releasing backup interface [ 87.962520][ T5935] dummy0: left promiscuous mode [ 87.973400][ T5935] dummy0: entered promiscuous mode [ 87.978623][ T5935] dummy0: entered allmulticast mode [ 87.991137][ T5935] team0: Port device dummy0 added [ 87.992499][ T5939] openvswitch: netlink: Message has 6 unknown bytes. [ 88.044131][ T5935] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 88.068290][ T5935] dummy0: left promiscuous mode [ 88.084816][ T5935] dummy0: left allmulticast mode [ 88.090784][ T5935] team0: Port device dummy0 removed [ 88.099994][ T5935] dummy0: entered promiscuous mode [ 88.117988][ T5935] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 88.155971][ T5953] netlink: 92 bytes leftover after parsing attributes in process `syz.4.899'. [ 88.198864][ T5957] loop4: detected capacity change from 0 to 128 [ 88.212686][ T5958] $Hÿ: (slave dummy0): Releasing backup interface [ 88.221619][ T5958] dummy0: left promiscuous mode [ 88.227410][ T5957] FAT-fs (loop4): Directory bread(block 162) failed [ 88.234178][ T5957] FAT-fs (loop4): Directory bread(block 163) failed [ 88.246315][ T5957] FAT-fs (loop4): Directory bread(block 164) failed [ 88.262296][ T5957] FAT-fs (loop4): Directory bread(block 165) failed [ 88.271521][ T5962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=5962 comm=syz.0.902 [ 88.284312][ T5957] FAT-fs (loop4): Directory bread(block 166) failed [ 88.296386][ T5957] FAT-fs (loop4): Directory bread(block 167) failed [ 88.311029][ T5957] FAT-fs (loop4): Directory bread(block 168) failed [ 88.318110][ T5957] FAT-fs (loop4): Directory bread(block 169) failed [ 88.332588][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.340798][ T5957] FAT-fs (loop4): Directory bread(block 162) failed [ 88.347510][ T5957] FAT-fs (loop4): Directory bread(block 163) failed [ 88.398390][ T5964] bond0: (slave veth5): Enslaving as an active interface with a down link [ 88.422772][ T5970] bond0: (slave dummy0): making interface the new active one [ 88.434228][ T5970] dummy0: entered promiscuous mode [ 88.439599][ T5970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.451120][ T5974] $Hÿ: (slave dummy0): Releasing backup interface [ 88.458750][ T5974] dummy0: left promiscuous mode [ 88.465756][ T5974] dummy0: entered promiscuous mode [ 88.471214][ T5974] dummy0: entered allmulticast mode [ 88.476953][ T5974] team0: Port device dummy0 added [ 88.489013][ T5974] dummy0: left promiscuous mode [ 88.494523][ T5974] dummy0: left allmulticast mode [ 88.500151][ T5974] team0: Port device dummy0 removed [ 88.508153][ T5974] dummy0: entered promiscuous mode [ 88.513684][ T5974] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 88.524284][ T5980] bond0: (slave dummy0): Releasing active interface [ 88.531148][ T5980] dummy0: left promiscuous mode [ 88.541636][ T5980] dummy0: entered promiscuous mode [ 88.546754][ T5983] netlink: 92 bytes leftover after parsing attributes in process `syz.3.911'. [ 88.547051][ T5980] dummy0: entered allmulticast mode [ 88.561423][ T5980] team0: Port device dummy0 added [ 88.570054][ T5981] pimreg: entered allmulticast mode [ 88.583880][ T5984] dummy0: left promiscuous mode [ 88.589147][ T5984] dummy0: left allmulticast mode [ 88.594920][ T5984] team0: Port device dummy0 removed [ 88.602049][ T5984] dummy0: entered promiscuous mode [ 88.607796][ T5984] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 88.620042][ T5976] pimreg: left allmulticast mode [ 88.670687][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 88.683678][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.756101][ T6007] netlink: 92 bytes leftover after parsing attributes in process `syz.4.922'. [ 88.793658][ T6013] pimreg: entered allmulticast mode [ 88.799881][ T6013] pimreg: left allmulticast mode [ 88.827237][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 88.827271][ T29] audit: type=1400 audit(1754342148.688:1590): avc: denied { setopt } for pid=6014 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.870627][ T29] audit: type=1326 audit(1754342148.698:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 88.894219][ T29] audit: type=1326 audit(1754342148.698:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 88.917693][ T29] audit: type=1326 audit(1754342148.698:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 88.941085][ T29] audit: type=1326 audit(1754342148.698:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 88.980178][ T29] audit: type=1326 audit(1754342148.828:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 89.005388][ T29] audit: type=1326 audit(1754342148.868:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 89.051634][ T6022] loop0: detected capacity change from 0 to 512 [ 89.081425][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.114913][ T29] audit: type=1326 audit(1754342148.978:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 89.152995][ T29] audit: type=1326 audit(1754342149.008:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 89.176726][ T29] audit: type=1326 audit(1754342149.008:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 89.270229][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.397755][ T6051] pimreg: entered allmulticast mode [ 89.413604][ T6051] pimreg: left allmulticast mode [ 89.434593][ T6055] $Hÿ: (slave dummy0): Releasing backup interface [ 89.441345][ T6055] dummy0: left promiscuous mode [ 89.447645][ T6055] dummy0: entered promiscuous mode [ 89.452813][ T6055] dummy0: entered allmulticast mode [ 89.458700][ T6055] team0: Port device dummy0 added [ 89.473277][ T6055] dummy0: left promiscuous mode [ 89.478508][ T6055] dummy0: left allmulticast mode [ 89.484535][ T6055] team0: Port device dummy0 removed [ 89.491484][ T6055] dummy0: entered promiscuous mode [ 89.496941][ T6055] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 89.522181][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 89.556065][ T6062] netlink: 68 bytes leftover after parsing attributes in process `syz.4.944'. [ 89.666930][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 89.733520][ T6088] validate_nla: 9 callbacks suppressed [ 89.733539][ T6088] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 89.761296][ T6088] $Hÿ: (slave dummy0): Releasing backup interface [ 89.776234][ T6088] dummy0: left promiscuous mode [ 89.792418][ T6088] dummy0: entered promiscuous mode [ 89.798059][ T6088] dummy0: entered allmulticast mode [ 89.804139][ T6088] team0: Port device dummy0 added [ 89.810157][ T6097] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 89.828892][ T6097] dummy0: left promiscuous mode [ 89.848733][ T6097] dummy0: left allmulticast mode [ 89.859983][ T6097] team0: Port device dummy0 removed [ 89.868970][ T6097] dummy0: entered promiscuous mode [ 89.876733][ T6097] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 90.043864][ T6113] loop1: detected capacity change from 0 to 128 [ 90.064376][ T6113] FAT-fs (loop1): Directory bread(block 162) failed [ 90.071162][ T6113] FAT-fs (loop1): Directory bread(block 163) failed [ 90.083755][ T6113] FAT-fs (loop1): Directory bread(block 164) failed [ 90.097376][ T6113] FAT-fs (loop1): Directory bread(block 165) failed [ 90.106962][ T6118] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 90.116241][ T6113] FAT-fs (loop1): Directory bread(block 166) failed [ 90.125628][ T6113] FAT-fs (loop1): Directory bread(block 167) failed [ 90.132449][ T6113] FAT-fs (loop1): Directory bread(block 168) failed [ 90.139244][ T6113] FAT-fs (loop1): Directory bread(block 169) failed [ 90.146857][ T6118] $Hÿ: (slave dummy0): Releasing backup interface [ 90.149322][ T6113] FAT-fs (loop1): Directory bread(block 162) failed [ 90.160225][ T6113] FAT-fs (loop1): Directory bread(block 163) failed [ 90.160928][ T6118] dummy0: left promiscuous mode [ 90.167210][ T6113] bio_check_eod: 2 callbacks suppressed [ 90.167225][ T6113] syz.1.964: attempt to access beyond end of device [ 90.167225][ T6113] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 90.177570][ T6118] team0: Port device dummy0 added [ 90.198384][ T6119] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 90.207177][ T6113] syz.1.964: attempt to access beyond end of device [ 90.207177][ T6113] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 90.223143][ T6119] team0: Port device dummy0 removed [ 90.232696][ T6119] dummy0: entered promiscuous mode [ 90.244366][ T6119] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 90.511829][ T6153] loop0: detected capacity change from 0 to 128 [ 90.519596][ T6153] FAT-fs (loop0): Directory bread(block 162) failed [ 90.526652][ T6153] FAT-fs (loop0): Directory bread(block 163) failed [ 90.533491][ T6153] FAT-fs (loop0): Directory bread(block 164) failed [ 90.540284][ T6153] FAT-fs (loop0): Directory bread(block 165) failed [ 90.546989][ T6153] FAT-fs (loop0): Directory bread(block 166) failed [ 90.553644][ T6153] FAT-fs (loop0): Directory bread(block 167) failed [ 90.560433][ T6153] FAT-fs (loop0): Directory bread(block 168) failed [ 90.567140][ T6153] FAT-fs (loop0): Directory bread(block 169) failed [ 90.580695][ T6153] FAT-fs (loop0): Directory bread(block 162) failed [ 90.587745][ T6153] FAT-fs (loop0): Directory bread(block 163) failed [ 90.596302][ T6153] syz.0.981: attempt to access beyond end of device [ 90.596302][ T6153] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 90.609869][ T6153] syz.0.981: attempt to access beyond end of device [ 90.609869][ T6153] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 90.701332][ T6162] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 90.722243][ T6162] $Hÿ: (slave dummy0): Releasing backup interface [ 90.729189][ T6162] dummy0: left promiscuous mode [ 90.737058][ T6162] dummy0: entered promiscuous mode [ 90.742349][ T6162] dummy0: entered allmulticast mode [ 90.749194][ T6162] team0: Port device dummy0 added [ 90.758748][ T6162] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 90.768829][ T6162] dummy0: left promiscuous mode [ 90.775358][ T6162] dummy0: left allmulticast mode [ 90.780814][ T6162] team0: Port device dummy0 removed [ 90.787265][ T6162] dummy0: entered promiscuous mode [ 90.792644][ T6162] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 90.819480][ T6168] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 90.829713][ T6168] $Hÿ: (slave dummy0): Releasing backup interface [ 90.837411][ T6168] dummy0: left promiscuous mode [ 90.843963][ T6168] dummy0: entered promiscuous mode [ 90.849508][ T6168] dummy0: entered allmulticast mode [ 90.855531][ T6168] team0: Port device dummy0 added [ 90.866282][ T6168] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 90.876733][ T6168] dummy0: left promiscuous mode [ 90.881751][ T6168] dummy0: left allmulticast mode [ 90.887714][ T6168] team0: Port device dummy0 removed [ 90.894943][ T6168] dummy0: entered promiscuous mode [ 90.900621][ T6168] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 90.932762][ T6176] netlink: 'syz.2.990': attribute type 3 has an invalid length. [ 90.998222][ T6181] netlink: 'syz.2.992': attribute type 3 has an invalid length. [ 91.132429][ T6187] serio: Serial port ptm0 [ 91.209654][ T6193] $Hÿ: (slave dummy0): Releasing backup interface [ 91.217089][ T6193] dummy0: left promiscuous mode [ 91.226190][ T6193] dummy0: entered promiscuous mode [ 91.231886][ T6193] dummy0: entered allmulticast mode [ 91.242066][ T6193] team0: Port device dummy0 added [ 91.281652][ T6193] dummy0: left promiscuous mode [ 91.288312][ T6193] dummy0: left allmulticast mode [ 91.294014][ T6193] team0: Port device dummy0 removed [ 91.300908][ T6193] dummy0: entered promiscuous mode [ 91.308289][ T6193] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 91.626161][ T6226] loop0: detected capacity change from 0 to 512 [ 91.711713][ T6235] $Hÿ: (slave dummy0): Releasing backup interface [ 91.727427][ T6235] dummy0: left promiscuous mode [ 91.740888][ T6235] team0: Port device dummy0 added [ 91.776649][ T6235] team0: Port device dummy0 removed [ 91.796721][ T6235] dummy0: entered promiscuous mode [ 91.809040][ T6235] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 91.980070][ T6226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.091828][ T6249] loop1: detected capacity change from 0 to 512 [ 92.107408][ T6249] EXT4-fs (loop1): too many log groups per flexible block group [ 92.115270][ T6249] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 92.124519][ T6249] EXT4-fs (loop1): mount failed [ 92.385076][ T6254] $Hÿ: (slave dummy0): Releasing backup interface [ 92.392188][ T6254] dummy0: left promiscuous mode [ 92.401101][ T6254] team0: Port device dummy0 added [ 92.413101][ T6254] team0: Port device dummy0 removed [ 92.423223][ T6254] dummy0: entered promiscuous mode [ 92.435767][ T6254] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 92.448720][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.558878][ T6269] loop4: detected capacity change from 0 to 512 [ 92.648240][ T6268] __nla_validate_parse: 16 callbacks suppressed [ 92.648259][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 92.656653][ T6269] EXT4-fs (loop4): too many log groups per flexible block group [ 92.671583][ T6269] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 92.690954][ T6269] EXT4-fs (loop4): mount failed [ 92.764424][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 92.801263][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 92.818881][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 92.924213][ T6290] $Hÿ: (slave dummy0): Releasing backup interface [ 92.931338][ T6290] dummy0: left promiscuous mode [ 92.938491][ T6290] team0: Port device dummy0 added [ 92.971136][ T6290] team0: Port device dummy0 removed [ 92.979157][ T6290] dummy0: entered promiscuous mode [ 92.984888][ T6290] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 93.202235][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 93.296266][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 93.315091][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 93.380370][ T6321] $Hÿ: (slave dummy0): Releasing backup interface [ 93.387360][ T6321] dummy0: left promiscuous mode [ 93.394402][ T6321] team0: Port device dummy0 added [ 93.409450][ T6323] loop0: detected capacity change from 0 to 512 [ 93.425678][ T6321] team0: Port device dummy0 removed [ 93.426063][ T6323] EXT4-fs (loop0): too many log groups per flexible block group [ 93.433695][ T6321] dummy0: entered promiscuous mode [ 93.438903][ T6323] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 93.445349][ T6321] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 93.459575][ T6323] EXT4-fs (loop0): mount failed [ 94.274669][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 94.274685][ T29] audit: type=1326 audit(1754342154.138:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.321745][ T29] audit: type=1326 audit(1754342154.168:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.346236][ T29] audit: type=1326 audit(1754342154.168:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.370486][ T29] audit: type=1326 audit(1754342154.168:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.394049][ T29] audit: type=1326 audit(1754342154.168:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.417600][ T29] audit: type=1326 audit(1754342154.168:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.441160][ T29] audit: type=1326 audit(1754342154.168:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.464760][ T29] audit: type=1326 audit(1754342154.168:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.521188][ T6350] loop3: detected capacity change from 0 to 128 [ 94.529722][ T6350] FAT-fs (loop3): Directory bread(block 162) failed [ 94.537803][ T6350] FAT-fs (loop3): Directory bread(block 163) failed [ 94.544927][ T6350] FAT-fs (loop3): Directory bread(block 164) failed [ 94.551726][ T6350] FAT-fs (loop3): Directory bread(block 165) failed [ 94.558621][ T6350] FAT-fs (loop3): Directory bread(block 166) failed [ 94.565454][ T6350] FAT-fs (loop3): Directory bread(block 167) failed [ 94.572193][ T6350] FAT-fs (loop3): Directory bread(block 168) failed [ 94.579105][ T6350] FAT-fs (loop3): Directory bread(block 169) failed [ 94.584626][ T6348] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1059'. [ 94.616483][ T6350] FAT-fs (loop3): Directory bread(block 162) failed [ 94.629819][ T6350] FAT-fs (loop3): Directory bread(block 163) failed [ 94.637033][ T6350] syz.3.1060: attempt to access beyond end of device [ 94.637033][ T6350] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 94.650458][ T29] audit: type=1326 audit(1754342154.488:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.674043][ T29] audit: type=1326 audit(1754342154.488:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 94.708752][ T6350] syz.3.1060: attempt to access beyond end of device [ 94.708752][ T6350] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 94.773914][ T3387] hid_parser_main: 104 callbacks suppressed [ 94.773952][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x1 [ 94.787372][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.795237][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.802776][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.810257][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.817795][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.825407][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x4 [ 94.832806][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.840466][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.848243][ T3387] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 94.861499][ T3368] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.871464][ T6370] loop0: detected capacity change from 0 to 512 [ 94.880418][ T3387] hid-generic 0000:0000:0000.002F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 94.917336][ T6370] EXT4-fs (loop0): too many log groups per flexible block group [ 94.925208][ T6370] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 94.945092][ T6370] EXT4-fs (loop0): mount failed [ 95.021830][ T6382] loop1: detected capacity change from 0 to 512 [ 95.031420][ T6382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.152291][ T6393] 9pnet_fd: Insufficient options for proto=fd [ 95.160062][ T6393] validate_nla: 15 callbacks suppressed [ 95.160081][ T6393] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 95.320841][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 95.386396][ T3394] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.417960][ T3368] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.444369][ T6406] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 95.452945][ T6406] $Hÿ: (slave dummy0): Releasing backup interface [ 95.461141][ T6406] dummy0: left promiscuous mode [ 95.468137][ T6406] team0: Port device dummy0 added [ 95.478691][ T6406] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 95.491033][ T6406] team0: Port device dummy0 removed [ 95.499133][ T6406] dummy0: entered promiscuous mode [ 95.504664][ T6406] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 95.850292][ T6420] netlink: 'syz.3.1088': attribute type 3 has an invalid length. [ 95.885667][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.909255][ T6421] 9pnet_fd: Insufficient options for proto=fd [ 95.966022][ T6425] 9pnet_fd: Insufficient options for proto=fd [ 95.972290][ T6425] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 96.118726][ T3368] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.129618][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 96.309982][ T6433] serio: Serial port ptm0 [ 96.326632][ T6436] netlink: 'syz.1.1094': attribute type 10 has an invalid length. [ 96.343997][ T6436] $Hÿ: (slave dummy0): Releasing backup interface [ 96.351399][ T6436] dummy0: left promiscuous mode [ 96.361082][ T6436] team0: Port device dummy0 added [ 96.446014][ T6443] netlink: 'syz.3.1096': attribute type 5 has an invalid length. [ 96.465617][ T6436] netlink: 'syz.1.1094': attribute type 10 has an invalid length. [ 96.476146][ T6436] team0: Port device dummy0 removed [ 96.482954][ T6436] dummy0: entered promiscuous mode [ 96.492496][ T6436] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 96.570657][ T6453] netlink: 'syz.3.1100': attribute type 3 has an invalid length. [ 97.046237][ T6472] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 97.564454][ T6493] 9pnet_fd: Insufficient options for proto=fd [ 97.645510][ T6497] loop4: detected capacity change from 0 to 128 [ 97.656078][ T6497] FAT-fs (loop4): Directory bread(block 162) failed [ 97.664419][ T6497] FAT-fs (loop4): Directory bread(block 163) failed [ 97.683046][ T6497] FAT-fs (loop4): Directory bread(block 164) failed [ 97.692965][ T6499] $Hÿ: (slave dummy0): Releasing backup interface [ 97.697054][ T6497] FAT-fs (loop4): Directory bread(block 165) failed [ 97.706648][ T6499] dummy0: left promiscuous mode [ 97.713265][ T6499] dummy0: entered promiscuous mode [ 97.718497][ T6499] dummy0: entered allmulticast mode [ 97.722724][ T6497] FAT-fs (loop4): Directory bread(block 166) failed [ 97.723982][ T6499] team0: Port device dummy0 added [ 97.741756][ T6497] FAT-fs (loop4): Directory bread(block 167) failed [ 97.745987][ T6499] dummy0: left promiscuous mode [ 97.754776][ T6499] dummy0: left allmulticast mode [ 97.759385][ T6497] FAT-fs (loop4): Directory bread(block 168) failed [ 97.766630][ T6499] team0: Port device dummy0 removed [ 97.776253][ T6497] FAT-fs (loop4): Directory bread(block 169) failed [ 97.782431][ T6499] dummy0: entered promiscuous mode [ 97.791011][ T6499] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 97.795342][ T6497] FAT-fs (loop4): Directory bread(block 162) failed [ 97.816490][ T6497] FAT-fs (loop4): Directory bread(block 163) failed [ 97.832387][ T6497] syz.4.1118: attempt to access beyond end of device [ 97.832387][ T6497] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 97.865635][ T6497] syz.4.1118: attempt to access beyond end of device [ 97.865635][ T6497] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 97.917211][ T6506] __nla_validate_parse: 2 callbacks suppressed [ 97.917227][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 98.071108][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 98.097123][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 98.208173][ T6533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6533 comm=syz.4.1135 [ 98.432301][ T6544] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1140'. [ 98.600972][ T36] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.000741][ T6570] serio: Serial port ptm0 [ 99.006449][ T6572] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1152'. [ 99.043362][ T3387] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.178808][ T6585] 9pnet_fd: Insufficient options for proto=fd [ 99.487165][ T6600] serio: Serial port ptm0 [ 99.639690][ T6611] 9pnet_fd: Insufficient options for proto=fd [ 99.649846][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 99.649866][ T29] audit: type=1326 audit(1754342159.508:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 99.696587][ T29] audit: type=1326 audit(1754342159.508:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 99.720672][ T29] audit: type=1326 audit(1754342159.538:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 99.744364][ T29] audit: type=1326 audit(1754342159.538:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 99.768177][ T29] audit: type=1326 audit(1754342159.538:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 99.799500][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 99.833368][ T6627] $Hÿ: (slave dummy0): Releasing backup interface [ 99.840546][ T6627] dummy0: left promiscuous mode [ 99.848234][ T6627] team0: Port device dummy0 added [ 99.865282][ T29] audit: type=1326 audit(1754342159.728:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 99.888896][ T29] audit: type=1326 audit(1754342159.728:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 99.912832][ T29] audit: type=1326 audit(1754342159.728:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 99.912926][ T6627] team0: Port device dummy0 removed [ 99.936412][ T29] audit: type=1326 audit(1754342159.728:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 99.963498][ T6627] dummy0: entered promiscuous mode [ 99.965423][ T29] audit: type=1326 audit(1754342159.728:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 99.970879][ T6627] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 100.029775][ T6633] loop4: detected capacity change from 0 to 128 [ 100.043587][ T6633] FAT-fs (loop4): Directory bread(block 162) failed [ 100.055886][ T6633] FAT-fs (loop4): Directory bread(block 163) failed [ 100.063252][ T6633] FAT-fs (loop4): Directory bread(block 164) failed [ 100.070019][ T6633] FAT-fs (loop4): Directory bread(block 165) failed [ 100.085892][ T6633] FAT-fs (loop4): Directory bread(block 166) failed [ 100.092621][ T6633] FAT-fs (loop4): Directory bread(block 167) failed [ 100.099692][ T6633] FAT-fs (loop4): Directory bread(block 168) failed [ 100.112211][ T6633] FAT-fs (loop4): Directory bread(block 169) failed [ 100.123067][ T6633] FAT-fs (loop4): Directory bread(block 162) failed [ 100.133123][ T6637] »»»»»»: renamed from veth0 (while UP) [ 100.140217][ T6633] FAT-fs (loop4): Directory bread(block 163) failed [ 100.149364][ T6637] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1182'. [ 100.153646][ T6633] syz.4.1180: attempt to access beyond end of device [ 100.153646][ T6633] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 100.194713][ T6633] syz.4.1180: attempt to access beyond end of device [ 100.194713][ T6633] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 100.258005][ T6648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6648 comm=syz.4.1187 [ 100.325606][ T6657] validate_nla: 17 callbacks suppressed [ 100.325627][ T6657] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 100.361234][ T6657] $Hÿ: (slave dummy0): Releasing backup interface [ 100.377061][ T6657] dummy0: left promiscuous mode [ 100.386913][ T6657] dummy0: entered promiscuous mode [ 100.401576][ T6657] dummy0: entered allmulticast mode [ 100.415145][ T6657] team0: Port device dummy0 added [ 100.445466][ T6657] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 100.457698][ T6657] dummy0: left promiscuous mode [ 100.464207][ T6657] dummy0: left allmulticast mode [ 100.477557][ T6657] team0: Port device dummy0 removed [ 100.494001][ T6657] dummy0: entered promiscuous mode [ 100.501289][ T6657] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 100.519316][ T6671] loop2: detected capacity change from 0 to 128 [ 100.526855][ T6671] FAT-fs (loop2): Directory bread(block 162) failed [ 100.535077][ T6671] FAT-fs (loop2): Directory bread(block 163) failed [ 100.544099][ T6671] FAT-fs (loop2): Directory bread(block 164) failed [ 100.553123][ T6671] FAT-fs (loop2): Directory bread(block 165) failed [ 100.561443][ T6671] FAT-fs (loop2): Directory bread(block 166) failed [ 100.561840][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 100.569400][ T6671] FAT-fs (loop2): Directory bread(block 167) failed [ 100.576412][ T6676] netlink: 'syz.3.1200': attribute type 10 has an invalid length. [ 100.582224][ T6671] FAT-fs (loop2): Directory bread(block 168) failed [ 100.597141][ T6671] FAT-fs (loop2): Directory bread(block 169) failed [ 100.609125][ T6671] FAT-fs (loop2): Directory bread(block 162) failed [ 100.614907][ T6679] pimreg: entered allmulticast mode [ 100.616956][ T6671] FAT-fs (loop2): Directory bread(block 163) failed [ 100.628213][ T6671] syz.2.1198: attempt to access beyond end of device [ 100.628213][ T6671] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 100.642798][ T6671] syz.2.1198: attempt to access beyond end of device [ 100.642798][ T6671] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 100.685163][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 100.723679][ T6691] netlink: 'syz.2.1207': attribute type 3 has an invalid length. [ 100.771829][ T6693] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 100.801119][ T6695] loop3: detected capacity change from 0 to 512 [ 100.811035][ T6695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.827561][ T6702] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 100.836259][ T6702] $Hÿ: (slave dummy0): Releasing backup interface [ 100.843041][ T6702] dummy0: left promiscuous mode [ 100.849688][ T6702] team0: Port device dummy0 added [ 100.857478][ T6702] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 100.867778][ T6702] team0: Port device dummy0 removed [ 100.874818][ T6702] dummy0: entered promiscuous mode [ 100.880460][ T6702] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 101.012221][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 101.084653][ T6720] 9pnet_fd: Insufficient options for proto=fd [ 101.377100][ T6679] pimreg: left allmulticast mode [ 101.658942][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.660488][ T6730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6730 comm=syz.2.1222 [ 101.965625][ T6750] loop0: detected capacity change from 0 to 128 [ 101.985073][ T6750] FAT-fs (loop0): Directory bread(block 162) failed [ 102.003347][ T6750] FAT-fs (loop0): Directory bread(block 163) failed [ 102.010164][ T6750] FAT-fs (loop0): Directory bread(block 164) failed [ 102.023471][ T6750] FAT-fs (loop0): Directory bread(block 165) failed [ 102.030283][ T6750] FAT-fs (loop0): Directory bread(block 166) failed [ 102.043490][ T6750] FAT-fs (loop0): Directory bread(block 167) failed [ 102.057333][ T6750] FAT-fs (loop0): Directory bread(block 168) failed [ 102.066914][ T6750] FAT-fs (loop0): Directory bread(block 169) failed [ 102.079118][ T6750] FAT-fs (loop0): Directory bread(block 162) failed [ 102.086351][ T6750] FAT-fs (loop0): Directory bread(block 163) failed [ 102.093537][ T6750] syz.0.1229: attempt to access beyond end of device [ 102.093537][ T6750] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 102.106957][ T6750] syz.0.1229: attempt to access beyond end of device [ 102.106957][ T6750] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 102.346051][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 102.381778][ T6767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6767 comm=syz.4.1235 [ 102.436952][ T6772] loop4: detected capacity change from 0 to 128 [ 102.445042][ T6772] FAT-fs (loop4): Directory bread(block 162) failed [ 102.451915][ T6772] FAT-fs (loop4): Directory bread(block 163) failed [ 102.459057][ T6772] FAT-fs (loop4): Directory bread(block 164) failed [ 102.466158][ T6772] FAT-fs (loop4): Directory bread(block 165) failed [ 102.472914][ T6772] FAT-fs (loop4): Directory bread(block 166) failed [ 102.479865][ T6772] FAT-fs (loop4): Directory bread(block 167) failed [ 102.486714][ T6772] FAT-fs (loop4): Directory bread(block 168) failed [ 102.493641][ T6772] FAT-fs (loop4): Directory bread(block 169) failed [ 102.504383][ T6772] FAT-fs (loop4): Directory bread(block 162) failed [ 102.511158][ T6772] FAT-fs (loop4): Directory bread(block 163) failed [ 102.519469][ T6772] syz.4.1237: attempt to access beyond end of device [ 102.519469][ T6772] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 102.533042][ T6772] syz.4.1237: attempt to access beyond end of device [ 102.533042][ T6772] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 102.804945][ T6785] netlink: 'syz.4.1243': attribute type 3 has an invalid length. [ 102.812870][ T6785] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1243'. [ 102.948151][ T6792] loop0: detected capacity change from 0 to 512 [ 102.975087][ T6797] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1247'. [ 103.009516][ T6792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.134449][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 103.324977][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 103.370449][ T6821] netlink: 'syz.4.1255': attribute type 3 has an invalid length. [ 103.378364][ T6821] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1255'. [ 103.501951][ T6825] serio: Serial port ptm0 [ 103.735594][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 103.785603][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.810200][ T6847] netlink: 'syz.3.1267': attribute type 3 has an invalid length. [ 103.818136][ T6847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1267'. [ 103.821618][ T6850] loop4: detected capacity change from 0 to 512 [ 103.906553][ T6861] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 103.931417][ T6852] serio: Serial port ptm0 [ 103.936347][ T6850] EXT4-fs (loop4): too many log groups per flexible block group [ 103.944112][ T6850] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 103.951065][ T6850] EXT4-fs (loop4): mount failed [ 104.043410][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 104.222742][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 104.233521][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 104.275134][ T6888] 9pnet_fd: Insufficient options for proto=fd [ 105.181359][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 105.848813][ T6928] loop4: detected capacity change from 0 to 512 [ 105.886643][ T6928] EXT4-fs (loop4): too many log groups per flexible block group [ 105.894615][ T6928] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 105.909509][ T6928] EXT4-fs (loop4): mount failed [ 106.523945][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 106.523973][ T29] audit: type=1326 audit(1754342166.388:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.625361][ T29] audit: type=1326 audit(1754342166.418:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.649303][ T29] audit: type=1326 audit(1754342166.418:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.672883][ T29] audit: type=1326 audit(1754342166.478:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.696367][ T29] audit: type=1326 audit(1754342166.478:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.720815][ T29] audit: type=1326 audit(1754342166.478:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.744241][ T29] audit: type=1326 audit(1754342166.478:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 106.894909][ T6949] 9pnet_fd: Insufficient options for proto=fd [ 106.911747][ T6949] validate_nla: 1 callbacks suppressed [ 106.911763][ T6949] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 107.069793][ T6951] serio: Serial port ptm0 [ 107.170390][ T6954] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 107.191955][ T6956] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 107.211182][ T6954] $Hÿ: (slave dummy0): Releasing backup interface [ 107.233975][ T6954] dummy0: left promiscuous mode [ 107.255197][ T6954] dummy0: entered promiscuous mode [ 107.260516][ T6954] dummy0: entered allmulticast mode [ 107.281783][ T6957] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 107.292538][ T6954] team0: Port device dummy0 added [ 107.306207][ T6956] $Hÿ: (slave dummy0): Releasing backup interface [ 107.344597][ T6956] dummy0: left promiscuous mode [ 107.355681][ T6956] team0: Port device dummy0 added [ 107.365598][ T6957] team0: Port device dummy0 removed [ 107.372715][ T6957] dummy0: entered promiscuous mode [ 107.378194][ T6957] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 107.384410][ T3387] hid_parser_main: 260 callbacks suppressed [ 107.384429][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x1 [ 107.400246][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.407898][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.415662][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.423349][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.430890][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.438446][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x4 [ 107.445943][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.453548][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.461046][ T3387] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 107.543610][ T3387] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz1 [ 107.596604][ T6965] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 107.628232][ T6965] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 107.643639][ T6965] dummy0: left promiscuous mode [ 107.653141][ T6968] loop0: detected capacity change from 0 to 512 [ 107.653271][ T6965] dummy0: left allmulticast mode [ 107.678790][ T6968] EXT4-fs (loop0): too many log groups per flexible block group [ 107.686637][ T6968] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 107.694466][ T6965] team0: Port device dummy0 removed [ 107.703349][ T6968] EXT4-fs (loop0): mount failed [ 107.711678][ T6965] dummy0: entered promiscuous mode [ 107.728947][ T6965] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 107.788604][ T29] audit: type=1326 audit(1754342167.648:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 107.812221][ T29] audit: type=1326 audit(1754342167.648:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 107.836170][ T29] audit: type=1326 audit(1754342167.648:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 107.876881][ T6977] pimreg: entered allmulticast mode [ 107.884347][ T6977] pimreg: left allmulticast mode [ 107.884755][ T6976] netlink: 'syz.2.1315': attribute type 3 has an invalid length. [ 107.960818][ T6985] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 107.989063][ T6985] $Hÿ: (slave dummy0): Releasing backup interface [ 108.014250][ T6985] dummy0: left promiscuous mode [ 108.021795][ T6985] dummy0: entered promiscuous mode [ 108.027210][ T6985] dummy0: entered allmulticast mode [ 108.034395][ T6985] team0: Port device dummy0 added [ 108.062233][ T3394] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.111421][ T6996] __nla_validate_parse: 1 callbacks suppressed [ 108.111509][ T6996] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1323'. [ 108.151906][ T7000] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 108.198717][ T7005] netlink: 'syz.4.1327': attribute type 10 has an invalid length. [ 108.400767][ T7015] 9pnet_fd: Insufficient options for proto=fd [ 108.471915][ T7019] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 108.484023][ T7019] $Hÿ: (slave dummy0): Releasing backup interface [ 108.499808][ T7019] dummy0: left promiscuous mode [ 108.518424][ T7019] dummy0: entered promiscuous mode [ 108.519237][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 108.540836][ T7019] dummy0: entered allmulticast mode [ 108.559403][ T7019] team0: Port device dummy0 added [ 108.583841][ T7021] dummy0: left promiscuous mode [ 108.588948][ T7021] dummy0: left allmulticast mode [ 108.601470][ T7021] team0: Port device dummy0 removed [ 108.617544][ T7021] dummy0: entered promiscuous mode [ 108.621362][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 108.628437][ T7021] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 108.768658][ T7034] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1337'. [ 108.939654][ T7040] dummy0: left promiscuous mode [ 108.968717][ T7040] dummy0: left allmulticast mode [ 108.996088][ T7040] team0: Port device dummy0 removed [ 109.012498][ T7040] dummy0: entered promiscuous mode [ 109.043375][ T7040] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 109.124442][ T7043] loop0: detected capacity change from 0 to 128 [ 109.147751][ T7043] FAT-fs (loop0): Directory bread(block 162) failed [ 109.165918][ T7043] FAT-fs (loop0): Directory bread(block 163) failed [ 109.183525][ T7049] $Hÿ: (slave dummy0): Releasing backup interface [ 109.190288][ T7043] FAT-fs (loop0): Directory bread(block 164) failed [ 109.205146][ T7049] dummy0: left promiscuous mode [ 109.212002][ T7049] dummy0: entered promiscuous mode [ 109.217396][ T7043] FAT-fs (loop0): Directory bread(block 165) failed [ 109.224277][ T7043] FAT-fs (loop0): Directory bread(block 166) failed [ 109.231038][ T7043] FAT-fs (loop0): Directory bread(block 167) failed [ 109.243309][ T7049] dummy0: entered allmulticast mode [ 109.248970][ T7049] team0: Port device dummy0 added [ 109.264282][ T7043] FAT-fs (loop0): Directory bread(block 168) failed [ 109.271046][ T7043] FAT-fs (loop0): Directory bread(block 169) failed [ 109.426653][ T7056] serio: Serial port ptm0 [ 109.438100][ T7058] 9pnet_fd: Insufficient options for proto=fd [ 109.693504][ T7081] loop4: detected capacity change from 0 to 128 [ 109.835411][ T7086] $Hÿ: (slave dummy0): Releasing backup interface [ 109.849107][ T7086] dummy0: left promiscuous mode [ 109.858946][ T7086] dummy0: entered promiscuous mode [ 109.873586][ T7081] FAT-fs (loop4): Directory bread(block 162) failed [ 109.880338][ T7081] FAT-fs (loop4): Directory bread(block 163) failed [ 109.887946][ T7086] dummy0: entered allmulticast mode [ 109.894525][ T7081] FAT-fs (loop4): Directory bread(block 164) failed [ 109.903750][ T7086] team0: Port device dummy0 added [ 109.909605][ T7081] FAT-fs (loop4): Directory bread(block 165) failed [ 109.920962][ T7086] dummy0: left promiscuous mode [ 109.926144][ T7081] FAT-fs (loop4): Directory bread(block 166) failed [ 109.932846][ T7086] dummy0: left allmulticast mode [ 109.939110][ T7081] FAT-fs (loop4): Directory bread(block 167) failed [ 109.946303][ T7086] team0: Port device dummy0 removed [ 109.952254][ T7081] FAT-fs (loop4): Directory bread(block 168) failed [ 109.962900][ T7086] dummy0: entered promiscuous mode [ 109.969518][ T7081] FAT-fs (loop4): Directory bread(block 169) failed [ 109.978031][ T7086] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 110.149724][ T7091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.177226][ T7091] bond4: (slave veth3): Enslaving as an active interface with a down link [ 110.200086][ T7091] $Hÿ: (slave dummy0): Releasing backup interface [ 110.211820][ T7091] dummy0: left promiscuous mode [ 110.218905][ T7091] bond4: (slave dummy0): making interface the new active one [ 110.229065][ T7091] dummy0: entered promiscuous mode [ 110.234419][ T7091] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 110.378798][ T7096] serio: Serial port ptm0 [ 110.474979][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 110.656636][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 110.673594][ T3394] page_pool_release_retry() stalled pool shutdown: id 24, 21 inflight 60 sec [ 110.743493][ T7116] $Hÿ: (slave dummy0): Releasing backup interface [ 110.772934][ T7116] dummy0: left promiscuous mode [ 110.784718][ T7116] team0: Port device dummy0 added [ 110.817208][ T7116] team0: Port device dummy0 removed [ 110.824279][ T7116] dummy0: entered promiscuous mode [ 110.843506][ T7116] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 110.984719][ T7124] serio: Serial port ptm0 [ 111.019835][ T7125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1373'. [ 111.114487][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 111.449540][ T7149] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 111.645819][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 111.645836][ T29] audit: type=1326 audit(1754342171.508:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 111.689558][ T29] audit: type=1326 audit(1754342171.538:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 111.713698][ T29] audit: type=1326 audit(1754342171.538:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 111.737503][ T29] audit: type=1326 audit(1754342171.538:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 111.847889][ T7163] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1386'. [ 111.959005][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 112.045383][ T7173] validate_nla: 13 callbacks suppressed [ 112.045403][ T7173] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 112.086704][ T7173] $Hÿ: (slave dummy0): Releasing backup interface [ 112.094851][ T7173] dummy0: left promiscuous mode [ 112.103855][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 112.104412][ T7180] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 112.119749][ T7173] team0: Port device dummy0 added [ 112.125356][ T7179] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 112.141759][ T7179] bond4: (slave dummy0): Releasing active interface [ 112.150840][ T7179] dummy0: left promiscuous mode [ 112.161714][ T7179] dummy0: entered promiscuous mode [ 112.167883][ T7179] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 112.203576][ T7180] team0: Port device dummy0 removed [ 112.212672][ T7180] dummy0: entered promiscuous mode [ 112.226110][ T7180] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 112.242469][ T7183] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 112.285076][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'. [ 112.324688][ T7189] netlink: 'syz.1.1398': attribute type 10 has an invalid length. [ 112.355086][ T7191] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 112.395518][ T7193] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 112.849450][ T7215] pimreg: entered allmulticast mode [ 113.248864][ T7219] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 113.338128][ T7219] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 113.346518][ T7219] dummy0: left promiscuous mode [ 113.354344][ T7219] dummy0: left allmulticast mode [ 113.369959][ T7223] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 113.379659][ T7221] serio: Serial port ptm0 [ 113.384987][ T7219] team0: Port device dummy0 removed [ 113.399010][ T7219] dummy0: entered promiscuous mode [ 113.404764][ T7219] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 113.554715][ T7235] __nla_validate_parse: 2 callbacks suppressed [ 113.554733][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 113.677216][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 113.691832][ T7215] pimreg: left allmulticast mode [ 113.698295][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 113.712484][ T7238] vlan2: entered promiscuous mode [ 113.717697][ T7238] syz_tun: entered promiscuous mode [ 113.727373][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 113.761308][ T29] audit: type=1326 audit(1754342173.618:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 113.784892][ T29] audit: type=1326 audit(1754342173.618:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 113.787204][ T7250] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 113.808794][ T29] audit: type=1326 audit(1754342173.618:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 113.841954][ T29] audit: type=1326 audit(1754342173.618:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 113.865783][ T29] audit: type=1326 audit(1754342173.618:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 113.894055][ T7253] netlink: 'syz.1.1421': attribute type 3 has an invalid length. [ 113.894197][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1422'. [ 113.912275][ T7257] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 113.950807][ T7257] $Hÿ: (slave dummy0): Releasing backup interface [ 113.958119][ T7257] dummy0: left promiscuous mode [ 113.966187][ T7262] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 113.975156][ T7257] team0: Port device dummy0 added [ 113.981935][ T7253] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1421'. [ 114.002591][ T7262] team0: Port device dummy0 removed [ 114.009425][ T7262] dummy0: entered promiscuous mode [ 114.020407][ T7262] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 114.060966][ T7259] serio: Serial port ptm0 [ 114.069122][ T7265] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 114.449169][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 114.466883][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 114.518912][ T7293] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 114.540726][ T7294] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 114.992144][ T7299] netlink: 'syz.4.1437': attribute type 3 has an invalid length. [ 115.006958][ T7307] $Hÿ: (slave dummy0): Releasing backup interface [ 115.053885][ T7307] dummy0: left promiscuous mode [ 115.060691][ T7307] dummy0: entered promiscuous mode [ 115.067287][ T7307] dummy0: entered allmulticast mode [ 115.072859][ T7307] team0: Port device dummy0 added [ 115.080455][ T7299] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1437'. [ 115.114267][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 115.187677][ T7307] dummy0: left promiscuous mode [ 115.192851][ T7307] dummy0: left allmulticast mode [ 115.200772][ T7307] team0: Port device dummy0 removed [ 115.209858][ T7307] dummy0: entered promiscuous mode [ 115.216647][ T7307] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 115.278578][ T7325] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 115.442637][ T29] audit: type=1326 audit(1754342175.298:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 115.563708][ T7352] $Hÿ: (slave dummy0): Releasing backup interface [ 115.573594][ T7352] dummy0: left promiscuous mode [ 115.580124][ T7352] team0: Port device dummy0 added [ 115.591219][ T7352] team0: Port device dummy0 removed [ 115.599251][ T7352] dummy0: entered promiscuous mode [ 115.604774][ T7352] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 115.832874][ T7371] 9pnet_fd: Insufficient options for proto=fd [ 115.987414][ T7378] $Hÿ: (slave dummy0): Releasing backup interface [ 115.994947][ T7378] dummy0: left promiscuous mode [ 116.002076][ T7378] team0: Port device dummy0 added [ 116.011909][ T7379] loop0: detected capacity change from 0 to 512 [ 116.019122][ T7378] team0: Port device dummy0 removed [ 116.026241][ T7378] dummy0: entered promiscuous mode [ 116.031661][ T7378] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 116.041283][ T7379] EXT4-fs (loop0): too many log groups per flexible block group [ 116.049225][ T7379] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 116.056300][ T7379] EXT4-fs (loop0): mount failed [ 116.138145][ T7399] 9pnet_fd: Insufficient options for proto=fd [ 116.325348][ T7420] $Hÿ: (slave dummy0): Releasing backup interface [ 116.342450][ T7420] dummy0: left promiscuous mode [ 116.356128][ T7420] dummy0: entered promiscuous mode [ 116.361983][ T7420] dummy0: entered allmulticast mode [ 116.368519][ T7420] team0: Port device dummy0 added [ 116.379507][ T7420] dummy0: left promiscuous mode [ 116.384999][ T7420] dummy0: left allmulticast mode [ 116.396538][ T7420] team0: Port device dummy0 removed [ 116.404933][ T7420] dummy0: entered promiscuous mode [ 116.410693][ T7420] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 116.522044][ T7436] xt_check_target: 5 callbacks suppressed [ 116.522060][ T7436] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 116.572538][ T7442] 9pnet_fd: Insufficient options for proto=fd [ 116.577464][ T7445] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 116.592881][ T7444] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 116.687233][ T7452] loop4: detected capacity change from 0 to 128 [ 116.695227][ T7452] FAT-fs (loop4): Directory bread(block 162) failed [ 116.701927][ T7452] FAT-fs (loop4): Directory bread(block 163) failed [ 116.708701][ T7452] FAT-fs (loop4): Directory bread(block 164) failed [ 116.715853][ T7452] FAT-fs (loop4): Directory bread(block 165) failed [ 116.724283][ T7452] FAT-fs (loop4): Directory bread(block 166) failed [ 116.731452][ T7452] FAT-fs (loop4): Directory bread(block 167) failed [ 116.738230][ T7452] FAT-fs (loop4): Directory bread(block 168) failed [ 116.745034][ T7452] FAT-fs (loop4): Directory bread(block 169) failed [ 116.755288][ T7454] $Hÿ: (slave dummy0): Releasing backup interface [ 116.755688][ T7452] FAT-fs (loop4): Directory bread(block 162) failed [ 116.768778][ T7452] FAT-fs (loop4): Directory bread(block 163) failed [ 116.768932][ T7454] dummy0: left promiscuous mode [ 116.775992][ T7452] syz.4.1497: attempt to access beyond end of device [ 116.775992][ T7452] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 116.782128][ T7454] dummy0: entered promiscuous mode [ 116.794434][ T7452] syz.4.1497: attempt to access beyond end of device [ 116.794434][ T7452] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 116.800104][ T7454] dummy0: entered allmulticast mode [ 116.883507][ T7454] team0: Port device dummy0 added [ 116.899260][ T7455] dummy0: left promiscuous mode [ 116.915471][ T7455] dummy0: left allmulticast mode [ 116.939622][ T7447] 9pnet_fd: Insufficient options for proto=fd [ 116.948309][ T7455] team0: Port device dummy0 removed [ 116.966735][ T7455] dummy0: entered promiscuous mode [ 116.995412][ T7455] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 117.088921][ T7467] validate_nla: 15 callbacks suppressed [ 117.088941][ T7467] netlink: 'syz.0.1502': attribute type 10 has an invalid length. [ 117.143952][ T7473] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 117.158115][ T7475] 9pnet_fd: Insufficient options for proto=fd [ 117.166212][ T7475] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 117.206321][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 117.206342][ T29] audit: type=1326 audit(1754342177.058:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 117.236585][ T29] audit: type=1326 audit(1754342177.058:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 117.260446][ T29] audit: type=1326 audit(1754342177.058:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 117.308520][ T7488] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 117.429797][ T7497] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 117.447964][ T7497] $Hÿ: (slave dummy0): Releasing backup interface [ 117.463614][ T7497] dummy0: left promiscuous mode [ 117.484701][ T7497] dummy0: entered promiscuous mode [ 117.504677][ T7497] dummy0: entered allmulticast mode [ 117.520454][ T7497] team0: Port device dummy0 added [ 117.546614][ T7497] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 117.558922][ T7497] dummy0: left promiscuous mode [ 117.565199][ T7497] dummy0: left allmulticast mode [ 117.575640][ T7497] team0: Port device dummy0 removed [ 117.599096][ T7497] dummy0: entered promiscuous mode [ 117.623539][ T7497] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 117.712518][ T7510] netlink: 'syz.0.1520': attribute type 3 has an invalid length. [ 117.737066][ T7512] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 117.805671][ T7514] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 117.856764][ T7518] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 117.913877][ T7521] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 118.101640][ T7534] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 118.111163][ T7534] $Hÿ: (slave dummy0): Releasing backup interface [ 118.122361][ T7534] dummy0: left promiscuous mode [ 118.130125][ T7534] team0: Port device dummy0 added [ 118.139292][ T7534] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 118.150660][ T7534] team0: Port device dummy0 removed [ 118.157522][ T7534] dummy0: entered promiscuous mode [ 118.162955][ T7534] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 118.222867][ T7538] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 118.240076][ T7539] 9pnet_fd: Insufficient options for proto=fd [ 119.028085][ T7560] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 119.742377][ T29] audit: type=1326 audit(1754342179.598:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 119.766327][ T29] audit: type=1326 audit(1754342179.598:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 119.790170][ T29] audit: type=1326 audit(1754342179.598:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 119.868430][ T7570] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 119.926619][ T7574] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 120.061851][ T7581] __nla_validate_parse: 19 callbacks suppressed [ 120.061872][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 120.344882][ T29] audit: type=1326 audit(1754342180.208:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 120.368907][ T29] audit: type=1326 audit(1754342180.208:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 120.392580][ T29] audit: type=1326 audit(1754342180.208:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 120.416414][ T29] audit: type=1326 audit(1754342180.208:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 120.693253][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 120.754678][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'. [ 120.775374][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 120.850115][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 121.375910][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 121.464425][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 121.465247][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 121.515392][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 121.608511][ T7671] $Hÿ: (slave dummy0): Releasing backup interface [ 121.617861][ T7671] dummy0: left promiscuous mode [ 121.624681][ T7671] dummy0: entered promiscuous mode [ 121.630062][ T7671] dummy0: entered allmulticast mode [ 121.636966][ T7671] team0: Port device dummy0 added [ 121.647691][ T7671] dummy0: left promiscuous mode [ 121.657209][ T7672] xt_check_target: 4 callbacks suppressed [ 121.657224][ T7672] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 121.672296][ T7671] dummy0: left allmulticast mode [ 121.680014][ T7671] team0: Port device dummy0 removed [ 121.687148][ T7671] dummy0: entered promiscuous mode [ 121.692779][ T7671] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 121.958017][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 122.118354][ T7700] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 122.144449][ T7701] 9pnet_fd: Insufficient options for proto=fd [ 122.505816][ T7725] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 122.645467][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 122.645483][ T29] audit: type=1326 audit(1754342182.508:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 122.675160][ T29] audit: type=1326 audit(1754342182.508:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 122.726070][ T29] audit: type=1326 audit(1754342182.568:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 122.749823][ T29] audit: type=1326 audit(1754342182.568:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 122.773411][ T29] audit: type=1326 audit(1754342182.568:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.034799][ T7750] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 123.258141][ T7756] validate_nla: 8 callbacks suppressed [ 123.258166][ T7756] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 123.349432][ T7756] $Hÿ: (slave dummy0): Releasing backup interface [ 123.356665][ T7756] dummy0: left promiscuous mode [ 123.369683][ T7756] team0: Port device dummy0 added [ 123.469034][ T7756] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 123.491999][ T7766] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 123.503022][ T7756] team0: Port device dummy0 removed [ 123.521504][ T7756] dummy0: entered promiscuous mode [ 123.529398][ T7756] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 123.529707][ T29] audit: type=1326 audit(1754342183.388:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.561725][ T29] audit: type=1326 audit(1754342183.388:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.565577][ T7769] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 123.597630][ T29] audit: type=1326 audit(1754342183.448:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.621190][ T29] audit: type=1326 audit(1754342183.448:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.644733][ T29] audit: type=1326 audit(1754342183.448:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 123.684353][ T7766] $Hÿ: (slave dummy0): Releasing backup interface [ 123.691750][ T7766] dummy0: left promiscuous mode [ 123.699281][ T7766] dummy0: entered promiscuous mode [ 123.704762][ T7766] dummy0: entered allmulticast mode [ 123.710413][ T7766] team0: Port device dummy0 added [ 123.721028][ T7769] dummy0: left promiscuous mode [ 123.727185][ T7769] dummy0: left allmulticast mode [ 123.737830][ T7769] team0: Port device dummy0 removed [ 123.745901][ T7769] dummy0: entered promiscuous mode [ 123.751524][ T7769] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 123.931801][ T7788] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 123.945838][ T7791] pimreg: entered allmulticast mode [ 124.020103][ T7794] netlink: 'syz.1.1627': attribute type 3 has an invalid length. [ 124.699122][ T7791] pimreg: left allmulticast mode [ 124.724370][ T7813] netlink: 'syz.4.1633': attribute type 10 has an invalid length. [ 124.757455][ T7817] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 124.776352][ T7817] $Hÿ: (slave dummy0): Releasing backup interface [ 124.786112][ T7817] dummy0: left promiscuous mode [ 124.793147][ T7817] team0: Port device dummy0 added [ 124.802365][ T7817] netlink: 'syz.4.1635': attribute type 10 has an invalid length. [ 124.815005][ T7817] team0: Port device dummy0 removed [ 124.822262][ T7817] dummy0: entered promiscuous mode [ 124.828814][ T7817] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 125.001183][ T7830] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 125.065155][ T7830] __nla_validate_parse: 11 callbacks suppressed [ 125.065174][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1641'. [ 125.319062][ T7839] loop4: detected capacity change from 0 to 512 [ 125.344666][ T7839] EXT4-fs (loop4): too many log groups per flexible block group [ 125.352852][ T7839] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 125.359838][ T7839] EXT4-fs (loop4): mount failed [ 125.366119][ T7843] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 125.455785][ T7850] pimreg: entered allmulticast mode [ 125.641234][ T7854] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 125.650655][ T7854] $Hÿ: (slave dummy0): Releasing backup interface [ 125.658647][ T7854] dummy0: left promiscuous mode [ 125.665115][ T7854] team0: Port device dummy0 added [ 125.675539][ T7854] team0: Port device dummy0 removed [ 125.682056][ T7854] dummy0: entered promiscuous mode [ 125.687561][ T7854] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 125.871944][ T7864] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 126.233886][ T7850] pimreg: left allmulticast mode [ 126.334422][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'. [ 126.349722][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 126.545439][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 126.588342][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 126.603874][ T7893] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 126.694528][ T7904] pimreg: entered allmulticast mode [ 126.705154][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 126.721621][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 127.388939][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 127.467828][ T7930] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 127.477728][ T7904] pimreg: left allmulticast mode [ 127.515554][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 127.614418][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 127.970562][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 127.970578][ T29] audit: type=1326 audit(1754342187.828:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.1.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 128.000670][ T29] audit: type=1326 audit(1754342187.828:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.1.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 128.025121][ T29] audit: type=1326 audit(1754342187.868:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.1.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 128.048793][ T29] audit: type=1326 audit(1754342187.868:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.1.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 128.072330][ T29] audit: type=1326 audit(1754342187.868:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.1.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 128.195672][ T7963] pimreg: entered allmulticast mode [ 128.260086][ T7967] 9pnet_fd: Insufficient options for proto=fd [ 128.267336][ T7967] validate_nla: 3 callbacks suppressed [ 128.267346][ T7967] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 128.568554][ T7988] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 128.606208][ T29] audit: type=1326 audit(1754342188.468:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 128.646185][ T29] audit: type=1326 audit(1754342188.498:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 128.648106][ T7991] 9pnet_fd: Insufficient options for proto=fd [ 128.670018][ T29] audit: type=1326 audit(1754342188.498:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 128.705895][ T7963] pimreg: left allmulticast mode [ 128.773604][ T7997] netlink: 'syz.0.1703': attribute type 10 has an invalid length. [ 128.792968][ T7997] $Hÿ: (slave dummy0): Releasing backup interface [ 128.806458][ T7997] dummy0: left promiscuous mode [ 128.812503][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 128.814917][ T7997] dummy0: entered promiscuous mode [ 128.824854][ T7997] dummy0: entered allmulticast mode [ 128.830459][ T7997] team0: Port device dummy0 added [ 128.843623][ T8000] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 128.871645][ T7997] netlink: 'syz.0.1703': attribute type 10 has an invalid length. [ 128.882370][ T7997] dummy0: left promiscuous mode [ 128.888094][ T7997] dummy0: left allmulticast mode [ 128.897172][ T7997] team0: Port device dummy0 removed [ 128.904594][ T7997] dummy0: entered promiscuous mode [ 128.910065][ T7997] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 128.965186][ T8003] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 129.189359][ T8010] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 129.220633][ T8016] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 129.236981][ T8018] netlink: 'syz.1.1711': attribute type 10 has an invalid length. [ 129.262234][ T29] audit: type=1326 audit(1754342189.118:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 129.286024][ T29] audit: type=1326 audit(1754342189.118:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 129.392860][ T8030] pimreg: entered allmulticast mode [ 129.879286][ T8035] loop0: detected capacity change from 0 to 512 [ 129.911370][ T8035] EXT4-fs (loop0): too many log groups per flexible block group [ 129.919259][ T8035] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 129.927581][ T8035] EXT4-fs (loop0): mount failed [ 130.168451][ T8030] pimreg: left allmulticast mode [ 130.317090][ T8059] __nla_validate_parse: 6 callbacks suppressed [ 130.317118][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 130.365118][ T8063] 9pnet_fd: Insufficient options for proto=fd [ 130.395114][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 130.416777][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'. [ 130.441337][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 130.593949][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 131.083479][ T8094] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 131.087879][ T8096] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 131.321009][ T8107] loop4: detected capacity change from 0 to 512 [ 131.350291][ T8107] EXT4-fs (loop4): too many log groups per flexible block group [ 131.358321][ T8107] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 131.404872][ T8107] EXT4-fs (loop4): mount failed [ 131.495942][ T8117] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 131.570137][ T8124] loop1: detected capacity change from 0 to 128 [ 131.579174][ T8124] FAT-fs (loop1): Directory bread(block 162) failed [ 131.588919][ T8124] FAT-fs (loop1): Directory bread(block 163) failed [ 131.603379][ T8124] FAT-fs (loop1): Directory bread(block 164) failed [ 131.610171][ T8124] FAT-fs (loop1): Directory bread(block 165) failed [ 131.627549][ T8124] FAT-fs (loop1): Directory bread(block 166) failed [ 131.634619][ T8124] FAT-fs (loop1): Directory bread(block 167) failed [ 131.643254][ T8124] FAT-fs (loop1): Directory bread(block 168) failed [ 131.653235][ T8124] FAT-fs (loop1): Directory bread(block 169) failed [ 131.681030][ T8129] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 131.714007][ T8129] $Hÿ: (slave dummy0): Releasing backup interface [ 131.721074][ T8129] dummy0: left promiscuous mode [ 131.787393][ T8129] team0: Port device dummy0 added [ 131.854728][ T8137] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1757'. [ 131.944240][ T8141] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 132.053598][ T8145] netlink: 'syz.3.1760': attribute type 3 has an invalid length. [ 132.061490][ T8145] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1760'. [ 132.265296][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 132.331879][ T8156] $Hÿ: (slave dummy0): Releasing backup interface [ 132.339133][ T8156] dummy0: left promiscuous mode [ 132.347696][ T8156] dummy0: entered promiscuous mode [ 132.353946][ T8156] dummy0: entered allmulticast mode [ 132.359596][ T8156] team0: Port device dummy0 added [ 132.635363][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1768'. [ 133.001778][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 133.001796][ T29] audit: type=1326 audit(1754342192.858:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 133.044723][ T29] audit: type=1326 audit(1754342192.898:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 133.068388][ T29] audit: type=1326 audit(1754342192.898:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 133.098266][ T8181] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1772'. [ 133.237185][ T8187] pimreg: entered allmulticast mode [ 133.564173][ T8191] validate_nla: 4 callbacks suppressed [ 133.564191][ T8191] netlink: 'syz.3.1776': attribute type 10 has an invalid length. [ 133.582899][ T8189] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 134.101638][ T8187] pimreg: left allmulticast mode [ 135.074789][ T8235] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 135.095955][ T8239] netlink: 'syz.4.1792': attribute type 10 has an invalid length. [ 135.120037][ T8239] $Hÿ: (slave dummy0): Releasing backup interface [ 135.139002][ T8239] dummy0: left promiscuous mode [ 135.275082][ T8239] team0: Port device dummy0 added [ 135.342170][ T8249] loop1: detected capacity change from 0 to 128 [ 135.349303][ T8248] 9pnet_fd: Insufficient options for proto=fd [ 135.367689][ T8249] FAT-fs (loop1): Directory bread(block 162) failed [ 135.391485][ T8249] FAT-fs (loop1): Directory bread(block 163) failed [ 135.441027][ T8249] FAT-fs (loop1): Directory bread(block 164) failed [ 135.456337][ T8249] FAT-fs (loop1): Directory bread(block 165) failed [ 135.492802][ T8249] FAT-fs (loop1): Directory bread(block 166) failed [ 135.516739][ T8249] FAT-fs (loop1): Directory bread(block 167) failed [ 135.538967][ T8249] FAT-fs (loop1): Directory bread(block 168) failed [ 135.562241][ T8249] FAT-fs (loop1): Directory bread(block 169) failed [ 135.589523][ T29] audit: type=1326 audit(1754342195.448:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 135.613120][ T29] audit: type=1326 audit(1754342195.448:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 135.636666][ T29] audit: type=1326 audit(1754342195.448:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 135.660538][ T29] audit: type=1326 audit(1754342195.448:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 135.684116][ T29] audit: type=1326 audit(1754342195.448:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 136.095152][ T8272] netlink: 'syz.0.1802': attribute type 3 has an invalid length. [ 136.156650][ T8274] netlink: 'syz.0.1803': attribute type 3 has an invalid length. [ 136.213556][ T8274] __nla_validate_parse: 3 callbacks suppressed [ 136.213576][ T8274] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1803'. [ 136.403313][ T8286] pimreg: entered allmulticast mode [ 136.622518][ T29] audit: type=1326 audit(1754342196.478:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 136.662047][ T29] audit: type=1326 audit(1754342196.518:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 136.799782][ T8292] loop4: detected capacity change from 0 to 128 [ 136.819754][ T8292] FAT-fs (loop4): Directory bread(block 162) failed [ 136.841994][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 136.844537][ T8292] FAT-fs (loop4): Directory bread(block 163) failed [ 136.873957][ T8292] FAT-fs (loop4): Directory bread(block 164) failed [ 136.881009][ T8292] FAT-fs (loop4): Directory bread(block 165) failed [ 136.895756][ T8298] netlink: 'syz.0.1814': attribute type 3 has an invalid length. [ 136.904230][ T8292] FAT-fs (loop4): Directory bread(block 166) failed [ 136.911000][ T8292] FAT-fs (loop4): Directory bread(block 167) failed [ 136.927645][ T8300] netlink: 'syz.1.1815': attribute type 3 has an invalid length. [ 136.933269][ T8292] FAT-fs (loop4): Directory bread(block 168) failed [ 136.942319][ T8292] FAT-fs (loop4): Directory bread(block 169) failed [ 136.958971][ T8298] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1814'. [ 137.154574][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 137.174567][ T8286] pimreg: left allmulticast mode [ 137.266144][ T8317] netlink: 'syz.1.1820': attribute type 10 has an invalid length. [ 137.267252][ T8319] netlink: 'syz.3.1822': attribute type 10 has an invalid length. [ 137.357667][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 137.404070][ T8336] loop1: detected capacity change from 0 to 128 [ 137.411644][ T8336] FAT-fs (loop1): Directory bread(block 162) failed [ 137.419302][ T8336] FAT-fs (loop1): Directory bread(block 163) failed [ 137.446125][ T8336] FAT-fs (loop1): Directory bread(block 164) failed [ 137.452918][ T8336] FAT-fs (loop1): Directory bread(block 165) failed [ 137.460719][ T8336] FAT-fs (loop1): Directory bread(block 166) failed [ 137.467459][ T8336] FAT-fs (loop1): Directory bread(block 167) failed [ 137.476369][ T8336] FAT-fs (loop1): Directory bread(block 168) failed [ 137.483077][ T8336] FAT-fs (loop1): Directory bread(block 169) failed [ 137.564002][ T8348] pimreg: entered allmulticast mode [ 138.121817][ T8361] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1839'. [ 138.143944][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 138.245402][ T8369] loop0: detected capacity change from 0 to 128 [ 138.272597][ T8369] FAT-fs (loop0): Directory bread(block 162) failed [ 138.288738][ T8348] pimreg: left allmulticast mode [ 138.292177][ T8369] FAT-fs (loop0): Directory bread(block 163) failed [ 138.300924][ T8369] FAT-fs (loop0): Directory bread(block 164) failed [ 138.307750][ T8369] FAT-fs (loop0): Directory bread(block 165) failed [ 138.314639][ T8369] FAT-fs (loop0): Directory bread(block 166) failed [ 138.321411][ T8369] FAT-fs (loop0): Directory bread(block 167) failed [ 138.330809][ T8369] FAT-fs (loop0): Directory bread(block 168) failed [ 138.340878][ T8369] FAT-fs (loop0): Directory bread(block 169) failed [ 138.416556][ T8387] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1851'. [ 138.534708][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 138.559037][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 138.780793][ T8402] validate_nla: 8 callbacks suppressed [ 138.780813][ T8402] netlink: 'syz.1.1856': attribute type 3 has an invalid length. [ 138.783998][ T8404] netlink: 'syz.2.1857': attribute type 10 has an invalid length. [ 138.808368][ T8404] $Hÿ: (slave dummy0): Releasing backup interface [ 138.815627][ T8404] dummy0: left promiscuous mode [ 138.822306][ T8404] team0: Port device dummy0 added [ 138.852708][ T8409] loop1: detected capacity change from 0 to 128 [ 138.874685][ T8409] FAT-fs (loop1): Directory bread(block 162) failed [ 138.882226][ T8409] FAT-fs (loop1): Directory bread(block 163) failed [ 138.890178][ T8409] FAT-fs (loop1): Directory bread(block 164) failed [ 138.896922][ T8409] FAT-fs (loop1): Directory bread(block 165) failed [ 138.903651][ T8409] FAT-fs (loop1): Directory bread(block 166) failed [ 138.910241][ T8409] FAT-fs (loop1): Directory bread(block 167) failed [ 138.916969][ T8409] FAT-fs (loop1): Directory bread(block 168) failed [ 138.924217][ T8409] FAT-fs (loop1): Directory bread(block 169) failed [ 138.953456][ T8414] pimreg: entered allmulticast mode [ 138.967334][ T8417] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 139.029722][ T8419] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 139.106092][ T8423] loop1: detected capacity change from 0 to 512 [ 139.124619][ T8423] EXT4-fs (loop1): too many log groups per flexible block group [ 139.132361][ T8423] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 139.139338][ T8423] EXT4-fs (loop1): mount failed [ 139.722348][ T8414] pimreg: left allmulticast mode [ 139.762830][ T8436] blktrace: Concurrent blktraces are not allowed on loop5 [ 139.794465][ T8438] netlink: 'syz.3.1870': attribute type 3 has an invalid length. [ 139.837663][ T8441] netlink: 'syz.4.1871': attribute type 10 has an invalid length. [ 139.919027][ T8446] loop3: detected capacity change from 0 to 128 [ 139.929713][ T8450] netlink: 'syz.1.1874': attribute type 3 has an invalid length. [ 139.948632][ T8446] FAT-fs (loop3): Directory bread(block 162) failed [ 139.958040][ T8446] FAT-fs (loop3): Directory bread(block 163) failed [ 139.966091][ T8446] FAT-fs (loop3): Directory bread(block 164) failed [ 139.973045][ T8446] FAT-fs (loop3): Directory bread(block 165) failed [ 139.980009][ T8446] FAT-fs (loop3): Directory bread(block 166) failed [ 139.988118][ T8446] FAT-fs (loop3): Directory bread(block 167) failed [ 140.023794][ T8446] FAT-fs (loop3): Directory bread(block 168) failed [ 140.030765][ T8446] FAT-fs (loop3): Directory bread(block 169) failed [ 140.094603][ T8455] netlink: 'syz.1.1877': attribute type 3 has an invalid length. [ 140.202292][ T8469] pimreg: entered allmulticast mode [ 140.298985][ T8473] netlink: 'syz.2.1884': attribute type 3 has an invalid length. [ 140.363906][ T8475] 9pnet_fd: Insufficient options for proto=fd [ 140.476460][ T8479] loop2: detected capacity change from 0 to 512 [ 140.494533][ T8479] EXT4-fs (loop2): too many log groups per flexible block group [ 140.502656][ T8479] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 140.509722][ T8479] EXT4-fs (loop2): mount failed [ 140.837718][ T8483] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 140.960325][ T8469] pimreg: left allmulticast mode [ 141.412601][ T8511] __nla_validate_parse: 8 callbacks suppressed [ 141.412618][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 141.527445][ T8518] 9pnet_fd: Insufficient options for proto=fd [ 141.796792][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 141.830940][ T8531] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1906'. [ 141.948620][ T8540] loop2: detected capacity change from 0 to 128 [ 141.956543][ T8540] FAT-fs (loop2): Directory bread(block 162) failed [ 141.963728][ T8540] FAT-fs (loop2): Directory bread(block 163) failed [ 141.970537][ T8540] FAT-fs (loop2): Directory bread(block 164) failed [ 141.977374][ T8540] FAT-fs (loop2): Directory bread(block 165) failed [ 141.984363][ T8540] FAT-fs (loop2): Directory bread(block 166) failed [ 141.991109][ T8540] FAT-fs (loop2): Directory bread(block 167) failed [ 141.998198][ T8540] FAT-fs (loop2): Directory bread(block 168) failed [ 142.005057][ T8540] FAT-fs (loop2): Directory bread(block 169) failed [ 142.015668][ T8541] loop4: detected capacity change from 0 to 512 [ 142.035936][ T8541] EXT4-fs (loop4): too many log groups per flexible block group [ 142.043799][ T8541] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 142.050852][ T8541] EXT4-fs (loop4): mount failed [ 142.085585][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 142.322150][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 142.322170][ T29] audit: type=1326 audit(1754342202.178:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 142.352146][ T29] audit: type=1326 audit(1754342202.178:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 142.376058][ T29] audit: type=1326 audit(1754342202.178:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 142.400122][ T29] audit: type=1326 audit(1754342202.178:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 142.423893][ T29] audit: type=1326 audit(1754342202.198:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 142.602814][ T8566] loop1: detected capacity change from 0 to 128 [ 142.611410][ T8566] /dev/loop1: Can't open blockdev [ 142.767177][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 142.832894][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 142.898953][ T8577] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1926'. [ 142.937313][ T8585] 9pnet_fd: Insufficient options for proto=fd [ 143.097785][ T8600] $Hÿ: (slave dummy0): Releasing backup interface [ 143.104840][ T8600] dummy0: left promiscuous mode [ 143.111299][ T8600] dummy0: entered promiscuous mode [ 143.116659][ T8600] dummy0: entered allmulticast mode [ 143.122208][ T8600] team0: Port device dummy0 added [ 143.181429][ T8605] 9pnet_fd: Insufficient options for proto=fd [ 143.228488][ T8606] loop0: detected capacity change from 0 to 512 [ 143.244776][ T8606] EXT4-fs (loop0): too many log groups per flexible block group [ 143.252518][ T8606] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 143.260948][ T8606] EXT4-fs (loop0): mount failed [ 143.787267][ T8617] validate_nla: 13 callbacks suppressed [ 143.787304][ T8617] netlink: 'syz.4.1941': attribute type 3 has an invalid length. [ 143.836305][ T8619] 9pnet_fd: Insufficient options for proto=fd [ 143.911395][ T8617] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1941'. [ 143.991661][ T29] audit: type=1326 audit(1754342203.848:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 144.015555][ T29] audit: type=1326 audit(1754342203.848:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 144.045661][ T29] audit: type=1326 audit(1754342203.848:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 144.069237][ T29] audit: type=1326 audit(1754342203.848:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 144.093032][ T29] audit: type=1326 audit(1754342203.848:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 144.158834][ T8631] netlink: 'syz.1.1947': attribute type 10 has an invalid length. [ 144.416042][ T8644] netlink: 'syz.4.1952': attribute type 10 has an invalid length. [ 144.450631][ T8646] 9pnet_fd: Insufficient options for proto=fd [ 144.501568][ T8648] netlink: 'syz.4.1954': attribute type 3 has an invalid length. [ 144.624987][ T8648] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1954'. [ 145.251645][ T8662] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 145.507188][ T8673] netlink: 'syz.4.1964': attribute type 10 has an invalid length. [ 145.592845][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 146.084644][ T8705] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 146.157373][ T8713] netlink: 'syz.1.1982': attribute type 3 has an invalid length. [ 146.220155][ T8717] netlink: 'syz.1.1984': attribute type 3 has an invalid length. [ 146.274842][ T8721] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 146.416582][ T8729] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 146.731683][ T8741] __nla_validate_parse: 3 callbacks suppressed [ 146.731699][ T8741] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1997'. [ 146.750174][ T8737] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1994'. [ 146.796243][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 146.826340][ T8751] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 147.147525][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 147.162360][ T8779] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2011'. [ 147.245324][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 147.902470][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 147.902540][ T29] audit: type=1326 audit(1754342207.758:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.3.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 147.968516][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 147.969988][ T29] audit: type=1326 audit(1754342207.798:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.3.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.001598][ T29] audit: type=1326 audit(1754342207.798:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.3.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.025341][ T29] audit: type=1326 audit(1754342207.798:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.3.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.389014][ T8830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2032'. [ 148.492992][ T8835] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 148.518678][ T8833] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2031'. [ 148.689956][ T29] audit: type=1326 audit(1754342208.548:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 148.713731][ T29] audit: type=1326 audit(1754342208.548:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 148.738205][ T29] audit: type=1326 audit(1754342208.548:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59eaf8eb69 code=0x7ffc0000 [ 148.883933][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 148.893532][ T8853] validate_nla: 10 callbacks suppressed [ 148.893563][ T8853] netlink: 'syz.0.2041': attribute type 10 has an invalid length. [ 148.903466][ T29] audit: type=1326 audit(1754342208.748:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.931453][ T29] audit: type=1326 audit(1754342208.748:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.955384][ T29] audit: type=1326 audit(1754342208.748:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc69c70eb69 code=0x7ffc0000 [ 148.988568][ T8857] netlink: 'syz.3.2043': attribute type 3 has an invalid length. [ 149.019411][ T8864] 9pnet_fd: Insufficient options for proto=fd [ 149.768554][ T8885] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 149.844764][ T8887] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 149.984646][ T8898] 9pnet_fd: Insufficient options for proto=fd [ 150.016201][ T8896] netlink: 'syz.0.2058': attribute type 3 has an invalid length. [ 150.096169][ T8902] 9pnet_fd: Insufficient options for proto=fd [ 150.216167][ T8911] netlink: 'syz.2.2064': attribute type 10 has an invalid length. [ 150.282955][ T8914] netlink: 'syz.2.2065': attribute type 3 has an invalid length. [ 150.597999][ T8930] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 150.862461][ T8935] 9pnet_fd: Insufficient options for proto=fd [ 151.478674][ T8945] serio: Serial port ptm0 [ 151.533776][ T8956] loop0: detected capacity change from 0 to 128 [ 151.545170][ T8956] FAT-fs (loop0): Directory bread(block 162) failed [ 151.556238][ T8956] FAT-fs (loop0): Directory bread(block 163) failed [ 151.569575][ T8956] FAT-fs (loop0): Directory bread(block 164) failed [ 151.577758][ T8956] FAT-fs (loop0): Directory bread(block 165) failed [ 151.585718][ T8956] FAT-fs (loop0): Directory bread(block 166) failed [ 151.594863][ T8956] FAT-fs (loop0): Directory bread(block 167) failed [ 151.601628][ T8956] FAT-fs (loop0): Directory bread(block 168) failed [ 151.608475][ T8956] FAT-fs (loop0): Directory bread(block 169) failed [ 151.628193][ T8958] netlink: 'syz.2.2079': attribute type 3 has an invalid length. [ 151.637895][ T8956] FAT-fs (loop0): Directory bread(block 162) failed [ 151.664686][ T8956] FAT-fs (loop0): Directory bread(block 163) failed [ 151.671902][ T8956] syz.0.2078: attempt to access beyond end of device [ 151.671902][ T8956] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 151.691974][ T8962] netlink: 'syz.2.2081': attribute type 3 has an invalid length. [ 151.704467][ T8956] syz.0.2078: attempt to access beyond end of device [ 151.704467][ T8956] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 151.727131][ T8966] netlink: 'syz.2.2082': attribute type 10 has an invalid length. [ 151.893435][ T8986] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 152.525676][ T8990] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 152.652515][ T8993] netlink: 'syz.0.2092': attribute type 3 has an invalid length. [ 152.690610][ T8999] __nla_validate_parse: 8 callbacks suppressed [ 152.690626][ T8999] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2094'. [ 152.691552][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 152.731384][ T8993] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2092'. [ 153.006008][ T9026] 9pnet_fd: Insufficient options for proto=fd [ 153.776242][ T9031] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 153.794736][ T9034] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 154.694342][ T9042] validate_nla: 3 callbacks suppressed [ 154.694360][ T9042] netlink: 'syz.2.2109': attribute type 3 has an invalid length. [ 154.707926][ T9042] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2109'. [ 154.750445][ T9044] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 154.823156][ T9048] netlink: 'syz.2.2112': attribute type 3 has an invalid length. [ 154.938093][ T9048] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2112'. [ 155.029116][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 155.029135][ T29] audit: type=1326 audit(1754342214.888:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 155.059499][ T29] audit: type=1326 audit(1754342214.888:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 155.083270][ T29] audit: type=1326 audit(1754342214.888:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 155.107161][ T29] audit: type=1326 audit(1754342214.888:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 155.399981][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'. [ 155.998813][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 156.115101][ T9067] netlink: 'syz.3.2120': attribute type 3 has an invalid length. [ 156.123154][ T9067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2120'. [ 156.147546][ T9071] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 156.152418][ T9074] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 156.186629][ T9076] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 156.198037][ T29] audit: type=1326 audit(1754342216.058:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 156.222020][ T29] audit: type=1326 audit(1754342216.058:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 156.245626][ T29] audit: type=1326 audit(1754342216.058:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 156.272519][ T9080] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2124'. [ 156.285846][ T29] audit: type=1326 audit(1754342216.118:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 156.365977][ T9087] netlink: 'syz.3.2127': attribute type 3 has an invalid length. [ 156.485229][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 156.841573][ T9104] 9pnet_fd: Insufficient options for proto=fd [ 157.168865][ T9112] netlink: 'syz.2.2136': attribute type 10 has an invalid length. [ 157.293633][ T29] audit: type=1326 audit(1754342217.068:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 157.317410][ T29] audit: type=1326 audit(1754342217.068:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4a5feb69 code=0x7ffc0000 [ 157.366509][ T9117] netlink: 'syz.2.2138': attribute type 3 has an invalid length. [ 157.699643][ T9128] netlink: 'syz.1.2142': attribute type 3 has an invalid length. [ 158.365866][ T9145] __nla_validate_parse: 2 callbacks suppressed [ 158.365885][ T9145] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2148'. [ 158.546569][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 158.720755][ T9162] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2156'. [ 159.974481][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 160.144728][ T9221] 9pnet_fd: Insufficient options for proto=fd [ 160.366441][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 160.366460][ T29] audit: type=1326 audit(1754342220.228:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.396330][ T29] audit: type=1326 audit(1754342220.228:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.420077][ T29] audit: type=1326 audit(1754342220.228:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.455193][ T29] audit: type=1326 audit(1754342220.228:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.479504][ T29] audit: type=1326 audit(1754342220.228:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.503441][ T29] audit: type=1326 audit(1754342220.228:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.527287][ T29] audit: type=1326 audit(1754342220.228:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.550972][ T29] audit: type=1326 audit(1754342220.228:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.574822][ T29] audit: type=1326 audit(1754342220.228:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bd2eb69 code=0x7ffc0000 [ 160.703292][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 160.811633][ T9239] validate_nla: 5 callbacks suppressed [ 160.811652][ T9239] netlink: 'syz.4.2184': attribute type 3 has an invalid length. [ 161.332607][ T9255] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 161.421185][ T9259] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 161.850070][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2194'. [ 161.875247][ T29] audit: type=1326 audit(1754342221.728:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.0.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d64beb69 code=0x7ffc0000 [ 161.937257][ T9272] ================================================================== [ 161.945394][ T9272] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 161.953157][ T9272] [ 161.955489][ T9272] write to 0xffff888237c25ea8 of 1 bytes by task 9214 on cpu 0: [ 161.963748][ T9272] folios_put_refs+0x285/0x2d0 [ 161.968617][ T9272] folio_batch_move_lru+0x1fd/0x230 [ 161.974192][ T9272] folio_add_lru+0x14a/0x1f0 [ 161.978925][ T9272] folio_add_lru_vma+0x49/0x70 [ 161.983734][ T9272] do_wp_page+0x1458/0x24e0 [ 161.988343][ T9272] handle_mm_fault+0x77d/0x2c20 [ 161.993225][ T9272] do_user_addr_fault+0x3fe/0x1090 [ 161.998633][ T9272] exc_page_fault+0x62/0xa0 [ 162.003147][ T9272] asm_exc_page_fault+0x26/0x30 [ 162.008012][ T9272] __put_user_nocheck_4+0x3/0x10 [ 162.012955][ T9272] ____sys_recvmsg+0x1a1/0x280 [ 162.017734][ T9272] ___sys_recvmsg+0x11f/0x370 [ 162.022501][ T9272] do_recvmmsg+0x1ef/0x540 [ 162.026931][ T9272] __x64_sys_recvmmsg+0xe5/0x170 [ 162.031984][ T9272] x64_sys_call+0x27a6/0x2ff0 [ 162.036771][ T9272] do_syscall_64+0xd2/0x200 [ 162.041318][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.047321][ T9272] [ 162.049650][ T9272] read to 0xffff888237c25ea8 of 1 bytes by task 9272 on cpu 1: [ 162.057286][ T9272] __lru_add_drain_all+0x12b/0x3f0 [ 162.062404][ T9272] lru_cache_disable+0x1f/0x30 [ 162.067168][ T9272] __se_sys_mbind+0x496/0xac0 [ 162.071948][ T9272] __x64_sys_mbind+0x78/0x90 [ 162.076631][ T9272] x64_sys_call+0x2932/0x2ff0 [ 162.081351][ T9272] do_syscall_64+0xd2/0x200 [ 162.085949][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.091852][ T9272] [ 162.094176][ T9272] value changed: 0x06 -> 0x00 [ 162.098852][ T9272] [ 162.101346][ T9272] Reported by Kernel Concurrency Sanitizer on: [ 162.107503][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.0.2195 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 162.119664][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.129725][ T9272] ================================================================== [ 162.192616][ T9272] netlink: 'syz.0.2195': attribute type 3 has an invalid length. [ 171.153511][ T3394] page_pool_release_retry() stalled pool shutdown: id 24, 21 inflight 121 sec