last executing test programs: 2m4.739312305s ago: executing program 0 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 2m4.701616579s ago: executing program 0 (id=299): mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2m3.683552839s ago: executing program 0 (id=315): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m3.606645727s ago: executing program 0 (id=316): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) lchown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) write$UHID_INPUT(r0, &(0x7f0000001000)={0x8, {"252cf433bf47dd2df8d2ca5bb41b51fb6ed828029baa9bd3afa855843172f65ce0ef21895fce15ac36ae63fab14f0e571e1510b5ce73de53c9062166d5b0883d42cd6fea0cd7f34e743ad9095f1351c1c8ac1c44d93445a1068789356f795a61b7d99921852ede79cc905c3d6806c92d41ef0f20a94e47b1e289e75813b915b3c7318b50698d5e18e276cf34ae9bef6277d79dab05204ffdf3207ac75e2fa72892607be8e04465c690ecd2127a18b092c04ff9c144ae6784ac4a885376cc7c100b12e430e0ec52ca38273cc15e55fb5a6c1c9f7a29f6c2de6ee989e81b7244ea9f5fd6e154fecd445555ca7cfc4e5266389bc0308adaca6d277e30e3cda65cb200d3e7b06a7c13eee08c75cc3b5434295493d20401b58e1d6a00f27bed88d73e9cc51c38c042da7ae6f92ccdc74e3f2e575ad0c61a806af8dca9fd0daf810d8a208084984d2c1f014e5e2ad216cd0a5859c1453fb4e7cbc624466edbb3a229d33d0e5539ab9842f8a77da5073b5c8ef2cc2c5640f08f245d7911dc0350e1f397575d86e0a96a5be2531e7a076c9e86d403a12c754748264d5758cc7abc665de66c3cde8d1dc11d854ea6cc5435635cd8769e5853f6666f533676bd87ddc22ac04af4fc06bade654490d1a4e2416dff3fe5d416834c9e33cb5ac99836e1abff49fe785112bc14233c0161a1ab931cf24bb46405444b568836e79bfa6c8460494c8f446e7d8cdfb7bd2e18562b82574b76b18c265da265028f1633777bdeeae79cb168ae2823d877bb4e0eed025ba92586dc4d967e8af60cc23ea12b2c2ae24e7a7d4fc04e88e0b2c5a69337f2e5c1b37e80e6dde6b51dd9d2f174647e99729c2f844ef404879114c398eea223f7059e98ac6611f0e3476bf2a0fc01d67932b96fe2eeb6b60f053c5a0bdd0c8d535f3912ac6812545387bd25e8748450b7f5dcc8a1738b394d3b979a8731612b8e0e2826928880b8c26263240cd8db3cce90c414b110bfdd82d5e03be492b4268ea7f06bb05a14a555029047cd772ab89c5620c67071247f10aab616422afd47d1d10e77209c2356320c12175c7c2800db3b4584ab304de688b11d1822b9ae748435f2099b8805b22cf3646307b76ccdf7fe68568895bd0749f42f3bb653f5d6d0da4453b951e2d71ee6b7e5a4d8f609759f93c5e5b32fea7c573b6118081e287b7c4886153e7f4a29524dd944d77605984174b45168964762c80cba5e6740a0d2cd9cf0c35753f5b915ae7ec48b6a8fabce433a5dc89ed133bdc152ebcdcac825b96110cab3b4d03679fd180409ebbb0f61ea5a933100608173890c8313469b1dc24e3589e6b340201802bce1f60d15ceb8e16634e7c12c50045a0aa1b2df17995d8391410851af6da6325a4dc1960408813e48c9363abe10b0e4e365487f9657222b24689de66cc736f70e6e0ea5baae2fb77ab3ff294117509261bd29d05e633814bc220384444cf704538ee0408c37aff53dfe988ec0909138f535ac9aad3af73e4e2b9e1809a57dc08a044f89d682cf2343cb0a639fec4223b94645838a2567ea482aebf77a40048e22fd1274a389c5c8d7cb83bc0c2ae00f7cf29a02f85ce4b8264078c538ac655823eed6e21e8bba6a4d59727f76ce30d1fd8db28ec538d1552088f34728c83f80fff317f9f4ab7334df608a013cb1e93ea4ab3cfcd07dc2df6b407017b67d5b457a80e891e00dbaf1d3847eea3ad135dc9bab8319041a6c508dcc45d8a473bcf6fb07a389594a52cc667ff7be60b4aa013e37594fea644293ebb0dc8b8e45ced5cd58ea99368c33ebcc98f4d633a85fd17f3fcf3a33c8d6554a0233b7eba47b749f3a99669fef284cc5cce1e106192d32e9e64207ce33281aa697123ee3c221d9066d5f6436045bbdaebf501d29b35c9302b402965ba7904644dfef6196abfe5980356f455fc66beb957978d27f2b5e1db0dcac86f9d87bcf6460d136e8008f4417345f67faf7c53a40bbfd7f0f2cdca00e76e3acb3f8d00d239f3b499e5d861675d584bb0364cc973ad4b7dec38003a1980812407470f3fa4a1de0d52a8effc2827b22419411f27731d3d6b77a7f8a15a3e1c08864ada9aab52ad774a45080b4a1271513c4d35ea7ae566b170b62350ee2c8d26cae13ab63961933c7f5dab2c2054823155e4b4e9c261cb13c0d02cfda59e09f86b7f8da6975b34b34f74cab1bb2754de508ecaa3d8932c36008f0fe8616511ab0fffc73b98dce1d904fad4c877faa7c4710507170e4ddd2d14e94a7043e4fecf6bb582f80254ba6bde560ab6b011059bd458a5f0afa44093079e73e6017a905cda897db270e99fdbc1f7630b1ac911d38bea8ceb8cdfdef92c67a38857ac3ce0ca2f1351366dfd407258ded66a55dffb92e821c13d92e03da36e0803f5cba590ee16b4f14c126cc311fc80e259fab7cb5c93939cbc6cedaecff0b9e7bb51d7e1a9e78ca18b7a9990e63dfd7ad0379c4df141e18f70327aa4e43d4217e4153b6db4c96287f2fa19d94df4be23402fac1c61722488ac3211a7079de19566e4144f392202ab9dc963467ba6847495a41727f9371eaadedf39e85052c2846c6358e51ff743d3709cf0a68d3c4e6fa8eb9da74fb51c8d939848c7e45f9ae8bbfd9f966ab52e35d20c06961161c6a745d29e82383ee44fc181922da6544312aaad14a8d861cdfaa0c2efcf5d4f45cdd9ab00fa4bcd0e4a0f4ef7b04d54ca91997ef99ec6be6c37550e03bd254e7533ef2d9280511fdafe4d3b6fdfeba8221ef1ba8f45a61bfc960f3c98f9986353a0074cc00b8d54c57e48d39f84b5d7de6bf024b31768d45089d2b9804c2ec8f4fb5b01485781163b30ad3b528a93b4080e524e62677d7e42c3b963f7148acc9ea9653c50eb940182d6353e6806114e3ec7b3d143a35360a1c92a8a3f645ff78a19cd29182d90584975b8cb24daee6447eeb2b1acad72d3d1ca0d8c56742d586e0c96edb4953255e1beb8d74e716ca08d3c9c260258988a7b55ff26d4c8158f7bcb3d3e2ee57b1f9ee0a7ad2fc7763e6f6c355fcafa01c5e58b9b0644d1926115fe4a0f8b6537a305969dcd08e04e5d37a722fb5610fa12f8a716e1180cbb122d329c41436a93cdd56a75223b18967fcec928ddfd0e35e417dd52f7973e35e66ed23ff756539e5c1cac3a5fcfa0881c49551aa7a99a950b074657e8bf617c28d2e92511f83f01f5cfdd59a1a2acb3d2414ca797f21276a477719eaa8bc4e3628a6254323a055f9f3f806699a1aa7292c084751add4f0258f2cee8920189f2923098b26bac9046f70d6e3608390f5509df457b950ab2051cf9c4f0426c1b18ebef18264effadef6453520c88313aa17f704221d24b795e94ede4b8d2b08c762ad3dd5c383263cabd03278800cddc55f714e2bf518d58178dcb3cba0ae39b6e0ab2f5005c87b4312060c45ac4ee953464f5725192f49b6c8b7676239e73861c9ccce082c09295d606909c3f6fb90c6c560ae9203bd7be2fc203a7767bc85c7a5d17149bb760253d2a23d96ee5254d927909197f54a03eb55c46bd7f1a1f2cffcdda23002ba1e567a34516855fa90cc636ca7c681ea0befd6e2d14eb5d6ed7fb3906306a3a18433241a2b4ad0e7a677d05817c2ce377e0214c354eccff934a1dc642d7c135165a93d7c74ba28826b761c0fe20bd758305749780d027b65457d84a053a46b3ec9bd8405da70042dcffdf10ea315688b66d1c32281cc5f39ccc074018d58e72cdef8ad17b232320d8c1daa4e287ae9fdb95d47c863db1c7652dd3e010e20bc77f1da051038407eee5d20fb5e965a6bcf9fa9812ea7e40a1491bfda2619c60163836f15e3a3f5d720fe036a9c9590685193b10415c8fb31437ce8bd82138174f1152ddceb2ab4496433e8ae9c95c7466b161eb12a5bedfa3c6b7aea87743190ac9e7d1baf2e47a780a5d7a37750d1e564c9bf8504a6c07ad5c542ee36966bdbb89448cc2d8a2471665f557b9f23f0e57485e274a1ef5bc443cb05ddbd7b1738347163c3de87f9e8c901b56572b6d8f6acfab55ab1e1f3451e992e044ba2342a5b484fb3474da81da63083a1986acd248d653404fb1fc419c17b06259834e73909e060c5bc28eb6679e1f6ec7c49df05bb1c0387da063b524aacb540b3da4f34b30228cd1eacc45ead6ca27b3258c770689843a9a25f3c663fa0ecdeece0fb4965ae95efb64e6f671ebfa8b7de4836eab9f86dbdf42e3020e0e760b0a77158138f8e3f81368e48080e09dc5a0cae08994a728d098fb6cb63831a1393dded9a8fc2ae2825bd70083ce490b2ca42ad8e61da6366348312672fe0e26fa3717f7cdb0ec12a298ec89cbb0a9b8ba29cc99929569a906807a5f2e0f62e0526ece9de66e8c75885b238dead181cf2956e5570623b1fc7282fb5799bdb98fe9208a2b992150375eaac1937edd6eafc9bab11231e364a1f328495037e0b26e313059f0e6fa9c18a4e2f46efacc0384b5e3d5b021fb80cf5231aa8f7e49a1abe5a1af95c306a655980fc942ebdbec1c8c523bfb2a7650a4ba0db202729a42af043ced7c4063a251c488413646a353d91fb82024986b03771b87083aea833de33aa44363062c8b1a5846f26603dacfd92afd9225a56ccecd607e511abbf5aeb47dd682c6b808b24789d41cf35bac1a415722a3859692f6b3056cda27b1ccda46ad9e308aef1e449784ad779e9872de34c0b3801e8ce6ec0c53ff28af9e038f3590db51e3d8a3e84767b92bbef5614dfdca2bcb32f4a7d077983e1a0321a1993077a09a0e51c00b83b7656775df941b23b75e2d9881d5bd58879906c930cb318d9333117eddbb27e174dbca8076ade60a18336f58582f48b352c3d8a0a3277c51608d9559336901cd0d3ab1491c1e650803011f2f0092b20bf0b62efda4d57edc5146757e90df0b4be92ee833ece5927cc89ae9cfc526c6e2a1767482c26e53b632a2f693c536610fd2de15cea288a29cbaff3233beb7fcc397f8aab78abea623e458928570d58f5b9f4b3a96f582bfd667a36309dd318cece1bfd7e36755aad8202522582bf17c55ae6a53c0a9adb755b492119f268e951076c78089aca6f8d93f47c9114775cad41fcce3b9208e9154d65bcbeb887fdcc8e06325e1f72712873ba8f5643f1f9a62d37f4e9dc16abcb5d49279701bf7f67edbf88bea63ddbb056acf55fb496de85ff17422d289ea83eba76fccb40437643e61ef2ae89fe99e4878e6d155c6d4a4d11e8641b38234f6a5a845d4ab8ce565744ff8924af6c5ae4e288d3ca84060ca00b6c2599ddb038548871268b761f580fe74228f20249f43d3bd129bc0ba513f6bc5a5e57f4ed5e319aa0853289f55f5b3417d5d84184434884e6a85054a651d94c3514b969376db32862053bd0bc18a4969515dbd214821b403551fa36d7f93517522e62e96bb2eca805059cab32f6897dcb6a54e53e790f209f7f527cbb198fd57793d94546c8013c6c17d7e7e16433b5270d79faecf430f3b692273f43ac766acfd66818e016879a9df3e9c0725d29fcfada6f06a9ba15a44052d688e508f8b1c5387246d32128bb8faede2d2356a4c5f1a13c0d6191024c70943a567fc8ecbf79dae1059edd768743429c5fda75c3d0f288963651b657e464254267b98792ce9b76e71ef01e955ac5625be7e0dc951a9bd9b8a690c81287ba891367299e6f5ca3eb2f5ce1aa96c072c7ae3eff304822fae468896cb2743a73f6186919112f2fdf2b669a27d5c47995d8995a80c711e4af25ee07c02432c790b9ee49c071d637851954aa2c", 0x1000}}, 0x1006) 2m3.386419229s ago: executing program 0 (id=325): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m3.120834795s ago: executing program 0 (id=331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x48) 2m3.06443107s ago: executing program 32 (id=331): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x48) 5.17622909s ago: executing program 4 (id=2746): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x28000600) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x95) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@empty, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x4, 0x8000, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 4.341743512s ago: executing program 4 (id=2758): syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x911, 0x70bd2c, 0x25dfdbfe, {{{@in=@local, @in6=@private2, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x3c, 0x0, 0xee01}, {@in=@private=0xa010101, 0x4d4, 0x6c}, @in6=@loopback, {0x9, 0x0, 0x7fffffffffffffff, 0x300000000000, 0x209, 0x0, 0x8001, 0xd24e}, {0xffffffffffffaccc, 0x5, 0x3, 0x6439}, {0x6, 0x9, 0x6}, 0x70bd2b, 0x3505, 0xa, 0x1, 0x41, 0x48}, 0xe, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.933017231s ago: executing program 3 (id=2775): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000600), &(0x7f0000000240)='syzkaller\x00', 0xfffffc01, 0xc9, &(0x7f0000000740)=""/201, 0x40f00, 0x1f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x8, 0x6e4, 0x7}, 0x10, 0xc571, r6, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x4, 0x0, 0x8400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) socket$kcm(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.732166111s ago: executing program 1 (id=2779): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28042, 0x90) fallocate(r0, 0x1, 0x0, 0x8000c62) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000193c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000019480)=@base={0x0, 0x4, 0x7fffffff, 0x2, 0x402c0, r0, 0x4, '\x00', r1, r0, 0x2, 0x3, 0x4}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000019440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 'erspan0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'pim6reg0\x00'}}, 0x1e) r5 = epoll_create1(0x80000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000019400)) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140), 0x10) socket$kcm(0x1e, 0x5, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x81, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa0028000}) pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="0f00c600000000450000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.187361874s ago: executing program 1 (id=2780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x8000000) r2 = open$dir(&(0x7f0000000040)='./file2\x00', 0x0, 0x20) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, r2, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000280)='./file2\x00', 0xffffffffffffffff, 0x400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x115}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") 2.13459798s ago: executing program 5 (id=2782): socket$inet(0x2, 0x2, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000010000061148400000000fcc5900f3d352620d2e8f10005000000000000009500e6ffd297c25c623058f5dbd7163e8627444967954310c3aad251520ef30fa4d77f83437bd1f1ddb841651a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0xc}, 0x18) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x2, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r11, 0x29, 0x3b, 0xffffffffffffffff, &(0x7f0000000500)) poll(&(0x7f00000002c0)=[{r1, 0x4100}, {r1, 0x8000}, {r1, 0x4000}, {r0, 0x8000}, {r2, 0x4020}, {r3}, {r1, 0x4}], 0x7, 0x800) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x7, &(0x7f0000000100)=0x43, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) move_mount(r3, &(0x7f0000000600)='./file0\x00', r3, &(0x7f0000000640)='./file0\x00', 0x200) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000001000000ab3909604100"/32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r13}, 0x38) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.084951395s ago: executing program 3 (id=2783): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad0601", 0x6c}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f0000001040)="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", 0x1bc}], 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x4, 0x6, @local}, 0x14) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b", 0x2e, 0x0, &(0x7f0000000040)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x488d0}, 0xc000) 1.887982324s ago: executing program 3 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0xe27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg1\x00'}]}}]}, 0x48}}, 0x20040054) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, 0x0, &(0x7f00000004c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rss_stat\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES8=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r10 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r10, 0x0, 0x0) 1.791514683s ago: executing program 3 (id=2785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.313568151s ago: executing program 1 (id=2787): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="160000000000000004000000010000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000400000000000000008500000023000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r0, 0x0, 0xe17}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioprio_get$uid(0x3, 0xee01) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x10040045}, 0x0) 1.271208185s ago: executing program 5 (id=2788): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000200)=""/43, 0x2b, 0x730) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/llc/socket\x00') r4 = syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000940)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = mq_open(0x0, 0x41, 0x0, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, 0x0) mq_timedreceive(r6, 0x0, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x40011, r2, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 1.131926108s ago: executing program 5 (id=2789): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x2, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) tkill(r2, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) semget$private(0x0, 0x2, 0x40) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.127188039s ago: executing program 4 (id=2790): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000cc9000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t\t') r3 = getpid() r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000300)) mlock2(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a00003c0000000000019078ac1414ff35826d23f873f25513d67243c05687bbac1414bb44140be7ff0000000000000000000000000000050d009078"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(r3, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 874.319884ms ago: executing program 5 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8000000008}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b492ebd700000000000150000000c009900040000003a00000005001d8004000080"], 0x28}}, 0x40000) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x83c0550b, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6'], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 728.961108ms ago: executing program 1 (id=2793): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000600000013000300686173683a6e65742c6966616365000005000500b7aee7ca0c0007800500150007000000090002"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0xf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x8, 0x800, 0x1}) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0!|!') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r9 = fcntl$dupfd(r4, 0x0, r0) write$UHID_SET_REPORT_REPLY(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000020000000806c0004329e4d6213474f86ce9036421bf25e8dce73330b1f9a05ae4f39d0caa21d718a648823a32379573fcbd4f9cb09395573cdcb6c113084db1779e827aaa6f5c0e03c40a9f052d4dfdf0f79df26365b5fe638785940fd307058d3758522896af1b0c69f5b25e4cad1da7986ef6ab8674d89b8087ff41cb985509eb34cd98a91da589b0e209aa941ba71f57d1e63663078c721f88ad554bb13a75bd8e2240682e7258d89be38a9f4a3f581c48c369788dddb915b582bee948b605c0a3cc048a0000"], 0xcc) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket(0xa, 0x3, 0x3d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 627.993308ms ago: executing program 1 (id=2794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8c0, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000038c0)='./file1/file3\x00', 0x2) write$binfmt_elf32(r6, &(0x7f0000001200)=ANY=[@ANYBLOB="7f454c46040700030500000000000000020003000300000009030000a3fefffffcffffff0e000000000020000100050000000000000000000300000008"], 0x858) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x12c, r7, 0xfc5, 0x70bd29, 0x4000, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x1c}, {{}, @device_a, 0x4, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x2a}, {{}, @broadcast, 0x7805, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x101, @value, 0x19}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x7}, {{0x0, 0x1}, @device_b, 0x2, @value, 0xb}, {{}, @broadcast, 0x100, @void, 0x1e}, {{}, @device_b, 0x100040, @void, 0x26}, {{}, @device_a, 0x7fffffff, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x12}, {{}, @broadcast, 0x0, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0xa}, {{}, @device_a, 0x80, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x6, @value, 0xb}]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 584.641963ms ago: executing program 1 (id=2795): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x3200841, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000240), 0x0) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 565.058744ms ago: executing program 3 (id=2796): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0xfc, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x305}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x215}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xed9f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x305}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6800000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]]}, 0xfc}}, 0x4000054) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r8 = openat(r7, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRES8]) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000328bd0000fddbdf25060000000c0002050000060002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48015) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001ec0)=""/4051, 0xfd3}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/178, 0xb2}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000d40)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163e0101000000000000da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 512.56049ms ago: executing program 2 (id=2797): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 444.629056ms ago: executing program 3 (id=2798): socket$inet(0x2, 0x2, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000010000061148400000000fcc5900f3d352620d2e8f10005000000000000009500e6ffd297c25c623058f5dbd7163e8627444967954310c3aad251520ef30fa4d77f83437bd1f1ddb841651a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0xc}, 0x18) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x2, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r11, 0x29, 0x3b, 0xffffffffffffffff, &(0x7f0000000500)) poll(&(0x7f00000002c0)=[{r1, 0x4100}, {r1, 0x8000}, {r1, 0x4000}, {r0, 0x8000}, {r2, 0x4020}, {r3}, {r1, 0x4}], 0x7, 0x800) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x7, &(0x7f0000000100)=0x43, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) move_mount(r3, &(0x7f0000000600)='./file0\x00', r3, &(0x7f0000000640)='./file0\x00', 0x200) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000001000000ab3909604100"/32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r13}, 0x38) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 201.00591ms ago: executing program 4 (id=2799): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r5}, 0x18) write$selinux_validatetrans(r4, &(0x7f0000000140)={'system_u:object_r:tmpfs_t:s0', 0x20, 'system_u:object_r:sshd_key_t:s0', 0x20, 0x8, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x70) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r7, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 152.199775ms ago: executing program 2 (id=2800): mlockall(0x4) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1, 0xbfd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$nl_xfrm(0x10, 0x3, 0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) creat(0x0, 0xecf86c37d53049cc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0xffffffffffffffff, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x12, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f00000000c0)=0x11, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 150.788485ms ago: executing program 2 (id=2801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@can={{}, 0x5, 0x3, 0x0, 0x0, "cacf51fb8e096bcf"}, 0x10}}, 0x44) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 100.78762ms ago: executing program 5 (id=2802): unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x50) semget$private(0x0, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f00000000c0)='./mnt\x00', r1, &(0x7f0000000000)='./mnt\x00', 0x177) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='fscache_acquire\x00', 0xffffffffffffffff, 0x0, 0x6a7d}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r2, r0, 0x0, r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000001cf, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x35039c062aff7af0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000", @ANYRES32=r3], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0xd96, 0x80800) r4 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 80.498122ms ago: executing program 4 (id=2803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa2fefc5761bc377b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000d80)=ANY=[], 0x36) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x80, 0x8000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000940)={0x0, 0xfffffffffffffffe, 0x97, 0x6b, @scatter={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000580)="7b4b6619efbedb74ac9569a18091c6eafaacdb22dbbf5106976abf13066c3ff8ce94a6c6d3b7624107c3f77ad1d2da753d55cf6a01148e7b1207c298bcee17b867cd930e97b10d58495a94b241fc2ad9a7abb157e2e48cdd7c401ed700e3a85b5a1b91118bf9b1618cf3ac91077ec8cb9c9c4c65ec2f8b0be6353f798946c305173048f6fff65366ddf2b8db6ae14563736157851bcbe5", &(0x7f0000000840)=""/254, 0xe9a, 0x10006, 0x2, &(0x7f0000000640)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) unshare(0x28000600) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600362f93417cb4e95e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x4, r5}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6c7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_USERDATA={0x3d, 0xc, "11454783cbaaf06cb67bd0405ea32b03382921b75d733ced30466f925ed923512629ce399285a403780d4047097d71daea6b61499374fae5b8"}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41b170cb}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57916b3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11428a1b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x585d0bc8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58c73e14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5eaa7e82}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1cd8195b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26a2f863}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a68fe45}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x5}, 0x8890) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x284002, 0x0) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000005304"], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x50) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 58.915475ms ago: executing program 5 (id=2804): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) chmod(0x0, 0x54) r1 = syz_open_procfs$userns(0x0, &(0x7f00000005c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000600)={0x8, 0xa, 0x0, {r1}}, 0x20) io_setup(0x9, &(0x7f0000003080)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x3, 0x7ffc5ffb}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x7, 0x0, 0x0) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) io_getevents(r2, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r7, &(0x7f0000000380)="79eba42f49d2b592470f99e1e5ccb0fb410f7bb4f86fa87ae4152da7e9094f5615508d33490c18dea841397a568522d0e68a3262e38ab322de7931e4550b8b81fb6fafe99499e1ed0a09179d9118850b40bc75ed22b6c776242d6008e400b9c27b88b911c374f498a0f749d8f6a4786b592f1956e452de0a71a3e5b0ea84e4bd420fc97697362980f1abcae9ceac1712df13f8cf5a5165199d3a7b739e10bd883ed405449e2700fd28a72bb48aa9a9eaa6cac2516a90985a62f5b0657d073ec50afc202282f739bc88643c79f431241384d42ea650"}, 0x20) 54.181825ms ago: executing program 2 (id=2805): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20442) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x5, 0x6}) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) fallocate(r0, 0x2b, 0xa, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x70280, 0x0) getdents64(r6, &(0x7f0000000300)=""/255, 0xff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030f00000000000000000700000030000280080002"], 0x44}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) socket$kcm(0x10, 0x2, 0x0) 1.94005ms ago: executing program 2 (id=2806): sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=0x0], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x0, 0x44}, 0x28) statx(0xffffffffffffffff, 0x0, 0x4000, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1d0000000000000000000000000004dbe5109d086112f760b6e8cc404773fb3d8168b1fe5316dffb52b7a382dfb0f6e5653c085a3ce5daf8c53d8e19ab3edf2eeb4b0e00000000000000308ed2737c98dcef2154c4173331be033cb2215ef4b5e499f9b4bc618a672b716031c793fec26f72c7a5dcf6c298807d49ffecf679ec84983341d4651b5173aa674d3ff2f05c252c11c18d097aca62102d348960f00b47d2466c770c3695a81004553cb9ccc26c5127dfad222f72d014da678ea71032da7be217607854"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYRESHEX], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001080)=@newtaction={0x1c8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1b4, 0x1, [@m_sample={0x1b0, 0x15, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x557, 0xd8, 0x5, 0x4, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x14a, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1c8}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0xec) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 1.1291ms ago: executing program 2 (id=2807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=2808): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x28040890) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x2, 0xffff, 0x2, 0x8}, 0x4, 0x6, 0xd6}) r7 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x1001) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x13) sendmsg$tipc(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x12001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) kernel console output (not intermixed with test programs): lass=netlink_rdma_socket permissive=1 [ 75.874025][ T5962] netlink: 'syz.1.686': attribute type 11 has an invalid length. [ 75.886870][ T29] audit: type=1400 audit(1761208913.159:971): avc: denied { write } for pid=5961 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.903134][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.241946][ T5994] loop1: detected capacity change from 0 to 512 [ 76.272524][ T5994] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.699: inode has both inline data and extents flags [ 76.303790][ T5994] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.699: couldn't read orphan inode 15 (err -117) [ 76.347367][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.479164][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.500588][ T6018] loop1: detected capacity change from 0 to 128 [ 76.538514][ T6018] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.638795][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 76.650081][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 76.719488][ T37] bio_check_eod: 145 callbacks suppressed [ 76.719507][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.719507][ T37] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 76.739433][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.739433][ T37] loop1: rw=1, sector=185, nr_sectors = 16 limit=128 [ 76.753240][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.753240][ T37] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 76.768041][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.768041][ T37] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 76.781790][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.781790][ T37] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 76.795544][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.795544][ T37] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 76.809175][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.809175][ T37] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 76.826931][ T6034] loop4: detected capacity change from 0 to 512 [ 76.834781][ T6034] EXT4-fs: Ignoring removed i_version option [ 76.840895][ T6034] EXT4-fs: Ignoring removed bh option [ 76.846863][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.846863][ T37] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 76.860829][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.860829][ T37] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 76.874336][ T37] kworker/u8:2: attempt to access beyond end of device [ 76.874336][ T37] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 76.890457][ T37] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.901456][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.914519][ T6034] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.008943][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.062268][ T6054] syz_tun: entered allmulticast mode [ 77.098460][ T6056] syzkaller0: entered allmulticast mode [ 77.111622][ T6060] xt_hashlimit: max too large, truncated to 1048576 [ 77.123871][ T6056] syzkaller0: entered promiscuous mode [ 77.140158][ T6056] syzkaller0 (unregistering): left allmulticast mode [ 77.146970][ T6056] syzkaller0 (unregistering): left promiscuous mode [ 77.194242][ T6070] xt_hashlimit: max too large, truncated to 1048576 [ 77.203730][ T6070] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.655149][ T6083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.665598][ T6083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.776191][ T6083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.786639][ T6083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.887078][ T6083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.897574][ T6083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.029161][ T6083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.039605][ T6083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.104008][ T6088] loop4: detected capacity change from 0 to 512 [ 78.158377][ T6088] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 78.168144][ T5335] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.176382][ T5335] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180172][ T6097] loop5: detected capacity change from 0 to 1024 [ 78.193081][ T6088] EXT4-fs (loop4): invalid journal inode [ 78.195853][ T6097] EXT4-fs: inline encryption not supported [ 78.198877][ T6088] EXT4-fs (loop4): can't get journal size [ 78.213627][ T5335] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.222151][ T5335] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222852][ T6088] EXT4-fs (loop4): 1 truncate cleaned up [ 78.231983][ T5335] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.244325][ T5335] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.253161][ T6097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.276346][ T6097] netlink: 3 bytes leftover after parsing attributes in process `syz.5.738'. [ 78.276482][ T6088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.291314][ T6097] !60X: renamed from caif0 [ 78.310914][ T6097] !60X: entered allmulticast mode [ 78.316322][ T6097] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 78.341120][ T5335] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.349476][ T5335] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.399633][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.420866][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.457430][ T6117] veth0_vlan: entered allmulticast mode [ 78.480437][ T6121] batadv_slave_0: entered allmulticast mode [ 78.486451][ T6119] tipc: Started in network mode [ 78.491505][ T6119] tipc: Node identity 06858b70d50c, cluster identity 4711 [ 78.498807][ T6119] tipc: Enabled bearer , priority 0 [ 78.509227][ T6119] tipc: Disabling bearer [ 78.516388][ T6117] : renamed from vlan0 [ 78.530743][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 78.540854][ T6121] batadv_slave_0: left allmulticast mode [ 78.561270][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 78.634636][ T6133] ip6gre1: entered allmulticast mode [ 78.737700][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.748679][ T6140] loop3: detected capacity change from 0 to 1024 [ 78.756110][ T6140] EXT4-fs: Ignoring removed bh option [ 78.768582][ T6140] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 78.788471][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.807519][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.985713][ T6140] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 79.120790][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.159409][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 79.507658][ T6170] loop5: detected capacity change from 0 to 1024 [ 79.556423][ T6170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.587007][ T6170] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.771: bg 0: block 88: padding at end of block bitmap is not set [ 79.722981][ T6191] netem: incorrect ge model size [ 79.727987][ T6191] netem: change failed [ 79.759178][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.142189][ T6219] loop5: detected capacity change from 0 to 512 [ 80.150300][ T6219] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.792: inode has both inline data and extents flags [ 80.163822][ T6219] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.792: couldn't read orphan inode 15 (err -117) [ 80.176719][ T6219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.196092][ T6222] loop2: detected capacity change from 0 to 512 [ 80.203417][ T6222] EXT4-fs: Ignoring removed i_version option [ 80.209673][ T6222] EXT4-fs: Ignoring removed bh option [ 80.220854][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.233935][ T6222] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.272032][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.282357][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.302861][ T6228] netlink: 'syz.2.793': attribute type 30 has an invalid length. [ 80.321958][ T6226] vhci_hcd: invalid port number 96 [ 80.327266][ T6226] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 80.426003][ T6242] loop4: detected capacity change from 0 to 128 [ 80.599661][ T6250] tipc: New replicast peer: 255.255.255.255 [ 80.606303][ T6250] tipc: Enabled bearer , priority 10 [ 80.656997][ T6254] loop5: detected capacity change from 0 to 512 [ 80.678455][ T6254] EXT4-fs: Ignoring removed i_version option [ 80.684775][ T6254] EXT4-fs: Ignoring removed bh option [ 80.730609][ T6254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.751702][ T6259] veth4: entered promiscuous mode [ 80.756855][ T6259] veth4: entered allmulticast mode [ 80.779181][ T6254] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.852131][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.892160][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 80.892178][ T29] audit: type=1400 audit(1761208918.189:1132): avc: denied { watch watch_reads } for pid=6263 comm="syz.5.808" path="/" dev="ramfs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 80.957246][ T6262] vhci_hcd: invalid port number 96 [ 80.962590][ T6262] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 80.983471][ T6268] loop5: detected capacity change from 0 to 512 [ 80.990998][ T6268] EXT4-fs: quotafile must be on filesystem root [ 81.119139][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 81.129056][ T6277] netlink: 416 bytes leftover after parsing attributes in process `syz.4.815'. [ 81.138871][ T6274] tipc: Enabled bearer , priority 0 [ 81.149011][ T6273] tipc: Resetting bearer [ 81.184223][ T6273] tipc: Disabling bearer [ 81.311395][ T6283] ip6gre1: entered allmulticast mode [ 81.384399][ T6290] veth0_vlan: entered allmulticast mode [ 81.388099][ T29] audit: type=1326 audit(1761208918.679:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 81.447707][ T6291] loop1: detected capacity change from 0 to 1024 [ 81.476933][ T29] audit: type=1326 audit(1761208918.699:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 81.500354][ T29] audit: type=1326 audit(1761208918.729:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 81.524017][ T29] audit: type=1326 audit(1761208918.729:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 81.547538][ T29] audit: type=1326 audit(1761208918.739:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 81.571277][ T29] audit: type=1326 audit(1761208918.739:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ae4a1f003 code=0x7ffc0000 [ 81.594616][ T29] audit: type=1326 audit(1761208918.739:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ae4a1da7f code=0x7ffc0000 [ 81.617887][ T29] audit: type=1326 audit(1761208918.739:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5ae4a1f057 code=0x7ffc0000 [ 81.641163][ T29] audit: type=1326 audit(1761208918.739:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ae4a1d810 code=0x7ffc0000 [ 81.666135][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.708553][ T6291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.821: bg 0: block 88: padding at end of block bitmap is not set [ 81.732299][ T6300] loop5: detected capacity change from 0 to 1024 [ 81.748537][ T6300] EXT4-fs: Ignoring removed orlov option [ 81.850151][ T6300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.929071][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.169540][ T3385] tipc: Node number set to 3549006704 [ 82.300197][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.360307][ T6318] netlink: 76 bytes leftover after parsing attributes in process `syz.5.830'. [ 82.512269][ T6329] netlink: 'syz.5.835': attribute type 10 has an invalid length. [ 82.521602][ T6329] team0: Port device dummy0 added [ 82.539927][ T6329] netlink: 'syz.5.835': attribute type 10 has an invalid length. [ 82.549245][ T6329] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.560164][ T6329] team0: Failed to send options change via netlink (err -105) [ 82.570357][ T6329] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.582915][ T6329] team0: Port device dummy0 removed [ 82.593308][ T6329] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.606307][ T6332] pim6reg: entered allmulticast mode [ 82.616386][ T6332] pim6reg: left allmulticast mode [ 82.676458][ T6337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.702445][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.838'. [ 82.890340][ T6350] loop1: detected capacity change from 0 to 2048 [ 82.910925][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.999476][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.021196][ T6359] loop5: detected capacity change from 0 to 1024 [ 83.039660][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.050386][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.063816][ T6363] loop1: detected capacity change from 0 to 512 [ 83.088350][ T6363] EXT4-fs: Ignoring removed i_version option [ 83.094428][ T6363] EXT4-fs: Ignoring removed bh option [ 83.123529][ T6363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.155209][ T6363] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.215279][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.464766][ T6370] loop4: detected capacity change from 0 to 164 [ 83.492128][ T6370] rock: directory entry would overflow storage [ 83.498388][ T6370] rock: sig=0x66, size=4, remaining=3 [ 83.527009][ T6380] loop4: detected capacity change from 0 to 128 [ 83.538103][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'. [ 83.579649][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 83.610434][ T6387] bio_check_eod: 1393 callbacks suppressed [ 83.610454][ T6387] syz.4.854: attempt to access beyond end of device [ 83.610454][ T6387] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 83.747395][ T6387] syz.4.854: attempt to access beyond end of device [ 83.747395][ T6387] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 83.752479][ T6397] loop2: detected capacity change from 0 to 512 [ 83.780696][ T6387] syz.4.854: attempt to access beyond end of device [ 83.780696][ T6387] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 83.794575][ T6397] EXT4-fs: Ignoring removed i_version option [ 83.800663][ T6397] EXT4-fs: Ignoring removed bh option [ 83.820066][ T6399] loop1: detected capacity change from 0 to 512 [ 83.835438][ T6387] syz.4.854: attempt to access beyond end of device [ 83.835438][ T6387] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 83.849194][ T6399] EXT4-fs: quotafile must be on filesystem root [ 83.855705][ T6387] syz.4.854: attempt to access beyond end of device [ 83.855705][ T6387] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 83.872668][ T6387] syz.4.854: attempt to access beyond end of device [ 83.872668][ T6387] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 83.873040][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.886561][ T6387] syz.4.854: attempt to access beyond end of device [ 83.886561][ T6387] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 83.909212][ T6387] syz.4.854: attempt to access beyond end of device [ 83.909212][ T6387] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 83.923931][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.936803][ T6397] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.947214][ T6387] syz.4.854: attempt to access beyond end of device [ 83.947214][ T6387] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 83.965936][ T6387] syz.4.854: attempt to access beyond end of device [ 83.965936][ T6387] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 83.990026][ T6403] syzkaller0: entered allmulticast mode [ 83.998890][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.998942][ T6407] loop5: detected capacity change from 0 to 512 [ 84.008313][ T6407] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.025255][ T6403] syzkaller0: entered promiscuous mode [ 84.033599][ T6407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.047453][ T6403] syzkaller0 (unregistering): left allmulticast mode [ 84.054242][ T6403] syzkaller0 (unregistering): left promiscuous mode [ 84.079020][ T4764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.176013][ T6424] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.186138][ T6424] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.316882][ T6424] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.326750][ T6424] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.362576][ T5312] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.414039][ T5335] Bluetooth: hci1: Frame reassembly failed (-84) [ 84.429801][ T6424] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.439605][ T6424] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.520179][ T6424] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.530130][ T6424] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.605827][ T37] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.614158][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.625304][ T37] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.633656][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.645154][ T37] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.653545][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.669090][ T37] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.677402][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820023][ T6447] loop1: detected capacity change from 0 to 1024 [ 84.832599][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.863147][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.902987][ T6453] syzkaller0: entered promiscuous mode [ 84.908553][ T6453] syzkaller0: entered allmulticast mode [ 84.969618][ T6457] syzkaller0: entered allmulticast mode [ 84.975417][ T6457] syzkaller0: entered promiscuous mode [ 84.983857][ T6457] syzkaller0 (unregistering): left allmulticast mode [ 84.990609][ T6457] syzkaller0 (unregistering): left promiscuous mode [ 86.075496][ T6498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6498 comm=syz.1.901 [ 86.260570][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'. [ 86.418132][ T5530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.424325][ T5530] Bluetooth: hci1: command 0x1003 tx timeout [ 86.430403][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 86.481737][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 86.481755][ T29] audit: type=1400 audit(1761208923.779:1203): avc: denied { mount } for pid=6511 comm="syz.5.907" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.512149][ T29] audit: type=1400 audit(1761208923.779:1204): avc: denied { mounton } for pid=6511 comm="syz.5.907" path="/142/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 86.534261][ T29] audit: type=1400 audit(1761208923.779:1205): avc: denied { mount } for pid=6511 comm="syz.5.907" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.556457][ T29] audit: type=1400 audit(1761208923.779:1206): avc: denied { unmount } for pid=6511 comm="syz.5.907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.577375][ T29] audit: type=1400 audit(1761208923.809:1207): avc: denied { unmount } for pid=4764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.597988][ T6514] loop1: detected capacity change from 0 to 1024 [ 86.605228][ T6514] EXT4-fs: Ignoring removed nobh option [ 86.611161][ T6514] EXT4-fs: Ignoring removed bh option [ 86.617350][ T6514] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 86.629722][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.659824][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.807993][ T29] audit: type=1400 audit(1761208924.099:1208): avc: denied { setopt } for pid=6526 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.872595][ T29] audit: type=1400 audit(1761208924.169:1209): avc: denied { mount } for pid=6531 comm="syz.5.915" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.018882][ T29] audit: type=1400 audit(1761208924.319:1210): avc: denied { read } for pid=6539 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.039047][ T29] audit: type=1404 audit(1761208924.339:1211): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 87.054338][ T29] audit: type=1400 audit(1761208924.339:1212): avc: denied { perfmon } for pid=6535 comm="syz.4.917" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 87.172265][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 87.439925][ T6580] netlink: 'syz.1.936': attribute type 12 has an invalid length. [ 87.859806][ T3397] Process accounting resumed [ 88.422213][ T6673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6673 comm=syz.4.974 [ 88.726703][ T6718] veth6: entered promiscuous mode [ 88.731867][ T6718] veth6: entered allmulticast mode [ 89.105179][ T6746] syzkaller0: entered promiscuous mode [ 89.110737][ T6746] syzkaller0: entered allmulticast mode [ 89.184780][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1012'. [ 89.485874][ T6779] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 89.504497][ T6780] veth4: entered promiscuous mode [ 89.509760][ T6780] veth4: entered allmulticast mode [ 89.520456][ T6783] netlink: 'syz.5.1029': attribute type 10 has an invalid length. [ 89.537105][ T6783] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 89.580712][ T6789] veth2: entered promiscuous mode [ 89.585861][ T6789] veth2: entered allmulticast mode [ 90.015748][ T6844] pim6reg1: entered promiscuous mode [ 90.021537][ T6844] pim6reg1: entered allmulticast mode [ 90.066511][ T6847] pim6reg1: entered promiscuous mode [ 90.071978][ T6847] pim6reg1: entered allmulticast mode [ 90.194392][ T6854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6854 comm=syz.3.1060 [ 91.155692][ T6894] bridge: RTM_NEWNEIGH with invalid ether address [ 91.260493][ T6906] veth4: entered promiscuous mode [ 91.265700][ T6906] veth4: entered allmulticast mode [ 91.521624][ T29] kauditd_printk_skb: 1049 callbacks suppressed [ 91.521643][ T29] audit: type=1400 audit(1761208928.819:2262): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.578133][ T29] audit: type=1400 audit(1761208928.849:2263): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.602508][ T29] audit: type=1400 audit(1761208928.859:2264): avc: denied { map_create } for pid=6923 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.622088][ T29] audit: type=1400 audit(1761208928.869:2265): avc: denied { map_create } for pid=6925 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.641333][ T29] audit: type=1400 audit(1761208928.869:2266): avc: denied { prog_load } for pid=6925 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.660415][ T29] audit: type=1400 audit(1761208928.869:2267): avc: denied { map_create } for pid=6923 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.679583][ T29] audit: type=1400 audit(1761208928.869:2268): avc: denied { prog_load } for pid=6923 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.698723][ T29] audit: type=1400 audit(1761208928.869:2269): avc: denied { prog_load } for pid=6923 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.788490][ T29] audit: type=1400 audit(1761208929.029:2270): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.812786][ T29] audit: type=1400 audit(1761208929.039:2271): avc: denied { map_create } for pid=6927 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.470377][ T6974] Q6\bY4: renamed from lo (while UP) [ 92.682705][ T6993] wireguard0: entered promiscuous mode [ 92.688455][ T6993] wireguard0: entered allmulticast mode [ 92.725521][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 92.743429][ T6996] veth1_macvtap: left promiscuous mode [ 92.804354][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 92.830612][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'. [ 92.839976][ T7006] bridge_slave_1: left allmulticast mode [ 92.845706][ T7006] bridge_slave_1: left promiscuous mode [ 92.851482][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.859391][ T7006] bridge_slave_0: left allmulticast mode [ 92.865076][ T7006] bridge_slave_0: left promiscuous mode [ 92.870866][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.400814][ T7064] team0 (unregistering): Port device team_slave_0 removed [ 93.628525][ T7087] bridge: RTM_NEWNEIGH with invalid ether address [ 94.138715][ T7107] veth8: entered promiscuous mode [ 94.143822][ T7107] veth8: entered allmulticast mode [ 94.732860][ T7155] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 95.490365][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'. [ 95.521567][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1202'. [ 95.547964][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1206'. [ 95.561451][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1202'. [ 95.608007][ T7208] pim6reg1: entered promiscuous mode [ 95.613465][ T7208] pim6reg1: entered allmulticast mode [ 96.297535][ T7260] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 96.312280][ T7260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.322585][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 96.334210][ T7260] bond1 (unregistering): Released all slaves [ 96.457277][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 96.457293][ T29] audit: type=1400 audit(1761208933.828:3139): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.491011][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 96.500131][ T29] audit: type=1400 audit(1761208933.869:3140): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.529126][ T29] audit: type=1400 audit(1761208933.910:3141): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.566083][ T29] audit: type=1400 audit(1761208933.941:3142): avc: denied { prog_load } for pid=7275 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.571884][ T7273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.585364][ T29] audit: type=1400 audit(1761208933.941:3143): avc: denied { prog_load } for pid=7275 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.611011][ T29] audit: type=1400 audit(1761208933.941:3144): avc: denied { create } for pid=7275 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 96.630613][ T29] audit: type=1400 audit(1761208933.941:3145): avc: denied { create } for pid=7275 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 96.652651][ T29] audit: type=1400 audit(1761208933.982:3146): avc: denied { prog_load } for pid=7279 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.671938][ T29] audit: type=1400 audit(1761208933.982:3147): avc: denied { prog_load } for pid=7279 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.691208][ T29] audit: type=1400 audit(1761208933.982:3148): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.716551][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.723854][ T7278] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.735431][ T7278] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.813429][ T7294] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 97.667897][ T7353] capability: warning: `syz.5.1272' uses deprecated v2 capabilities in a way that may be insecure [ 98.265230][ T7393] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 98.282044][ T7393] team0: entered promiscuous mode [ 98.287202][ T7393] team0: entered allmulticast mode [ 98.292946][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.665040][ T7419] veth6: entered promiscuous mode [ 98.670120][ T7419] veth6: entered allmulticast mode [ 98.789604][ T7434] netlink: 'syz.1.1307': attribute type 13 has an invalid length. [ 99.110365][ T5331] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.276427][ T5331] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.289794][ T7453] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 99.295145][ T5331] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.329676][ T7453] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 99.351969][ T5331] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.217159][ T7520] syz.2.1339 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.491870][ T7554] netlink: 'syz.4.1355': attribute type 4 has an invalid length. [ 100.499943][ T7554] netlink: 'syz.4.1355': attribute type 4 has an invalid length. [ 100.620313][ T7566] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.679605][ T7574] netlink: 'syz.3.1365': attribute type 7 has an invalid length. [ 100.687413][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 100.859099][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 101.361788][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 101.361803][ T29] audit: type=1400 audit(1761208938.851:4002): avc: denied { create } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 101.442213][ T29] audit: type=1400 audit(1761208938.892:4003): avc: denied { prog_load } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.461480][ T29] audit: type=1400 audit(1761208938.892:4004): avc: denied { prog_load } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.480555][ T29] audit: type=1400 audit(1761208938.892:4005): avc: denied { prog_load } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.499709][ T29] audit: type=1400 audit(1761208938.892:4006): avc: denied { prog_load } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.518797][ T29] audit: type=1400 audit(1761208938.892:4007): avc: denied { create } for pid=7627 comm="syz.3.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 101.538390][ T29] audit: type=1400 audit(1761208938.892:4008): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.562710][ T29] audit: type=1400 audit(1761208938.912:4009): avc: denied { prog_load } for pid=7630 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.581964][ T29] audit: type=1400 audit(1761208938.912:4010): avc: denied { prog_load } for pid=7630 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.601204][ T29] audit: type=1400 audit(1761208938.912:4011): avc: denied { prog_load } for pid=7630 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.670594][ T7647] : renamed from vlan1 (while UP) [ 101.741923][ T7656] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 101.748505][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.756083][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 101.789402][ T7656] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 101.795972][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.803583][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 101.832811][ T7656] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 101.839473][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 101.847125][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 101.875692][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 101.877440][ T7657] vhci_hcd: connection closed [ 101.884725][ T7668] vhci_hcd: connection closed [ 101.884853][ T7673] vhci_hcd: connection closed [ 101.894650][ T5312] vhci_hcd: stop threads [ 101.903677][ T5312] vhci_hcd: release socket [ 101.908141][ T5312] vhci_hcd: disconnect device [ 101.920740][ T5312] vhci_hcd: stop threads [ 101.925121][ T5312] vhci_hcd: release socket [ 101.929642][ T5312] vhci_hcd: disconnect device [ 101.945282][ T7441] vhci_hcd: vhci_device speed not set [ 101.967286][ T5312] vhci_hcd: stop threads [ 101.971618][ T5312] vhci_hcd: release socket [ 101.976101][ T5312] vhci_hcd: disconnect device [ 102.018872][ T7691] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 102.048847][ T7691] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 102.139031][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 102.873807][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 102.880369][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.887926][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 102.912853][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 102.919406][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.926968][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 102.943195][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 102.949768][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.957521][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 102.964165][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 102.970810][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.978438][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 102.985580][ T7743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.994451][ T7743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.015003][ T7743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.027332][ T7761] veth4: left promiscuous mode [ 103.032282][ T7761] veth6: left promiscuous mode [ 103.037272][ T7761] veth8: left promiscuous mode [ 103.042782][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(18) [ 103.049408][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.057151][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 103.076303][ T7762] vhci_hcd: connection closed [ 103.076505][ T5312] vhci_hcd: stop threads [ 103.085577][ T5312] vhci_hcd: release socket [ 103.090011][ T5312] vhci_hcd: disconnect device [ 103.094781][ T7746] vhci_hcd: connection closed [ 103.094966][ T7744] vhci_hcd: connection closed [ 103.099905][ T7754] vhci_hcd: connection closed [ 103.105054][ T7750] vhci_hcd: connection closed [ 103.111416][ T5312] vhci_hcd: stop threads [ 103.120540][ T5312] vhci_hcd: release socket [ 103.125053][ T5312] vhci_hcd: disconnect device [ 103.130064][ T5312] vhci_hcd: stop threads [ 103.134396][ T5312] vhci_hcd: release socket [ 103.139015][ T5312] vhci_hcd: disconnect device [ 103.144408][ T5312] vhci_hcd: stop threads [ 103.148745][ T5312] vhci_hcd: release socket [ 103.153252][ T5312] vhci_hcd: disconnect device [ 103.158217][ T1041] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 103.165724][ T1041] usb 5-1: enqueue for inactive port 0 [ 103.171633][ T1041] usb 5-1: enqueue for inactive port 0 [ 103.177435][ T1041] usb 5-1: enqueue for inactive port 0 [ 103.183030][ T5312] vhci_hcd: stop threads [ 103.187287][ T5312] vhci_hcd: release socket [ 103.191768][ T5312] vhci_hcd: disconnect device [ 103.260077][ T1041] vhci_hcd: vhci_device speed not set [ 103.261239][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 103.307171][ T7780] xt_connbytes: Forcing CT accounting to be enabled [ 103.316543][ T7780] set match dimension is over the limit! [ 103.418311][ T7789] wg2: left promiscuous mode [ 103.422977][ T7789] wg2: left allmulticast mode [ 103.433681][ T7789] wg2: entered promiscuous mode [ 103.438774][ T7789] wg2: entered allmulticast mode [ 104.118851][ T7840] veth4: entered promiscuous mode [ 104.123935][ T7840] veth4: entered allmulticast mode [ 104.364377][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 104.633116][ T7903] $H: renamed from bond0 [ 104.650238][ T7903] $H: entered promiscuous mode [ 104.655351][ T7903] bond_slave_0: entered promiscuous mode [ 104.661209][ T7903] bond_slave_1: entered promiscuous mode [ 104.755003][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 104.775561][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 105.025085][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1516'. [ 105.301635][ T7984] bond_slave_1: mtu less than device minimum [ 105.479641][ T7993] bridge0: entered promiscuous mode [ 105.485215][ T7993] macsec1: entered promiscuous mode [ 105.491905][ T7993] bridge0: port 1(macsec1) entered blocking state [ 105.498526][ T7993] bridge0: port 1(macsec1) entered disabled state [ 105.505369][ T7993] macsec1: entered allmulticast mode [ 105.510747][ T7993] bridge0: entered allmulticast mode [ 105.516877][ T7993] macsec1: left allmulticast mode [ 105.522228][ T7993] bridge0: left allmulticast mode [ 105.528592][ T7993] bridge0: left promiscuous mode [ 106.091410][ T8001] netlink: 'syz.3.1541': attribute type 13 has an invalid length. [ 106.211135][ T1894] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.219670][ T1894] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.269269][ T5331] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.277708][ T5331] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.291819][ T29] kauditd_printk_skb: 1041 callbacks suppressed [ 106.291838][ T29] audit: type=1400 audit(1761208943.863:5053): avc: denied { map_create } for pid=8014 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.317353][ T29] audit: type=1400 audit(1761208943.863:5054): avc: denied { prog_load } for pid=8014 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.336499][ T29] audit: type=1400 audit(1761208943.863:5055): avc: denied { create } for pid=8014 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 106.356864][ T29] audit: type=1400 audit(1761208943.924:5056): avc: denied { prog_load } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.376053][ T29] audit: type=1400 audit(1761208943.924:5057): avc: denied { prog_load } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.395253][ T29] audit: type=1400 audit(1761208943.924:5058): avc: denied { open } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 106.414643][ T29] audit: type=1400 audit(1761208943.924:5059): avc: denied { map_create } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.433922][ T29] audit: type=1400 audit(1761208943.924:5060): avc: denied { prog_load } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.452988][ T29] audit: type=1400 audit(1761208943.934:5061): avc: denied { map_create } for pid=8017 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.473241][ T8019] Q6\bY4: entered promiscuous mode [ 106.479200][ T8019] Q6\bY4: entered allmulticast mode [ 106.484360][ T29] audit: type=1400 audit(1761208943.975:5062): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.508771][ T8019] tunl0: entered promiscuous mode [ 106.514573][ T8019] tunl0: entered allmulticast mode [ 106.528738][ T8019] gre0: entered promiscuous mode [ 106.533907][ T8019] gre0: entered allmulticast mode [ 106.557600][ T8019] gretap0: entered promiscuous mode [ 106.562949][ T8019] gretap0: entered allmulticast mode [ 106.570449][ T8019] erspan0: entered promiscuous mode [ 106.575718][ T8019] erspan0: entered allmulticast mode [ 106.582365][ T8019] ip_vti0: entered promiscuous mode [ 106.587599][ T8019] ip_vti0: entered allmulticast mode [ 106.596422][ T8019] ip6_vti0: entered promiscuous mode [ 106.601820][ T8019] ip6_vti0: entered allmulticast mode [ 106.612764][ T8019] ip6tnl0: entered promiscuous mode [ 106.618051][ T8019] ip6tnl0: entered allmulticast mode [ 106.624760][ T8019] ip6gre0: entered promiscuous mode [ 106.630068][ T8019] ip6gre0: entered allmulticast mode [ 106.637397][ T8019] syz_tun: entered promiscuous mode [ 106.643902][ T8019] ip6gretap0: entered promiscuous mode [ 106.649485][ T8019] ip6gretap0: entered allmulticast mode [ 106.656532][ T8019] vcan0: entered promiscuous mode [ 106.661698][ T8019] vcan0: entered allmulticast mode [ 106.668257][ T8019] bond0: entered promiscuous mode [ 106.673414][ T8019] bond_slave_0: entered promiscuous mode [ 106.679259][ T8019] bond_slave_1: entered promiscuous mode [ 106.685205][ T8019] dummy0: entered promiscuous mode [ 106.690463][ T8019] bond0: entered allmulticast mode [ 106.695634][ T8019] bond_slave_0: entered allmulticast mode [ 106.701418][ T8019] bond_slave_1: entered allmulticast mode [ 106.708014][ T8019] dummy0: entered allmulticast mode [ 106.715197][ T8019] team0: entered promiscuous mode [ 106.720368][ T8019] team_slave_0: entered promiscuous mode [ 106.726213][ T8019] team_slave_1: entered promiscuous mode [ 106.732082][ T8019] team0: entered allmulticast mode [ 106.737236][ T8019] team_slave_0: entered allmulticast mode [ 106.743021][ T8019] team_slave_1: entered allmulticast mode [ 106.751942][ T8019] nlmon0: entered promiscuous mode [ 106.757170][ T8019] nlmon0: entered allmulticast mode [ 106.763650][ T8019] caif0: entered promiscuous mode [ 106.768813][ T8019] caif0: entered allmulticast mode [ 106.773942][ T8019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.789499][ T5331] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.798096][ T5331] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.806872][ T8025] Q6\bY4: renamed from lo [ 106.814714][ T8030] bridge: RTM_NEWNEIGH with invalid ether address [ 106.822153][ T5331] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.830641][ T5331] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.909534][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 106.922546][ T8056] syzkaller0: entered promiscuous mode [ 106.928180][ T8056] syzkaller0: entered allmulticast mode [ 106.978911][ T8063] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 107.003214][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 107.016841][ T8063] bond1: (slave geneve2): making interface the new active one [ 107.024979][ T8063] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.034219][ T5331] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.051441][ T5331] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.076361][ T5331] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.085252][ T5331] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.969186][ T8116] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 108.010921][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.021331][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 108.041060][ T8116] bond0 (unregistering): Released all slaves [ 108.105166][ T8132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8132 comm=syz.1.1595 [ 109.097687][ T8180] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 109.214858][ T8190] netlink: 'syz.5.1619': attribute type 10 has an invalid length. [ 109.256602][ T8190] bond0: (slave dummy0): Releasing backup interface [ 109.273807][ T8194] netlink: 'syz.5.1619': attribute type 10 has an invalid length. [ 109.312312][ T8194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.432855][ T8207] wg2: entered promiscuous mode [ 109.437778][ T8207] wg2: entered allmulticast mode [ 109.595361][ T8217] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 109.791533][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 109.801034][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 110.074661][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 110.140198][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1641'. [ 110.217068][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 110.407576][ T8281] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1658'. [ 110.789146][ T8298] veth6: entered promiscuous mode [ 110.794312][ T8298] veth6: entered allmulticast mode [ 110.844557][ T8308] netlink: 'syz.4.1671': attribute type 13 has an invalid length. [ 110.914766][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.925509][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.982862][ T5331] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.991396][ T5331] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.021772][ T5331] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.030254][ T5331] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.067614][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 111.077912][ T8317] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1674'. [ 111.087744][ T5331] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.096378][ T5331] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.111876][ T5331] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.120452][ T5331] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.165535][ T8327] macsec0: entered promiscuous mode [ 111.221492][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 111.240539][ T29] kauditd_printk_skb: 847 callbacks suppressed [ 111.240558][ T29] audit: type=1400 audit(1761208948.873:5910): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.271696][ T29] audit: type=1400 audit(1761208948.873:5911): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.274205][ T8338] netlink: 'syz.5.1685': attribute type 12 has an invalid length. [ 111.296100][ T29] audit: type=1400 audit(1761208948.883:5912): avc: denied { map_create } for pid=8335 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.323142][ T29] audit: type=1400 audit(1761208948.883:5913): avc: denied { prog_load } for pid=8335 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.342396][ T29] audit: type=1400 audit(1761208948.883:5914): avc: denied { open } for pid=8335 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 111.361860][ T29] audit: type=1400 audit(1761208948.883:5915): avc: denied { kexec_image_load } for pid=8335 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 111.362002][ T29] audit: type=1400 audit(1761208948.883:5916): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.362033][ T29] audit: type=1400 audit(1761208948.883:5917): avc: denied { map_create } for pid=8337 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.383306][ T29] audit: type=1400 audit(1761208948.913:5918): avc: denied { prog_load } for pid=8337 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.383343][ T29] audit: type=1400 audit(1761208948.913:5919): avc: denied { prog_load } for pid=8337 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.292802][ T8433] netlink: 'syz.1.1726': attribute type 13 has an invalid length. [ 113.004537][ T8479] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 113.022060][ T8479] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 113.033761][ T8483] netlink: 'syz.3.1749': attribute type 4 has an invalid length. [ 113.043129][ T8483] netlink: 'syz.3.1749': attribute type 4 has an invalid length. [ 113.161565][ T8491] netlink: 'syz.3.1753': attribute type 12 has an invalid length. [ 113.209016][ T8496] pim6reg1: entered promiscuous mode [ 113.214351][ T8496] pim6reg1: entered allmulticast mode [ 113.295436][ T8498] serio: Serial port ptm0 [ 113.452611][ T5312] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.493867][ T8597] netlink: 'syz.3.1801': attribute type 4 has an invalid length. [ 114.508453][ T8597] netlink: 'syz.3.1801': attribute type 4 has an invalid length. [ 114.669674][ T8618] netlink: 'syz.5.1810': attribute type 10 has an invalid length. [ 114.677557][ T8618] __nla_validate_parse: 5 callbacks suppressed [ 114.677573][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1810'. [ 114.771294][ T8618] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 115.129490][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 115.485563][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 115.491591][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.734101][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1829'. [ 116.113852][ T8677] syzkaller0: entered promiscuous mode [ 116.119385][ T8677] syzkaller0: entered allmulticast mode [ 116.201285][ T29] kauditd_printk_skb: 1190 callbacks suppressed [ 116.201303][ T29] audit: type=1400 audit(1761208953.886:7110): avc: denied { map_create } for pid=8682 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.226983][ T29] audit: type=1400 audit(1761208953.896:7111): avc: denied { map_create } for pid=8682 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.254870][ T29] audit: type=1400 audit(1761208953.936:7112): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.279980][ T29] audit: type=1400 audit(1761208953.966:7113): avc: denied { prog_load } for pid=8682 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.316558][ T29] audit: type=1400 audit(1761208953.997:7114): avc: denied { mount } for pid=8685 comm="syz.2.1840" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 116.338911][ T29] audit: type=1400 audit(1761208953.997:7115): avc: denied { map_create } for pid=8685 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.358297][ T29] audit: type=1400 audit(1761208953.997:7116): avc: denied { prog_load } for pid=8685 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.377416][ T29] audit: type=1326 audit(1761208954.017:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd06efc9 code=0x7ffc0000 [ 116.400864][ T29] audit: type=1326 audit(1761208954.017:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7cd06efc9 code=0x7ffc0000 [ 116.424228][ T29] audit: type=1400 audit(1761208954.017:7119): avc: denied { create } for pid=8685 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 116.517639][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 116.700710][ T8704] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 116.820545][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 116.849220][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 117.011933][ T8733] $H: (slave bond_slave_0): Releasing backup interface [ 117.019657][ T8733] bond_slave_0: left promiscuous mode [ 117.025973][ T8733] $H: (slave bond_slave_1): Releasing backup interface [ 117.033671][ T8733] bond_slave_1: left promiscuous mode [ 117.039933][ T8733] team0: Port device team_slave_0 removed [ 117.046530][ T8733] team0: Port device team_slave_1 removed [ 117.052453][ T8733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.708452][ T8753] validate_nla: 1 callbacks suppressed [ 117.708465][ T8753] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 117.732617][ T8753] bond0: entered promiscuous mode [ 117.738222][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.770926][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.778536][ T8753] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 117.788672][ T8753] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 117.801079][ T8753] bond0: (slave gre1): making interface the new active one [ 117.808419][ T8753] gre1: entered promiscuous mode [ 117.815590][ T8753] bond0: (slave gre1): Enslaving as an active interface with an up link [ 118.275773][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 118.281842][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.151587][ T8826] netlink: 'syz.2.1898': attribute type 4 has an invalid length. [ 119.186776][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 119.201480][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 119.616346][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 119.832764][ T8857] netlink: 'syz.2.1912': attribute type 30 has an invalid length. [ 119.882441][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 119.885769][ T8863] : renamed from wg2 (while UP) [ 119.912437][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 120.500264][ T8890] $H: renamed from bond0 [ 120.507085][ T8890] $H: entered promiscuous mode [ 120.512174][ T8890] bond_slave_0: entered promiscuous mode [ 120.517990][ T8890] bond_slave_1: entered promiscuous mode [ 120.554094][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 120.950355][ T8910] netlink: 'syz.5.1933': attribute type 27 has an invalid length. [ 120.970112][ T8910] !60X: left allmulticast mode [ 120.977498][ T8910] veth0_vlan: left allmulticast mode [ 121.011255][ T8910] ip6gre1: left allmulticast mode [ 121.027889][ T8910] veth4: left promiscuous mode [ 121.032809][ T8910] veth4: left allmulticast mode [ 121.041205][ T8910] team0: left promiscuous mode [ 121.046020][ T8910] team0: left allmulticast mode [ 121.051424][ T8910] veth6: left promiscuous mode [ 121.056294][ T8910] veth6: left allmulticast mode [ 121.123184][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.133235][ T8912] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 121.165733][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 121.184739][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 121.184755][ T29] audit: type=1400 audit(1761208958.897:8109): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.231141][ T29] audit: type=1400 audit(1761208958.917:8110): avc: denied { map_create } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.250732][ T29] audit: type=1400 audit(1761208958.917:8111): avc: denied { open } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 121.270228][ T29] audit: type=1400 audit(1761208958.917:8112): avc: denied { create } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 121.289930][ T29] audit: type=1400 audit(1761208958.917:8113): avc: denied { map_create } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.309100][ T29] audit: type=1400 audit(1761208958.917:8114): avc: denied { prog_load } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.328436][ T29] audit: type=1400 audit(1761208958.917:8115): avc: denied { prog_load } for pid=8922 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.347545][ T29] audit: type=1400 audit(1761208958.927:8116): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.372207][ T29] audit: type=1400 audit(1761208958.927:8117): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.396767][ T29] audit: type=1400 audit(1761208958.937:8118): avc: denied { map_create } for pid=8924 comm="syz.5.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.522288][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1947'. [ 121.573981][ T8944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8944 comm=syz.2.1947 [ 121.726047][ T8961] xt_nat: multiple ranges no longer supported [ 122.423571][ T8977] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.611782][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 122.671275][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.747193][ T9000] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.747494][ T2970] IPVS: starting estimator thread 0... [ 122.842959][ T9005] IPVS: using max 1968 ests per chain, 98400 per kthread [ 122.867046][ T9010] syzkaller0: entered promiscuous mode [ 122.872659][ T9010] syzkaller0: entered allmulticast mode [ 123.025494][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1985'. [ 123.041582][ T9030] veth0_to_team: entered promiscuous mode [ 123.047834][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 123.907890][ T9069] hugetlbfs: syz.4.2000 (9069): Using mlock ulimits for SHM_HUGETLB is obsolete [ 123.972155][ T9071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.711882][ T3745] Bluetooth: hci0: command 0x1003 tx timeout [ 124.718017][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.297743][ T9109] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 125.329176][ T9109] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 125.399939][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2017'. [ 125.408987][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2017'. [ 125.831324][ T9140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2028'. [ 125.850681][ T9140] hsr_slave_0: left promiscuous mode [ 125.863216][ T9140] hsr_slave_1: left promiscuous mode [ 126.149728][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 126.168136][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 126.168150][ T29] audit: type=1400 audit(1761208963.900:8985): avc: denied { create } for pid=9152 comm="syz.4.2033" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 126.245465][ T29] audit: type=1400 audit(1761208963.970:8986): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.296702][ T29] audit: type=1400 audit(1761208964.010:8987): avc: denied { prog_load } for pid=9160 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.315842][ T29] audit: type=1400 audit(1761208964.010:8988): avc: denied { execmem } for pid=9160 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 126.376211][ T29] audit: type=1400 audit(1761208964.051:8989): avc: denied { prog_load } for pid=9160 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.395418][ T29] audit: type=1400 audit(1761208964.051:8990): avc: denied { prog_load } for pid=9160 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.414514][ T29] audit: type=1400 audit(1761208964.091:8991): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.438722][ T29] audit: type=1400 audit(1761208964.101:8992): avc: denied { create } for pid=9163 comm="syz.2.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 126.473050][ T29] audit: type=1326 audit(1761208964.151:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.2.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7cd06efc9 code=0x0 [ 126.496173][ T29] audit: type=1400 audit(1761208964.201:8994): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.583500][ T9174] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 126.596072][ T9174] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 126.668080][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2044'. [ 126.689329][ T9180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9180 comm=syz.3.2044 [ 126.913784][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 127.017541][ T9202] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 127.044204][ T9202] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 127.213777][ T9219] : renamed from vlan0 [ 127.260667][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 128.323704][ T9263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.337955][ T9266] netlink: 'syz.3.2080': attribute type 4 has an invalid length. [ 128.345906][ T9266] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2080'. [ 128.356393][ T9266] .`: renamed from bond0 [ 128.540150][ T9278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2084'. [ 128.792697][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 128.968007][ T9310] netlink: 'syz.4.2099': attribute type 4 has an invalid length. [ 130.625069][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.642538][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.662822][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.680034][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.996475][ T9392] __nla_validate_parse: 4 callbacks suppressed [ 130.996493][ T9392] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2131'. [ 131.031883][ T9392] hsr_slave_0: left promiscuous mode [ 131.041140][ T9392] hsr_slave_1: left promiscuous mode [ 131.067754][ T9397] netlink: 'syz.4.2133': attribute type 7 has an invalid length. [ 131.076061][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 131.140064][ T9402] veth0_to_team: entered promiscuous mode [ 131.145853][ T9402] veth0_to_team: entered allmulticast mode [ 131.203495][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 131.203510][ T29] audit: type=1400 audit(1761208968.957:9813): avc: denied { create } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 131.230458][ T29] audit: type=1400 audit(1761208968.957:9814): avc: denied { create } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 131.250962][ T29] audit: type=1400 audit(1761208968.957:9815): avc: denied { map_create } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.270152][ T29] audit: type=1400 audit(1761208968.957:9816): avc: denied { prog_load } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.289217][ T29] audit: type=1400 audit(1761208968.957:9817): avc: denied { open } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 131.357259][ T29] audit: type=1400 audit(1761208969.057:9818): avc: denied { prog_load } for pid=9399 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.376468][ T29] audit: type=1400 audit(1761208969.067:9819): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.400822][ T29] audit: type=1400 audit(1761208969.077:9820): avc: denied { create } for pid=9404 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 131.421435][ T29] audit: type=1400 audit(1761208969.087:9821): avc: denied { prog_load } for pid=9404 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.440620][ T29] audit: type=1400 audit(1761208969.097:9822): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.514786][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 132.904239][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 133.140901][ T9487] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 133.282134][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.326248][ T9492] : renamed from vlan1 [ 133.348577][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 133.880577][ T9516] netlink: 'syz.1.2179': attribute type 10 has an invalid length. [ 133.889100][ T9516] netlink: 'syz.1.2179': attribute type 10 has an invalid length. [ 133.899076][ T9516] dummy0: entered promiscuous mode [ 133.941351][ T9516] $H: (slave dummy0): Enslaving as an active interface with an up link [ 133.954348][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'. [ 134.005065][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2181'. [ 134.014372][ T5312] Bluetooth: hci1: Frame reassembly failed (-84) [ 134.026290][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 134.052295][ T9524] ip6gre2: entered promiscuous mode [ 134.057656][ T9524] ip6gre2: entered allmulticast mode [ 134.166737][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'. [ 134.211787][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 135.319264][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.325433][ T5530] Bluetooth: hci0: command 0x1003 tx timeout [ 135.784250][ T9580] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.968164][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 136.217339][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 136.223592][ T29] audit: type=1400 audit(1761208973.958:10754): avc: denied { prog_load } for pid=9609 comm="syz.5.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.512169][ T29] audit: type=1400 audit(1761208974.029:10755): avc: denied { prog_load } for pid=9607 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.531547][ T29] audit: type=1400 audit(1761208974.029:10756): avc: denied { execmem } for pid=9607 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 136.550955][ T29] audit: type=1400 audit(1761208974.029:10757): avc: denied { allowed } for pid=9607 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 136.690499][ T9620] netlink: '+}[@': attribute type 10 has an invalid length. [ 136.726217][ T9620] netlink: '+}[@': attribute type 13 has an invalid length. [ 136.734041][ T29] audit: type=1400 audit(1761208974.429:10758): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.758482][ T29] audit: type=1400 audit(1761208974.449:10759): avc: denied { prog_load } for pid=9619 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.777729][ T29] audit: type=1400 audit(1761208974.449:10760): avc: denied { read } for pid=9619 comm="syz.2.2220" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 136.800724][ T29] audit: type=1400 audit(1761208974.449:10761): avc: denied { map_create } for pid=9619 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.820094][ T29] audit: type=1400 audit(1761208974.449:10762): avc: denied { prog_load } for pid=9619 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.839449][ T29] audit: type=1400 audit(1761208974.449:10763): avc: denied { prog_load } for pid=9619 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.056049][ T5312] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.064537][ T5312] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.073016][ T5312] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 137.113917][ T9641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2228'. [ 137.139492][ T5312] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.147960][ T5312] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.156378][ T5312] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 137.166591][ T9641] $H (unregistering): (slave dummy0): Releasing backup interface [ 137.175299][ T9641] dummy0: left promiscuous mode [ 137.181967][ T9641] $H (unregistering): Released all slaves [ 137.192498][ T5312] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.200997][ T5312] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.209420][ T5312] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 137.225597][ T5312] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.234150][ T5312] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.242622][ T5312] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 137.357348][ T9661] 0: reclassify loop, rule prio 0, protocol 800 [ 137.477516][ T9667] lo: entered allmulticast mode [ 137.489549][ T9667] tunl0: entered allmulticast mode [ 137.495933][ T9667] gre0: entered allmulticast mode [ 137.502602][ T9667] gretap0: entered allmulticast mode [ 137.510462][ T9667] erspan0: entered allmulticast mode [ 137.516663][ T9667] ip_vti0: entered allmulticast mode [ 137.523247][ T9667] ip6_vti0: entered allmulticast mode [ 137.529781][ T9667] sit0: entered allmulticast mode [ 137.536322][ T9674] netlink: 'syz.5.2242': attribute type 39 has an invalid length. [ 137.537737][ T9667] ip6tnl0: entered allmulticast mode [ 137.550722][ T9667] ip6gre0: entered allmulticast mode [ 137.557066][ T9667] bridge0: entered allmulticast mode [ 137.562958][ T9667] vcan0: entered allmulticast mode [ 137.569240][ T9667] .`: entered allmulticast mode [ 137.574599][ T9667] 8021q: adding VLAN 0 to HW filter on device .` [ 137.582117][ T9667] team0: entered allmulticast mode [ 137.587916][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.595597][ T9667] dummy0: entered allmulticast mode [ 137.601653][ T9667] nlmon0: entered allmulticast mode [ 137.608019][ T9667] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 138.285160][ T9704] 0: reclassify loop, rule prio 0, protocol 800 [ 138.988785][ T9729] wg2: entered promiscuous mode [ 138.993781][ T9729] wg2: entered allmulticast mode [ 139.177147][ T9732] bond0: (slave dummy0): Releasing backup interface [ 139.184382][ T9732] dummy0: left promiscuous mode [ 139.189448][ T9732] dummy0: left allmulticast mode [ 139.202142][ T9732] bond0: (slave bond_slave_0): Releasing backup interface [ 139.210126][ T9732] bond_slave_0: left promiscuous mode [ 139.215725][ T9732] bond_slave_0: left allmulticast mode [ 139.222398][ T9732] bond0: (slave bond_slave_1): Releasing backup interface [ 139.230422][ T9732] bond_slave_1: left promiscuous mode [ 139.236042][ T9732] bond_slave_1: left allmulticast mode [ 139.242506][ T9732] team_slave_0: left promiscuous mode [ 139.248031][ T9732] team_slave_0: left allmulticast mode [ 139.254539][ T9732] team0: Port device team_slave_0 removed [ 139.260563][ T9732] team_slave_1: left promiscuous mode [ 139.266182][ T9732] team_slave_1: left allmulticast mode [ 139.272647][ T9732] team0: Port device team_slave_1 removed [ 139.279107][ T9732] bond1: (slave geneve2): Releasing active interface [ 139.403881][ T9740] netlink: 'syz.2.2265': attribute type 4 has an invalid length. [ 139.430364][ T9744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9744 comm=syz.2.2267 [ 139.736510][ T9763] xt_hashlimit: max too large, truncated to 1048576 [ 139.875422][ T9774] veth0_to_team: left promiscuous mode [ 139.913317][ T9777] Q6\bY4: entered allmulticast mode [ 139.920186][ T9777] tunl0: entered allmulticast mode [ 139.926530][ T9777] gre0: entered allmulticast mode [ 139.933055][ T9777] gretap0: entered allmulticast mode [ 139.939436][ T9777] erspan0: entered allmulticast mode [ 139.946450][ T9777] ip_vti0: entered allmulticast mode [ 139.952688][ T9777] ip6_vti0: entered allmulticast mode [ 139.959054][ T9777] sit0: entered allmulticast mode [ 139.967726][ T9777] ip6tnl0: entered allmulticast mode [ 139.981961][ T9777] ip6gre0: entered allmulticast mode [ 139.994469][ T9777] ip6gretap0: entered allmulticast mode [ 140.002132][ T9777] vcan0: entered allmulticast mode [ 140.012421][ T9777] dummy0: entered allmulticast mode [ 140.018814][ T9777] nlmon0: entered allmulticast mode [ 140.025518][ T9777] caif0: entered allmulticast mode [ 140.030832][ T9777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.047010][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2282'. [ 141.218972][ T29] kauditd_printk_skb: 923 callbacks suppressed [ 141.218986][ T29] audit: type=1400 audit(1761208978.997:11687): avc: denied { prog_load } for pid=9810 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.264660][ T29] audit: type=1400 audit(1761208979.017:11688): avc: denied { bpf } for pid=9810 comm="syz.5.2303" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 141.285441][ T29] audit: type=1400 audit(1761208979.017:11689): avc: denied { map_create } for pid=9810 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.363403][ T9815] netlink: 'syz.5.2293': attribute type 4 has an invalid length. [ 141.367529][ T29] audit: type=1400 audit(1761208979.097:11690): avc: denied { map_create } for pid=9810 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.382842][ T9816] netlink: 'syz.1.2292': attribute type 27 has an invalid length. [ 141.390563][ T29] audit: type=1400 audit(1761208979.097:11691): avc: denied { prog_load } for pid=9810 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.390594][ T29] audit: type=1400 audit(1761208979.097:11692): avc: denied { prog_load } for pid=9810 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.436913][ T29] audit: type=1400 audit(1761208979.097:11693): avc: denied { execute } for pid=9810 comm="syz.5.2303" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 141.463292][ T29] audit: type=1400 audit(1761208979.107:11694): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.487832][ T29] audit: type=1400 audit(1761208979.127:11695): avc: denied { read write } for pid=9812 comm="syz.1.2292" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.511989][ T29] audit: type=1400 audit(1761208979.127:11696): avc: denied { prog_load } for pid=9814 comm="syz.5.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.531281][ T9816] Q6\bY4: left allmulticast mode [ 141.547966][ T9816] tunl0: left allmulticast mode [ 141.557887][ T9816] gre0: left allmulticast mode [ 141.583470][ T9816] gretap0: left allmulticast mode [ 141.604214][ T9816] erspan0: left allmulticast mode [ 141.613841][ T9820] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.614153][ T3404] IPVS: starting estimator thread 0... [ 141.657370][ T9816] ip_vti0: left allmulticast mode [ 141.683139][ T9816] ip6_vti0: left allmulticast mode [ 141.708122][ T9823] IPVS: using max 1968 ests per chain, 98400 per kthread [ 141.729241][ T9816] sit0: left allmulticast mode [ 141.748862][ T9816] ip6tnl0: left allmulticast mode [ 141.768576][ T9816] ip6gre0: left allmulticast mode [ 141.788407][ T9816] ip6gretap0: left allmulticast mode [ 141.808512][ T9816] vcan0: left allmulticast mode [ 141.826810][ T9816] dummy0: left allmulticast mode [ 141.847526][ T9816] nlmon0: left allmulticast mode [ 141.858391][ T9816] caif0: left allmulticast mode [ 141.874175][ T9816] wg2: left promiscuous mode [ 141.878936][ T9816] wg2: left allmulticast mode [ 141.890802][ T9816] veth4: left allmulticast mode [ 141.896044][ T9816] veth6: left allmulticast mode [ 141.901336][ T9816] veth8: left allmulticast mode [ 141.918103][ T9816] bond0: left promiscuous mode [ 141.923011][ T9816] gre1: left promiscuous mode [ 143.081960][ T9869] netlink: 'syz.4.2311': attribute type 27 has an invalid length. [ 143.193442][ T9871] $H: left promiscuous mode [ 143.198310][ T9871] bond_slave_0: left promiscuous mode [ 143.203909][ T9871] bond_slave_1: left promiscuous mode [ 143.236892][ T9871] 8021q: adding VLAN 0 to HW filter on device $H [ 143.333914][ T9871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.360143][ T9869] wg2: left promiscuous mode [ 143.364792][ T9869] wg2: left allmulticast mode [ 143.370321][ T9869] veth0_to_team: left promiscuous mode [ 143.375881][ T9869] veth0_to_team: left allmulticast mode [ 143.383606][ T9869] veth2: left promiscuous mode [ 143.388485][ T9869] veth2: left allmulticast mode [ 143.393688][ T9869] veth4: left promiscuous mode [ 143.398740][ T9869] veth4: left allmulticast mode [ 143.404325][ T9869] veth6: left promiscuous mode [ 143.409162][ T9869] veth6: left allmulticast mode [ 143.630942][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2317'. [ 143.655518][ T1894] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.670313][ T1894] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.701191][ T1894] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.738321][ T1894] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.748556][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 143.817219][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2319'. [ 143.826391][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 144.318964][ T9918] netlink: 'syz.2.2327': attribute type 27 has an invalid length. [ 144.326981][ T9918] Q6\bY4: left promiscuous mode [ 144.332647][ T9918] Q6\bY4: left allmulticast mode [ 144.338595][ T9918] tunl0: left promiscuous mode [ 144.343382][ T9918] tunl0: left allmulticast mode [ 144.348413][ T9918] gre0: left promiscuous mode [ 144.353129][ T9918] gre0: left allmulticast mode [ 144.358214][ T9918] gretap0: left promiscuous mode [ 144.363182][ T9918] gretap0: left allmulticast mode [ 144.368352][ T9918] erspan0: left promiscuous mode [ 144.373342][ T9918] erspan0: left allmulticast mode [ 144.378460][ T9918] ip_vti0: left promiscuous mode [ 144.383437][ T9918] ip_vti0: left allmulticast mode [ 144.388752][ T9918] ip6_vti0: left promiscuous mode [ 144.393850][ T9918] ip6_vti0: left allmulticast mode [ 144.399068][ T9918] sit0: left promiscuous mode [ 144.403757][ T9918] sit0: left allmulticast mode [ 144.408616][ T9918] ip6tnl0: left promiscuous mode [ 144.413673][ T9918] ip6tnl0: left allmulticast mode [ 144.418910][ T9918] ip6gre0: left promiscuous mode [ 144.423871][ T9918] ip6gre0: left allmulticast mode [ 144.429272][ T9918] syz_tun: left promiscuous mode [ 144.434338][ T9918] vcan0: left promiscuous mode [ 144.439169][ T9918] vcan0: left allmulticast mode [ 144.444137][ T9918] bond0: left promiscuous mode [ 144.449030][ T9918] bond0: left allmulticast mode [ 144.454022][ T9918] team0: left promiscuous mode [ 144.458862][ T9918] team0: left allmulticast mode [ 144.481255][ T9918] nlmon0: left promiscuous mode [ 144.486171][ T9918] nlmon0: left allmulticast mode [ 144.491368][ T9918] caif0: left promiscuous mode [ 144.496170][ T9918] caif0: left allmulticast mode [ 144.501438][ T9918] wg2: left promiscuous mode [ 144.506115][ T9918] wg2: left allmulticast mode [ 144.526615][ T9918] ip6gre1: left allmulticast mode [ 144.532070][ T9918] veth4: left promiscuous mode [ 144.537118][ T9918] veth4: left allmulticast mode [ 144.657412][ T5312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.666132][ T5312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.674837][ T5312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.683359][ T5312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.485748][ T9966] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2347'. [ 145.709604][ T9979] $H: renamed from bond0 [ 145.716702][ T9979] $H: entered promiscuous mode [ 145.809296][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2352'. [ 145.828076][ T9982] syz_tun (unregistering): left allmulticast mode [ 146.225287][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 146.225304][ T29] audit: type=1400 audit(1761208984.003:12465): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.272725][ T29] audit: type=1400 audit(1761208984.033:12466): avc: denied { map_create } for pid=10001 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.292124][ T29] audit: type=1400 audit(1761208984.033:12467): avc: denied { prog_load } for pid=10001 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.302511][T10016] tc_dump_action: action bad kind [ 146.311494][ T29] audit: type=1400 audit(1761208984.043:12468): avc: denied { prog_load } for pid=10008 comm="syz.3.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.335801][ T29] audit: type=1400 audit(1761208984.043:12469): avc: denied { prog_load } for pid=10008 comm="syz.3.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.355131][ T29] audit: type=1400 audit(1761208984.043:12470): avc: denied { read } for pid=10008 comm="syz.3.2367" dev="nsfs" ino=4026532558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 146.376581][ T29] audit: type=1400 audit(1761208984.043:12471): avc: denied { create } for pid=10008 comm="syz.3.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 146.399827][ T29] audit: type=1400 audit(1761208984.053:12472): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.409194][T10021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.424386][ T29] audit: type=1400 audit(1761208984.073:12473): avc: denied { map_create } for pid=10015 comm="syz.4.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.453360][ T29] audit: type=1400 audit(1761208984.073:12474): avc: denied { prog_load } for pid=10015 comm="syz.4.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.889451][T10028] xt_nat: multiple ranges no longer supported [ 146.938945][T10033] sch_fq: defrate 4294967295 ignored. [ 146.987352][T10040] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2386'. [ 147.027718][T10040] netlink: 'syz.2.2386': attribute type 4 has an invalid length. [ 147.135392][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 147.450878][T10064] netlink: '+}[@': attribute type 10 has an invalid length. [ 147.468764][T10064] team0 (unregistering): Port device bridge1 removed [ 147.553972][T10068] xt_nat: multiple ranges no longer supported [ 147.633242][T10074] netlink: 'syz.1.2398': attribute type 8 has an invalid length. [ 147.759670][T10086] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 147.822867][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 147.900800][T10095] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 148.110787][T10102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.262501][T10108] netlink: 'syz.1.2401': attribute type 4 has an invalid length. [ 148.311299][T10108] netlink: 'syz.1.2401': attribute type 4 has an invalid length. [ 148.611506][T10115] bond0: option lp_interval: invalid value (0) [ 148.617811][T10115] bond0: option lp_interval: allowed values 1 - 2147483647 [ 148.643880][T10115] bond0 (unregistering): Released all slaves [ 149.022685][T10142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10142 comm=syz.5.2416 [ 149.036265][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2416'. [ 149.436904][T10160] netlink: 'syz.1.2421': attribute type 13 has an invalid length. [ 149.596974][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2434'. [ 149.605989][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2434'. [ 149.624829][T10165] wireguard0: entered promiscuous mode [ 149.630548][T10165] wireguard0: entered allmulticast mode [ 149.662515][T10172] netlink: 'syz.5.2426': attribute type 29 has an invalid length. [ 149.673588][T10172] netlink: 'syz.5.2426': attribute type 29 has an invalid length. [ 149.707265][T10178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.716248][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2427'. [ 149.908602][T10193] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 149.961364][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2438'. [ 150.220492][T10214] veth0_vlan: left promiscuous mode [ 150.225843][T10214] veth0_vlan: entered allmulticast mode [ 150.232204][T10214] veth0_vlan: entered promiscuous mode [ 151.035301][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 151.165587][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 151.232836][ T29] kauditd_printk_skb: 1369 callbacks suppressed [ 151.232851][ T29] audit: type=1400 audit(1761208989.008:13844): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.269494][ T29] audit: type=1400 audit(1761208989.048:13845): avc: denied { map_create } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.294227][ T29] audit: type=1400 audit(1761208989.078:13846): avc: denied { prog_load } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.314581][ T29] audit: type=1400 audit(1761208989.098:13847): avc: denied { map_create } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.334019][ T29] audit: type=1400 audit(1761208989.098:13848): avc: denied { prog_load } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.353293][ T29] audit: type=1400 audit(1761208989.098:13849): avc: denied { prog_load } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.372647][ T29] audit: type=1400 audit(1761208989.098:13850): avc: denied { map_create } for pid=10267 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.392614][ T29] audit: type=1326 audit(1761208989.118:13851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.3.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 151.416919][ T29] audit: type=1326 audit(1761208989.118:13852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.3.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 151.440636][ T29] audit: type=1400 audit(1761208989.118:13853): avc: denied { prog_load } for pid=10261 comm="syz.3.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.817657][T10286] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 151.895800][T10286] bond0: entered promiscuous mode [ 151.919143][T10286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.039803][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.052414][T10290] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 152.062554][T10290] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 152.094215][T10290] bond0: (slave gre1): making interface the new active one [ 152.101594][T10290] gre1: entered promiscuous mode [ 152.109180][T10290] bond0: (slave gre1): Enslaving as an active interface with an up link [ 152.118431][T10293] bond0: (slave dummy0): Releasing backup interface [ 152.126255][T10293] bond0: (slave bond_slave_0): Releasing backup interface [ 152.217620][T10293] bond0: (slave bond_slave_1): Releasing backup interface [ 152.225552][T10293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.234644][T10293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.246286][T10293] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.626558][T10320] sch_fq: defrate 4294967295 ignored. [ 153.193697][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 153.202780][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 153.214457][T10342] wireguard0: entered promiscuous mode [ 153.220026][T10342] wireguard0: entered allmulticast mode [ 153.682763][T10370] wireguard0: entered promiscuous mode [ 153.688464][T10370] wireguard0: entered allmulticast mode [ 154.492559][T10407] sch_fq: defrate 4294967295 ignored. [ 154.522084][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 154.629916][T10420] wireguard0: entered promiscuous mode [ 154.635433][T10420] wireguard0: entered allmulticast mode [ 154.651179][T10422] macvtap0: refused to change device tx_queue_len [ 154.675193][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 155.291266][T10453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10453 comm=syz.1.2545 [ 155.303952][T10452] wireguard0: entered promiscuous mode [ 155.309561][T10452] wireguard0: entered allmulticast mode [ 156.254117][ T29] kauditd_printk_skb: 1560 callbacks suppressed [ 156.254213][ T29] audit: type=1400 audit(1761208994.031:15414): avc: denied { map_create } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.311184][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2546'. [ 156.333347][ T29] audit: type=1400 audit(1761208994.071:15415): avc: denied { prog_load } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.352854][ T29] audit: type=1400 audit(1761208994.071:15416): avc: denied { prog_load } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.372286][ T29] audit: type=1400 audit(1761208994.071:15417): avc: denied { prog_load } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.391659][ T29] audit: type=1400 audit(1761208994.071:15418): avc: denied { prog_load } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.410933][ T29] audit: type=1400 audit(1761208994.071:15419): avc: denied { create } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 156.430545][ T29] audit: type=1400 audit(1761208994.071:15420): avc: denied { create } for pid=10477 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 156.451516][ T29] audit: type=1400 audit(1761208994.091:15421): avc: denied { prog_load } for pid=10487 comm="syz.5.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.470844][ T29] audit: type=1400 audit(1761208994.091:15422): avc: denied { prog_load } for pid=10487 comm="syz.5.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.490088][ T29] audit: type=1400 audit(1761208994.091:15423): avc: denied { create } for pid=10487 comm="syz.5.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 156.593865][T10496] netlink: 'syz.3.2549': attribute type 4 has an invalid length. [ 156.611346][T10494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.069413][T10512] bond2: (slave erspan0): Device is not bonding slave [ 157.076315][T10512] bond2: option active_slave: invalid value (erspan0) [ 157.104025][T10512] bond2 (unregistering): Released all slaves [ 157.111606][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'. [ 157.242201][T10524] netlink: 'syz.4.2563': attribute type 39 has an invalid length. [ 157.291280][T10527] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.425461][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 157.584968][T10539] sch_fq: defrate 4294967295 ignored. [ 157.938290][T10547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.947990][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 158.352159][T10571] bond1: (slave erspan0): Device is not bonding slave [ 158.359140][T10571] bond1: option active_slave: invalid value (erspan0) [ 158.368549][T10571] bond1 (unregistering): Released all slaves [ 158.378320][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 158.388256][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 158.397705][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 158.399812][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 159.018861][T10599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.146472][T10621] sch_fq: defrate 4294967295 ignored. [ 159.871158][T10646] __nla_validate_parse: 4 callbacks suppressed [ 159.871173][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 159.887535][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 159.897298][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 159.907035][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 159.916275][T10650] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 160.822352][T10692] netlink: 'syz.5.2625': attribute type 10 has an invalid length. [ 161.038185][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2635'. [ 161.094938][T10706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10706 comm=syz.3.2635 [ 161.252397][ T29] kauditd_printk_skb: 1363 callbacks suppressed [ 161.252416][ T29] audit: type=1400 audit(1761208998.963:16787): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.311037][ T29] audit: type=1400 audit(1761208999.074:16788): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.374436][ T29] audit: type=1326 audit(1761208999.144:16789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.398291][ T29] audit: type=1326 audit(1761208999.144:16790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.422037][ T29] audit: type=1326 audit(1761208999.144:16791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.445721][ T29] audit: type=1326 audit(1761208999.144:16792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.469390][ T29] audit: type=1326 audit(1761208999.144:16793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.493047][ T29] audit: type=1326 audit(1761208999.144:16794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.516687][ T29] audit: type=1326 audit(1761208999.144:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.540508][ T29] audit: type=1326 audit(1761208999.144:16796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986df0efc9 code=0x7ffc0000 [ 161.802002][T10731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.812776][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 161.836066][T10733] sch_fq: defrate 4294967295 ignored. [ 162.179658][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 162.188688][T10751] netlink: 'syz.2.2650': attribute type 22 has an invalid length. [ 162.196614][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 162.225733][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 162.232149][ T1894] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.234812][T10751] netlink: 'syz.2.2650': attribute type 22 has an invalid length. [ 162.250663][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 162.252032][ T1894] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.273232][ T1894] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.287005][ T1894] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.299794][T10757] netlink: 'syz.2.2652': attribute type 10 has an invalid length. [ 162.781233][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.893092][T10788] bridge1: entered promiscuous mode [ 162.898504][T10788] bridge1: entered allmulticast mode [ 162.906590][T10788] team0: Port device bridge1 added [ 162.936732][T10792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23977 sclass=netlink_route_socket pid=10792 comm=syz.2.2666 [ 162.987799][T10794] netlink: 'syz.2.2668': attribute type 10 has an invalid length. [ 163.206400][T10800] bond0 (unregistering): Released all slaves [ 163.294255][T10813] ip6gre1: entered promiscuous mode [ 163.299507][T10813] ip6gre1: entered allmulticast mode [ 163.305618][ T1894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.306668][T10813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.313501][ T1894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.331760][ T7440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.451654][ T7440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.571785][ T7440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.813564][T10837] netlink: 'syz.3.2680': attribute type 16 has an invalid length. [ 163.901482][T10837] lo: left allmulticast mode [ 163.911828][T10837] tunl0: left allmulticast mode [ 163.927493][T10837] gre0: left allmulticast mode [ 163.943326][T10837] gretap0: left allmulticast mode [ 163.955465][T10837] erspan0: left allmulticast mode [ 163.968922][T10837] ip_vti0: left allmulticast mode [ 163.981130][T10837] ip6_vti0: left allmulticast mode [ 163.998682][T10837] sit0: left allmulticast mode [ 164.027246][T10837] ip6tnl0: left allmulticast mode [ 164.054237][T10837] ip6gre0: left allmulticast mode [ 164.082078][T10837] bridge0: left allmulticast mode [ 164.134253][T10837] vcan0: left allmulticast mode [ 164.139692][T10837] .`: left allmulticast mode [ 164.145884][T10837] dummy0: left allmulticast mode [ 164.154900][T10837] nlmon0: left allmulticast mode [ 164.332685][T10837] 0X: left allmulticast mode [ 164.337712][T10837] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 164.356425][T10840] erspan0: entered promiscuous mode [ 164.362997][T10840] gretap0: entered promiscuous mode [ 164.368799][T10840] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 164.378862][T10840] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 164.390004][T10843] hsr_slave_0: left promiscuous mode [ 164.395872][T10843] hsr_slave_1: left promiscuous mode [ 164.492617][T10847] netlink: 'syz.1.2686': attribute type 4 has an invalid length. [ 164.811313][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 164.817401][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.236805][T10880] __nla_validate_parse: 7 callbacks suppressed [ 165.236863][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 165.352353][T10885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23977 sclass=netlink_route_socket pid=10885 comm=syz.4.2698 [ 165.497488][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2702'. [ 165.565582][T10896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10896 comm=syz.4.2702 [ 165.692895][T10904] : renamed from vlan1 [ 165.831561][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 165.911465][T10917] bond2 (unregistering): Released all slaves [ 165.961416][T10922] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2712'. [ 166.046242][T10922] $H (unregistering): Released all slaves [ 166.163351][T10934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.309836][ T29] kauditd_printk_skb: 2810 callbacks suppressed [ 166.309853][ T29] audit: type=1326 audit(1761209004.095:19607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aaa4efc9 code=0x7ffc0000 [ 166.339997][ T29] audit: type=1326 audit(1761209004.115:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.363694][ T29] audit: type=1326 audit(1761209004.115:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.387357][ T29] audit: type=1326 audit(1761209004.115:19610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.411171][ T29] audit: type=1326 audit(1761209004.115:19611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.434905][ T29] audit: type=1326 audit(1761209004.115:19612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.458490][ T29] audit: type=1326 audit(1761209004.115:19613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.482073][ T29] audit: type=1400 audit(1761209004.115:19614): avc: denied { map_create } for pid=10933 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.501462][ T29] audit: type=1326 audit(1761209004.115:19615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.525075][ T29] audit: type=1326 audit(1761209004.115:19616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4a1efc9 code=0x7ffc0000 [ 166.943675][ T7440] IPVS: starting estimator thread 0... [ 166.976925][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2729'. [ 167.030556][T10959] IPVS: using max 2400 ests per chain, 120000 per kthread [ 167.610385][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.813222][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2736'. [ 167.851220][T10984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10984 comm=syz.1.2736 [ 167.990660][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 168.250194][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 168.250691][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.887520][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2749'. [ 168.896657][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2749'. [ 169.107092][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2752'. [ 169.145552][T11026] erspan0: entered promiscuous mode [ 169.160590][T11026] gretap0: entered promiscuous mode [ 169.176403][T11026] debugfs: 'hsr0' already exists in 'hsr' [ 169.182236][T11026] Cannot create hsr debugfs directory [ 169.208030][T11026] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 169.218246][T11026] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 169.738889][T11048] netlink: 'syz.4.2758': attribute type 16 has an invalid length. [ 169.805524][T11048] 8021q: adding VLAN 0 to HW filter on device $H [ 170.002430][T11048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.350541][T11075] __nla_validate_parse: 1 callbacks suppressed [ 170.350561][T11075] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2770'. [ 170.566065][T11075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11075 comm=syz.5.2770 [ 170.844835][T11089] netlink: 'syz.3.2775': attribute type 5 has an invalid length. [ 170.904838][T11091] netlink: 'syz.3.2775': attribute type 13 has an invalid length. [ 170.912783][T11091] netlink: 'syz.3.2775': attribute type 17 has an invalid length. [ 170.929648][T11091] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 171.637161][ T29] kauditd_printk_skb: 1257 callbacks suppressed [ 171.637192][ T29] audit: type=1400 audit(1761209009.427:20874): avc: denied { mount } for pid=11103 comm="syz.2.2781" name="/" dev="ramfs" ino=29669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 171.698004][ T29] audit: type=1400 audit(1761209009.427:20875): avc: denied { read write } for pid=4764 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.722367][ T29] audit: type=1400 audit(1761209009.477:20876): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.746717][ T29] audit: type=1400 audit(1761209009.477:20877): avc: denied { create } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 171.766403][ T29] audit: type=1400 audit(1761209009.487:20878): avc: denied { prog_load } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.791571][ T29] audit: type=1400 audit(1761209009.487:20879): avc: denied { map_create } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.811039][ T29] audit: type=1400 audit(1761209009.487:20880): avc: denied { prog_load } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.830392][ T29] audit: type=1400 audit(1761209009.487:20881): avc: denied { prog_load } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.849685][ T29] audit: type=1400 audit(1761209009.487:20882): avc: denied { allowed } for pid=11105 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 171.869436][ T29] audit: type=1400 audit(1761209009.517:20883): avc: denied { name_bind } for pid=11103 comm="syz.2.2781" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 172.530885][T11122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.692478][T11130] bond0: invalid ARP target 0.0.0.0 specified for addition [ 172.699794][T11130] bond0: option arp_ip_target: invalid value (0) [ 172.729918][T11130] bond0 (unregistering): Released all slaves [ 173.059731][T11142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11142 comm=syz.1.2793 [ 173.319529][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2796'. [ 173.328755][T11150] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2796'. [ 173.660186][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'. [ 173.669299][T11164] netlink: 'syz.2.2801': attribute type 14 has an invalid length. [ 173.834340][T11178] bridge0: port 1(ipvlan0) entered blocking state [ 173.840906][T11178] bridge0: port 1(ipvlan0) entered disabled state [ 173.847721][T11178] ipvlan0: entered allmulticast mode [ 173.853103][T11178] bridge0: entered allmulticast mode [ 173.859597][T11178] ipvlan0: left allmulticast mode [ 173.864679][T11178] bridge0: left allmulticast mode [ 174.048442][T11181] ================================================================== [ 174.056603][T11181] BUG: KCSAN: data-race in hrtimer_reprogram / print_cpu [ 174.063778][T11181] [ 174.066126][T11181] write to 0xffff888237d1b2a0 of 8 bytes by task 11177 on cpu 1: [ 174.073953][T11181] hrtimer_reprogram+0x1a5/0x220 [ 174.078930][T11181] hrtimer_start_range_ns+0x6b1/0x740 [ 174.084340][T11181] common_hrtimer_rearm+0x85/0x90 [ 174.089400][T11181] posixtimer_deliver_signal+0x120/0x320 [ 174.095087][T11181] dequeue_signal+0x2cf/0x3b0 [ 174.099826][T11181] get_signal+0x376/0xf70 [ 174.104179][T11181] arch_do_signal_or_restart+0x96/0x440 [ 174.109781][T11181] exit_to_user_mode_loop+0x77/0x110 [ 174.115120][T11181] do_syscall_64+0x1d6/0x200 [ 174.119756][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.125681][T11181] [ 174.128026][T11181] read to 0xffff888237d1b2a0 of 8 bytes by task 11181 on cpu 0: [ 174.135680][T11181] print_cpu+0x2ea/0x660 [ 174.139984][T11181] timer_list_show+0x107/0x170 [ 174.144794][T11181] seq_read_iter+0x636/0x950 [ 174.149410][T11181] proc_reg_read_iter+0x110/0x180 [ 174.154465][T11181] copy_splice_read+0x442/0x660 [ 174.159353][T11181] splice_direct_to_actor+0x26f/0x680 [ 174.164761][T11181] do_splice_direct+0xda/0x150 [ 174.169564][T11181] do_sendfile+0x380/0x650 [ 174.174032][T11181] __x64_sys_sendfile64+0x105/0x150 [ 174.179272][T11181] x64_sys_call+0x2bb4/0x3000 [ 174.183988][T11181] do_syscall_64+0xd2/0x200 [ 174.188516][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.194441][T11181] [ 174.196782][T11181] value changed: 0x00000028a22f6a18 -> 0x00000028a22cb36d [ 174.203906][T11181] [ 174.206235][T11181] Reported by Kernel Concurrency Sanitizer on: [ 174.212399][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.222216][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.232305][T11181] ================================================================== [ 176.568634][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!