last executing test programs: 9m36.74828323s ago: executing program 32 (id=336): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x15, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00A\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRES32], 0x48) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 9m33.220233773s ago: executing program 33 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x488, 0x30, 0xffff, 0x4, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd6, 0x766}, 0xfeea, 0x4, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 9m17.22023942s ago: executing program 34 (id=827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) 8m52.839030563s ago: executing program 35 (id=1609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 8m44.96206863s ago: executing program 36 (id=1837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='io_uring_defer\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1e3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 8m40.077570963s ago: executing program 37 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setresgid(0x0, 0x0, 0x0) 8m34.072965302s ago: executing program 38 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 7m20.616675225s ago: executing program 39 (id=4262): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, 0x0, 0xfef0, 0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5c2) 7m9.912216715s ago: executing program 40 (id=4565): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x2229b085}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x40040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m51.680474947s ago: executing program 41 (id=5109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 5m16.551196144s ago: executing program 42 (id=8227): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x7}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @mcast1}, 0x1c) 5m10.813857819s ago: executing program 43 (id=8384): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200017, {{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r3, 0x4}}]}, 0x144}}, 0x0) 5m3.815627834s ago: executing program 44 (id=8578): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x0, 0x989680}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 4m50.024300089s ago: executing program 7 (id=8886): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4m49.95265571s ago: executing program 7 (id=8890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 4m49.889067171s ago: executing program 7 (id=8895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x40) 4m49.852280462s ago: executing program 7 (id=8896): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 4m49.830852032s ago: executing program 7 (id=8898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 4m49.378893749s ago: executing program 7 (id=8912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 4m49.378751258s ago: executing program 45 (id=8912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 4m1.829619267s ago: executing program 5 (id=10296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m1.65314428s ago: executing program 5 (id=10301): r0 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000280ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 4m1.221298516s ago: executing program 5 (id=10311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 4m1.185891557s ago: executing program 46 (id=10311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 3m54.815818201s ago: executing program 6 (id=10526): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.741786393s ago: executing program 6 (id=10529): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb1}, 0x100002, 0x2, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) 3m54.617538344s ago: executing program 6 (id=10532): socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close(0x4) 3m54.434080627s ago: executing program 6 (id=10537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m54.433503847s ago: executing program 6 (id=10538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 3m53.932897345s ago: executing program 6 (id=10551): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m53.876601656s ago: executing program 47 (id=10551): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m20.363002305s ago: executing program 9 (id=11418): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3m20.174145958s ago: executing program 9 (id=11421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 3m19.984724191s ago: executing program 9 (id=11428): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 3m19.905343121s ago: executing program 9 (id=11429): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 3m19.747927534s ago: executing program 9 (id=11430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x2040600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 3m18.579746111s ago: executing program 9 (id=11449): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 3m18.579523651s ago: executing program 48 (id=11449): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 2m57.1837784s ago: executing program 1 (id=12072): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfd}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001380)={r2, 0xd, 0x6e}, 0x8) 2m57.124991201s ago: executing program 1 (id=12073): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 2m56.304246233s ago: executing program 1 (id=12106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r1) 2m56.251172864s ago: executing program 1 (id=12110): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2m56.229033124s ago: executing program 1 (id=12111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@jqfmt_vfsv0}]}, 0x1, 0x549, &(0x7f0000001800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000540)=0x10) 2m56.118750056s ago: executing program 1 (id=12114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 2m41.74960579s ago: executing program 49 (id=12114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 3.815049744s ago: executing program 0 (id=16715): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0xc, 0x23, {0x23, 0x9, "54c48059e80ce6d49a740f9b8b045046f82a216c3ac8e5e8a2f031fdcafd388b20"}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x4}]}, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 3.295596421s ago: executing program 0 (id=16734): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) socket$packet(0x11, 0x2, 0x300) 2.344487336s ago: executing program 0 (id=16756): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) 2.300050336s ago: executing program 8 (id=16758): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 2.299281126s ago: executing program 0 (id=16759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4a002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.268640837s ago: executing program 8 (id=16761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 2.248617507s ago: executing program 8 (id=16762): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) 1.951117521s ago: executing program 2 (id=16771): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_config_ext={0x22b5, 0x32}, 0x80, 0x800, 0xff7ffffc, 0x7, 0x0, 0x1, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'hsr0\x00', &(0x7f0000000380)=@ethtool_sset_info={0x37, 0xffff, 0x81}}) 1.881449582s ago: executing program 2 (id=16772): r0 = syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x400002, 0x9c}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x264b, 0x4, 0x1, 0x0, 0x0) 1.37680629s ago: executing program 0 (id=16778): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1.34470879s ago: executing program 0 (id=16782): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) timer_delete(0x0) 1.169926543s ago: executing program 8 (id=16783): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 1.006782726s ago: executing program 2 (id=16786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc0590, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0xc, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 970.033696ms ago: executing program 2 (id=16787): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 625.855401ms ago: executing program 3 (id=16795): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 598.564692ms ago: executing program 4 (id=16796): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000e8b9d0fa3286c0d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 552.090212ms ago: executing program 4 (id=16797): bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) tkill(r1, 0x7) 527.022513ms ago: executing program 3 (id=16798): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0402}]}) nanosleep(0x0, 0x0) 490.937783ms ago: executing program 4 (id=16799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}, {0x0}], 0x3}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 477.666424ms ago: executing program 4 (id=16800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 397.782625ms ago: executing program 4 (id=16801): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) 397.402085ms ago: executing program 3 (id=16802): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$xdp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, 0x40041) 294.780256ms ago: executing program 3 (id=16803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 227.580187ms ago: executing program 8 (id=16804): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}}, 0x0) 226.859007ms ago: executing program 3 (id=16805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fe"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 89.038049ms ago: executing program 8 (id=16806): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 85.851139ms ago: executing program 2 (id=16807): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x84, @remote, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x17}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 0xa, 0x80, 0x12d5d}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 35.63229ms ago: executing program 3 (id=16808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000003e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 35.13791ms ago: executing program 2 (id=16809): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x800000000008, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000780)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 4 (id=16810): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884) close(r0) kernel console output (not intermixed with test programs): tes in process `syz.8.14191'. [ 526.173341][T21383] ip6_vti0: mtu greater than device maximum [ 526.508630][T21413] netlink: 'syz.2.14219': attribute type 1 has an invalid length. [ 526.758370][T21444] IPv6: Can't replace route, no match found [ 527.476142][T21507] netlink: 'syz.8.14255': attribute type 4 has an invalid length. [ 528.028949][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14271'. [ 528.253193][T21575] netlink: 'syz.3.14281': attribute type 10 has an invalid length. [ 528.293850][T21575] dummy0: left promiscuous mode [ 529.025120][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14291'. [ 529.099344][T21615] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 529.308558][T21635] SELinux: failed to load policy [ 529.556582][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14311'. [ 529.562321][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 529.562391][ T29] audit: type=1326 audit(2000000093.495:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.0.14310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 529.596173][ T29] audit: type=1326 audit(2000000093.505:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.0.14310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 529.992441][ T29] audit: type=1326 audit(2000000093.967:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.017039][ T29] audit: type=1326 audit(2000000093.967:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.040951][ T29] audit: type=1326 audit(2000000093.967:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.065339][ T29] audit: type=1326 audit(2000000093.967:14776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.089298][ T29] audit: type=1326 audit(2000000093.967:14777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.113546][ T29] audit: type=1326 audit(2000000093.967:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.137249][ T29] audit: type=1326 audit(2000000093.967:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.161693][ T29] audit: type=1326 audit(2000000093.967:14780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21678 comm="syz.0.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 530.294614][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14323'. [ 530.582559][T21727] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 530.885549][T21758] bridge: RTM_NEWNEIGH with invalid ether address [ 530.941400][T21765] all: renamed from bridge_slave_0 [ 531.129192][T21780] lo speed is unknown, defaulting to 1000 [ 531.317453][T21809] bond3: (slave dummy0): Releasing active interface [ 531.331610][T21809] bond3: (slave veth15): Releasing active interface [ 532.054972][T21864] netlink: 'syz.0.14381': attribute type 1 has an invalid length. [ 532.062844][T21864] netlink: 'syz.0.14381': attribute type 2 has an invalid length. [ 532.092106][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14381'. [ 533.019963][T21896] lo speed is unknown, defaulting to 1000 [ 533.726234][T21941] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.14402'. [ 533.950838][ T3706] usb usb8-port2: attempt power cycle [ 534.094711][T21957] netlink: 'syz.2.14412': attribute type 1 has an invalid length. [ 534.194550][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14415'. [ 534.220628][T21964] vlan0: entered promiscuous mode [ 534.225811][T21964] veth0_virt_wifi: entered promiscuous mode [ 534.310792][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14418'. [ 534.336662][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14418'. [ 534.383555][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14432'. [ 534.401076][T21983] vlan2: entered promiscuous mode [ 535.704197][ T3706] usb usb8-port2: unable to enumerate USB device [ 535.967758][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 535.967870][ T29] audit: type=1400 audit(2000000100.255:14810): avc: denied { unmount } for pid=30454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 536.074503][T22064] netlink: 'syz.8.14454': attribute type 10 has an invalid length. [ 536.082476][T22064] netlink: 55 bytes leftover after parsing attributes in process `syz.8.14454'. [ 536.149000][T22068] lo speed is unknown, defaulting to 1000 [ 536.243575][T22096] netlink: 'syz.2.14449': attribute type 3 has an invalid length. [ 536.555010][ T29] audit: type=1326 audit(2000000100.875:14811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.579498][ T29] audit: type=1326 audit(2000000100.875:14812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.605357][ T29] audit: type=1326 audit(2000000100.875:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.630076][ T29] audit: type=1326 audit(2000000100.875:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.654007][ T29] audit: type=1326 audit(2000000100.875:14815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.678510][ T29] audit: type=1326 audit(2000000100.875:14816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.702297][ T29] audit: type=1326 audit(2000000100.875:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.727029][ T29] audit: type=1326 audit(2000000100.875:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.751595][ T29] audit: type=1326 audit(2000000100.875:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.2.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 536.835416][T22137] netlink: 'syz.0.14467': attribute type 3 has an invalid length. [ 536.924008][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14471'. [ 536.978951][T22150] xt_CT: No such helper "pptp" [ 537.030077][T22155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14486'. [ 537.103976][T22174] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 537.107956][T22176] lo speed is unknown, defaulting to 1000 [ 537.258072][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.266054][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.273828][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.281740][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.289566][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.297436][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.305270][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.313066][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.320920][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.323981][T22211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14487'. [ 537.328695][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.345522][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.353409][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.361223][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.369062][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.376891][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.384689][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.392514][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.400302][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.408078][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.416103][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.424022][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.431869][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.439801][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.447600][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.455424][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.463239][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.471259][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.479240][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.487201][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.495006][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.502917][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.510764][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.518546][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.526333][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.534172][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.542053][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.549816][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.557766][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.565574][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.573437][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.581258][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.589072][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.596875][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 537.608170][ T6280] hid-generic 0000:007F:FFFFFFFE.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 537.742111][T22242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14491'. [ 538.068846][T22299] all: renamed from bridge_slave_0 (while UP) [ 538.105464][T22302] netlink: 'syz.2.14508': attribute type 6 has an invalid length. [ 538.165928][T22314] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 538.872233][T22401] __nla_validate_parse: 7 callbacks suppressed [ 538.872256][T22401] netlink: 664 bytes leftover after parsing attributes in process `syz.0.14546'. [ 539.143984][T22418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14554'. [ 539.389348][T22460] IPVS: Error connecting to the multicast addr [ 539.453595][T22470] lo: entered promiscuous mode [ 539.458634][T22470] lo: entered allmulticast mode [ 539.464562][ T6280] lo speed is unknown, defaulting to 1000 [ 539.470448][ T6280] syz0: Port: 1 Link DOWN [ 539.474887][ T3396] lo speed is unknown, defaulting to 1000 [ 539.520442][T22476] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14575'. [ 539.544716][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14577'. [ 539.579300][T22484] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 539.652818][T22499] netlink: 'syz.2.14584': attribute type 1 has an invalid length. [ 539.660936][T22499] netlink: 'syz.2.14584': attribute type 4 has an invalid length. [ 539.668803][T22499] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.14584'. [ 539.740237][T22509] lo speed is unknown, defaulting to 1000 [ 539.815207][T22540] serio: Serial port ptm0 [ 540.526180][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14613'. [ 540.551235][T22604] netlink: 'syz.2.14613': attribute type 2 has an invalid length. [ 540.758161][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 540.758212][ T29] audit: type=1326 audit(2000000105.284:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.789010][ T29] audit: type=1326 audit(2000000105.284:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.812762][ T29] audit: type=1326 audit(2000000105.284:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.837211][ T29] audit: type=1326 audit(2000000105.284:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.861820][ T29] audit: type=1326 audit(2000000105.284:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.888424][ T29] audit: type=1326 audit(2000000105.368:14856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.912098][ T29] audit: type=1326 audit(2000000105.368:14857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.936339][ T29] audit: type=1326 audit(2000000105.368:14858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.4.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 540.968762][T22648] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 541.077977][ T29] audit: type=1326 audit(2000000105.620:14859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22656 comm="syz.2.14633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 541.102656][ T29] audit: type=1326 audit(2000000105.620:14860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22656 comm="syz.2.14633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 541.249546][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14638'. [ 541.301548][T22666] netlink: 'syz.0.14638': attribute type 2 has an invalid length. [ 541.585678][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14652'. [ 541.748570][T22731] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14659'. [ 541.758642][T22731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14659'. [ 542.333748][T22757] C: entered promiscuous mode [ 542.338666][T22757] C: entered allmulticast mode [ 542.913144][T22818] bond6: entered promiscuous mode [ 542.918439][T22818] bond6: entered allmulticast mode [ 542.924082][T22818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.939411][T22818] bond6 (unregistering): Released all slaves [ 542.979186][T22884] lo speed is unknown, defaulting to 1000 [ 543.563703][T22951] netlink: 'syz.3.14710': attribute type 6 has an invalid length. [ 543.638550][T22962] __nla_validate_parse: 11 callbacks suppressed [ 543.638571][T22962] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.14715'. [ 543.785207][T22976] netlink: 'syz.4.14723': attribute type 13 has an invalid length. [ 543.966356][T22976] geneve0: left promiscuous mode [ 543.984777][T22978] lo speed is unknown, defaulting to 1000 [ 544.248516][T23013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14728'. [ 544.766428][T23056] netlink: 412 bytes leftover after parsing attributes in process `syz.3.14744'. [ 544.781906][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14744'. [ 544.925853][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14748'. [ 544.958778][T23066] bond4: entered promiscuous mode [ 544.963910][T23066] bond4: entered allmulticast mode [ 544.973624][T23066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.995247][T23066] bond4 (unregistering): Released all slaves [ 545.041929][T23112] lo speed is unknown, defaulting to 1000 [ 545.117934][T23173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14751'. [ 545.190100][T23189] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.14753'. [ 545.247903][T23175] xt_CT: No such helper "pptp" [ 545.304658][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14756'. [ 545.379123][T23221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14761'. [ 545.500199][ T3706] IPVS: starting estimator thread 0... [ 545.590964][T23255] IPVS: using max 2160 ests per chain, 108000 per kthread [ 545.607563][T23267] bond0: entered promiscuous mode [ 545.612751][T23267] bond0: entered allmulticast mode [ 545.618429][T23267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.652741][T23267] bond0 (unregistering): Released all slaves [ 545.721452][T23311] xt_CT: No such helper "pptp" [ 545.738063][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14777'. [ 545.756150][T23308] lo speed is unknown, defaulting to 1000 [ 545.868301][T23382] netlink: 'syz.8.14794': attribute type 1 has an invalid length. [ 546.004058][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 546.004076][ T29] audit: type=1400 audit(2000000110.795:14898): avc: denied { read } for pid=23402 comm="syz.0.14792" path="socket:[132016]" dev="sockfs" ino=132016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 546.103460][ T29] audit: type=1326 audit(2000000110.890:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.128287][ T29] audit: type=1326 audit(2000000110.890:14900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.152034][ T29] audit: type=1326 audit(2000000110.890:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.176531][ T29] audit: type=1326 audit(2000000110.890:14902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.200243][ T29] audit: type=1326 audit(2000000110.890:14903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.224700][ T29] audit: type=1326 audit(2000000110.890:14904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.249178][ T29] audit: type=1326 audit(2000000110.890:14905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.305056][ T29] audit: type=1326 audit(2000000110.890:14906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.329554][ T29] audit: type=1326 audit(2000000110.890:14907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.2.14800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 546.389512][T23428] netlink: 'syz.2.14802': attribute type 3 has an invalid length. [ 546.397495][T23428] netlink: 'syz.2.14802': attribute type 3 has an invalid length. [ 546.473894][T23440] netlink: 'syz.8.14806': attribute type 1 has an invalid length. [ 546.481911][T23440] netlink: 'syz.8.14806': attribute type 2 has an invalid length. [ 546.645782][T23473] netlink: 'syz.2.14821': attribute type 6 has an invalid length. [ 546.717031][T23484] bridge0: entered promiscuous mode [ 546.723026][T23484] bridge0: port 1(macvlan0) entered blocking state [ 546.730509][T23484] bridge0: port 1(macvlan0) entered disabled state [ 546.737303][T23484] macvlan0: entered allmulticast mode [ 546.742703][T23484] bridge0: entered allmulticast mode [ 546.748631][T23484] macvlan0: left allmulticast mode [ 546.754380][T23484] bridge0: left allmulticast mode [ 546.760062][T23484] bridge0: left promiscuous mode [ 548.101688][T23568] bond5: (slave veth0_to_bond): Releasing active interface [ 548.132486][T23568] bond5: (slave veth19): Releasing active interface [ 548.188649][T23582] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 548.333986][T23588] xt_CT: No such helper "pptp" [ 548.578897][T23638] netlink: 'syz.8.14875': attribute type 5 has an invalid length. [ 548.586954][T23638] __nla_validate_parse: 5 callbacks suppressed [ 548.586971][T23638] netlink: 152 bytes leftover after parsing attributes in process `syz.8.14875'. [ 548.627131][T23638] : renamed from bond0 [ 548.712583][T23634] syz_tun: left allmulticast mode [ 548.717787][T23634] syz_tun: left promiscuous mode [ 548.723008][T23634] bridge0: port 3(syz_tun) entered disabled state [ 548.755495][T23634] bridge_slave_0: left promiscuous mode [ 548.761227][T23634] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.798185][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.798672][T23634] bridge_slave_1: left allmulticast mode [ 548.806614][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.817697][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.821679][T23634] bridge_slave_1: left promiscuous mode [ 548.836376][T23634] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.855846][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.864516][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.874006][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.875692][T23634] team0: Port device team_slave_0 removed [ 548.924817][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.925952][T23634] team0: Port device team_slave_1 removed [ 548.933315][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.953623][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.956689][T23656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 548.961182][T23634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.970468][T23657] Invalid ELF header magic: != ELF [ 548.984753][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.992447][T23634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.047695][T23659] pim6reg: entered allmulticast mode [ 549.054918][T23661] pim6reg: left allmulticast mode [ 549.123325][T23679] netlink: 'syz.4.14887': attribute type 10 has an invalid length. [ 549.133383][T23679] dummy0: entered promiscuous mode [ 549.141498][T23679] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 549.457650][T23704] lo speed is unknown, defaulting to 1000 [ 550.366742][T23795] veth27: entered promiscuous mode [ 550.374057][T23795] bridge3: port 1(veth27) entered blocking state [ 550.380570][T23795] bridge3: port 1(veth27) entered disabled state [ 550.388602][T23795] veth27: entered allmulticast mode [ 550.422031][T23816] netlink: 'syz.3.14921': attribute type 1 has an invalid length. [ 550.443534][T23816] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.456248][T23816] syz_tun: entered allmulticast mode [ 550.470832][T23816] bond4: (slave syz_tun): making interface the new active one [ 550.480796][T23816] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 550.573207][T23865] netlink: 'syz.0.14928': attribute type 27 has an invalid length. [ 550.798940][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 550.798983][ T29] audit: type=1326 audit(2000000115.824:15007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.846122][ T29] audit: type=1326 audit(2000000115.824:15008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.870826][ T29] audit: type=1326 audit(2000000115.855:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.894809][ T29] audit: type=1326 audit(2000000115.855:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.919313][ T29] audit: type=1326 audit(2000000115.855:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.943062][ T29] audit: type=1326 audit(2000000115.855:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.967798][ T29] audit: type=1326 audit(2000000115.855:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 550.992511][ T29] audit: type=1326 audit(2000000115.855:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 551.016846][ T29] audit: type=1326 audit(2000000115.855:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 551.041535][ T29] audit: type=1326 audit(2000000115.855:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23878 comm="syz.8.14932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 551.251595][T23865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.260102][T23865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.269343][T23865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.277817][T23865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.371953][T23865] geneve0: left allmulticast mode [ 551.377709][T23865] macsec1: left promiscuous mode [ 551.382776][T23865] macsec1: left allmulticast mode [ 551.411421][T23874] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.442156][T23874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.604947][T23902] 8021q: adding VLAN 0 to HW filter on device team2 [ 551.931557][T23957] tipc: Enabling of bearer rejected, already enabled [ 552.202171][T23983] lo speed is unknown, defaulting to 1000 [ 552.293281][T23975] netlink: 'syz.3.14956': attribute type 1 has an invalid length. [ 552.733067][T24059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.747597][T24059] bond5 (unregistering): Released all slaves [ 553.601999][T24169] __nla_validate_parse: 11 callbacks suppressed [ 553.602017][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14998'. [ 553.621171][T24169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14998'. [ 554.013965][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15012'. [ 554.053202][T24207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15014'. [ 554.129444][T24207] bond6: entered promiscuous mode [ 554.139199][T24207] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 554.151870][T24230] vhci_hcd: invalid port number 96 [ 554.157062][T24230] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 554.180307][T24207] bond6: left promiscuous mode [ 554.447908][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15021'. [ 554.491013][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15021'. [ 554.517609][T24292] block device autoloading is deprecated and will be removed. [ 555.006115][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.053976][T24346] pimreg: entered allmulticast mode [ 555.062468][T24346] pimreg: left allmulticast mode [ 555.100826][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.118795][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.134271][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.180611][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.214016][T24357] lo speed is unknown, defaulting to 1000 [ 555.219952][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.222084][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15042'. [ 555.246447][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.254494][T24377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 555.260445][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.282826][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.301922][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24339 comm=syz.0.15037 [ 555.672179][T24398] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 555.830267][T24404] pim6reg1: entered promiscuous mode [ 555.835694][T24404] pim6reg1: entered allmulticast mode [ 555.934509][T24412] sit0: entered allmulticast mode [ 555.942493][T24412] sit0: entered promiscuous mode [ 555.958197][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 555.958218][ T29] audit: type=1326 audit(2000000121.241:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 555.995022][ T29] audit: type=1326 audit(2000000121.241:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 556.021786][ T29] audit: type=1326 audit(2000000121.293:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa388f7d2d0 code=0x7ffc0000 [ 556.045637][ T29] audit: type=1326 audit(2000000121.293:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa388f80197 code=0x7ffc0000 [ 556.069380][ T29] audit: type=1326 audit(2000000121.293:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 556.093002][ T29] audit: type=1326 audit(2000000121.293:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa388f80197 code=0x7ffc0000 [ 556.116791][ T29] audit: type=1326 audit(2000000121.293:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa388f7d5ca code=0x7ffc0000 [ 556.140535][ T29] audit: type=1326 audit(2000000121.293:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 556.164243][ T29] audit: type=1326 audit(2000000121.293:15105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 556.167022][T24418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15054'. [ 556.188005][ T29] audit: type=1326 audit(2000000121.293:15106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24413 comm="syz.0.15052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 556.210759][T24418] IPVS: Error connecting to the multicast addr [ 556.299788][T24425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.308550][T24425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.485550][T24441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15062'. [ 556.517547][T24445] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15063'. [ 556.606919][T24457] lo speed is unknown, defaulting to 1000 [ 556.652100][T24468] netlink: 'syz.2.15068': attribute type 16 has an invalid length. [ 556.661009][T24468] netlink: 'syz.2.15068': attribute type 17 has an invalid length. [ 556.690274][T24468] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.704871][T24468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.745092][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.070008][T24523] bond_slave_1: mtu less than device minimum [ 557.132133][T24529] pim6reg1: entered promiscuous mode [ 557.138547][T24529] pim6reg1: entered allmulticast mode [ 557.195730][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.394412][T13149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.407917][T24527] Set syz1 is full, maxelem 65536 reached [ 557.592460][T24576] netlink: 'syz.2.15107': attribute type 1 has an invalid length. [ 557.623360][T24576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.656768][T24611] bond0 (unregistering): Released all slaves [ 557.661527][T24563] xt_connbytes: Forcing CT accounting to be enabled [ 557.671136][T24563] Cannot find set identified by id 0 to match [ 557.768087][T24655] tipc: Enabling of bearer rejected, failed to enable media [ 558.383701][T13158] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.391717][T13158] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.516828][ T3701] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.525108][T24722] netlink: 'syz.2.15131': attribute type 10 has an invalid length. [ 558.708729][ T3713] IPVS: starting estimator thread 0... [ 558.714407][T24732] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 558.794043][T24743] __nla_validate_parse: 3 callbacks suppressed [ 558.794157][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15139'. [ 558.812616][T24737] IPVS: using max 2160 ests per chain, 108000 per kthread [ 558.874437][T24758] netlink: 'syz.4.15143': attribute type 1 has an invalid length. [ 558.899917][T24758] vlan2: entered allmulticast mode [ 558.905186][T24758] bond7: entered allmulticast mode [ 558.961653][T24802] SELinux: ebitmap: truncated map [ 558.967663][T24802] SELinux: failed to load policy [ 559.030098][T24816] IPVS: Error connecting to the multicast addr [ 559.990081][T24977] vlan0: entered allmulticast mode [ 559.996366][T24977] dummy0: entered allmulticast mode [ 560.225028][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15211'. [ 561.124461][T25102] Cannot find add_set index 0 as target [ 561.200801][T25160] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15221'. [ 561.255130][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15222'. [ 561.379154][T25174] netlink: 'syz.0.15226': attribute type 3 has an invalid length. [ 561.387178][T25174] netlink: 'syz.0.15226': attribute type 3 has an invalid length. [ 561.450511][T25174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15226'. [ 561.566205][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 561.566223][ T29] audit: type=1400 audit(2000000127.130:15266): avc: denied { unmount } for pid=14968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 561.598794][T25181] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.15232'. [ 561.637759][T25181] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15232'. [ 561.700268][ T29] audit: type=1326 audit(2000000127.267:15267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0c56a5927 code=0x7ffc0000 [ 561.731538][ T29] audit: type=1326 audit(2000000127.267:15268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0c564ab39 code=0x7ffc0000 [ 561.756491][ T29] audit: type=1326 audit(2000000127.267:15269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0c56a5927 code=0x7ffc0000 [ 561.780512][ T29] audit: type=1326 audit(2000000127.267:15270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0c564ab39 code=0x7ffc0000 [ 561.805013][ T29] audit: type=1326 audit(2000000127.267:15271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 561.828824][ T29] audit: type=1326 audit(2000000127.267:15272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 561.853422][ T29] audit: type=1326 audit(2000000127.267:15273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 561.877221][ T29] audit: type=1326 audit(2000000127.267:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 561.901653][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.909590][ T29] audit: type=1326 audit(2000000127.267:15275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.15235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 562.522593][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15255'. [ 562.669815][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15251'. [ 562.782417][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15260'. [ 562.883167][T25278] netlink: 'syz.3.15274': attribute type 5 has an invalid length. [ 563.096577][T25315] netlink: 'syz.4.15280': attribute type 5 has an invalid length. [ 563.350835][T25326] Invalid ELF header magic: != ELF [ 563.447686][T25351] netlink: 'syz.0.15294': attribute type 5 has an invalid length. [ 563.522117][T25357] netlink: 'syz.3.15297': attribute type 10 has an invalid length. [ 563.540621][T25339] Cannot find add_set index 0 as target [ 563.546574][T25357] dummy0: entered promiscuous mode [ 563.560441][T25357] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 563.591574][T25359] __nla_validate_parse: 30 callbacks suppressed [ 563.591604][T25359] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 563.606439][T25359] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 563.638644][T25359] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 563.746866][T25383] Invalid ELF header magic: != ELF [ 563.901246][T25407] netlink: 412 bytes leftover after parsing attributes in process `syz.2.15306'. [ 563.913772][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15306'. [ 564.112964][T25430] netlink: 'syz.2.15310': attribute type 5 has an invalid length. [ 564.121792][T25430] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15310'. [ 564.155199][T25434] netlink: 'syz.2.15311': attribute type 10 has an invalid length. [ 564.163261][T25434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15311'. [ 564.172454][T25434] dummy0: entered promiscuous mode [ 564.180298][T25434] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 564.716601][T25511] Invalid ELF header magic: != ELF [ 565.308890][T25568] Invalid ELF header magic: != ELF [ 565.330107][T25590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15334'. [ 565.423817][T25590] veth25: entered promiscuous mode [ 565.442196][T25590] bridge8: port 1(veth25) entered blocking state [ 565.448751][T25590] bridge8: port 1(veth25) entered disabled state [ 565.458203][T25590] veth25: entered allmulticast mode [ 565.911226][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15360'. [ 566.255529][T25662] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15354'. [ 566.333949][T25667] veth17: entered promiscuous mode [ 566.338343][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 566.338364][ T29] audit: type=1326 audit(2000000132.138:15386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.350344][T25667] bridge2: port 1(veth17) entered blocking state [ 566.376004][T25667] bridge2: port 1(veth17) entered disabled state [ 566.394092][T25667] veth17: entered allmulticast mode [ 566.415681][ T29] audit: type=1326 audit(2000000132.201:15387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.440345][ T29] audit: type=1326 audit(2000000132.201:15388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0c56a5927 code=0x7ffc0000 [ 566.464939][ T29] audit: type=1326 audit(2000000132.201:15389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0c564ab39 code=0x7ffc0000 [ 566.488941][ T29] audit: type=1326 audit(2000000132.201:15390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.512626][ T29] audit: type=1326 audit(2000000132.201:15391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.537152][ T29] audit: type=1326 audit(2000000132.201:15392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.562632][ T29] audit: type=1326 audit(2000000132.201:15393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.587356][ T29] audit: type=1326 audit(2000000132.201:15394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 566.611419][ T29] audit: type=1326 audit(2000000132.201:15395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25674 comm="syz.3.15356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 567.344290][T25717] syz.4.15368 (25717): attempted to duplicate a private mapping with mremap. This is not supported. [ 568.081877][T25782] netlink: 'syz.4.15382': attribute type 1 has an invalid length. [ 568.143937][T25829] 8021q: adding VLAN 0 to HW filter on device team2 [ 568.443935][T25905] lo speed is unknown, defaulting to 1000 [ 568.823688][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.217327][T25959] __nla_validate_parse: 3 callbacks suppressed [ 569.217349][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15411'. [ 569.262220][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15411'. [ 569.372106][T25984] netlink: 'syz.4.15413': attribute type 27 has an invalid length. [ 569.395436][T25984] C: left promiscuous mode [ 569.400116][T25984] C: left allmulticast mode [ 569.405186][T25984] 0{X: left allmulticast mode [ 569.419443][T25984] sit0: left promiscuous mode [ 569.424284][T25984] sit0: left allmulticast mode [ 569.446330][T25984] dummy0: left promiscuous mode [ 569.479190][T25984] geneve0: left allmulticast mode [ 569.484645][T25984] gtp0: left allmulticast mode [ 569.489514][T25984] geneve2: left promiscuous mode [ 569.495235][T25984] ip6gre2: left promiscuous mode [ 569.500539][T25984] bond3: left promiscuous mode [ 569.505365][T25984] bond3: left allmulticast mode [ 569.510565][T25984] vlan0: left allmulticast mode [ 569.531835][T25984] ip6gre3: left allmulticast mode [ 569.538573][T25984] macsec1: left promiscuous mode [ 569.543626][T25984] macsec1: left allmulticast mode [ 569.583974][T25996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.603562][T25988] lo speed is unknown, defaulting to 1000 [ 569.623875][ T6278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.669375][T26027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15421'. [ 569.698217][T26027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 569.714574][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15421'. [ 569.736449][T26027] bond8 (unregistering): Released all slaves [ 569.871853][T13149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.424363][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.489007][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15433'. [ 570.521318][T26124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15433'. [ 570.605654][T26142] lo speed is unknown, defaulting to 1000 [ 570.881408][T13176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.889366][T13176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 570.957286][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.110275][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 571.110293][ T29] audit: type=1326 audit(2000000137.156:15542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26182 comm="syz.0.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa388fb1225 code=0x7ffc0000 [ 571.215074][T26186] netlink: 'syz.3.15447': attribute type 27 has an invalid length. [ 571.223106][T26186] lo: left promiscuous mode [ 571.228420][T26186] lo: left allmulticast mode [ 571.234163][T26186] syz_tun: left allmulticast mode [ 571.240708][T26186] dummy0: left promiscuous mode [ 571.250371][T26186] geneve2: left promiscuous mode [ 571.256328][T26186] vlan2: left allmulticast mode [ 571.264918][T26188] vhci_hcd: invalid port number 96 [ 571.270128][T26188] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 571.272011][ T29] audit: type=1326 audit(2000000137.303:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26182 comm="syz.0.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 571.301743][T26186] dummy0: left allmulticast mode [ 571.307494][T26186] bond3: left promiscuous mode [ 571.312583][T26186] bond3: left allmulticast mode [ 571.317908][T26186] ip6gre1: left allmulticast mode [ 571.323728][T26186] ip6gre2: left allmulticast mode [ 571.339857][T26186] geneve0: left allmulticast mode [ 571.345090][T26186] geneve0: left promiscuous mode [ 571.356596][T26186] macsec1: left promiscuous mode [ 571.361682][T26186] macsec1: left allmulticast mode [ 571.451079][T26186] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.473665][T26186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.489430][ T3713] lo speed is unknown, defaulting to 1000 [ 571.495240][ T3713] syz0: Port: 1 Link ACTIVE [ 571.499482][T26197] pimreg: entered allmulticast mode [ 571.538440][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.538931][ T3701] usb usb8-port2: attempt power cycle [ 571.686480][T26223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15456'. [ 571.715313][T26223] bond5: entered promiscuous mode [ 571.720914][T26223] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 571.733795][T26223] bond5: left promiscuous mode [ 571.841291][ T29] audit: type=1326 audit(2000000137.912:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.872547][ T29] audit: type=1326 audit(2000000137.912:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.897171][ T29] audit: type=1326 audit(2000000137.912:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.921774][ T29] audit: type=1326 audit(2000000137.912:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.945699][ T29] audit: type=1326 audit(2000000137.912:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.970135][ T29] audit: type=1326 audit(2000000137.912:15549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.994092][ T29] audit: type=1326 audit(2000000137.912:15550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 571.999507][T13125] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.019058][ T29] audit: type=1326 audit(2000000137.912:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26267 comm="syz.3.15459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 572.256477][T26281] lo speed is unknown, defaulting to 1000 [ 572.567073][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.652962][ T3713] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 572.660890][ T3713] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 573.348338][ T3701] usb usb8-port2: unable to enumerate USB device [ 573.492965][T26348] lo speed is unknown, defaulting to 1000 [ 573.582274][T26380] selinux_netlink_send: 52 callbacks suppressed [ 573.582366][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.641933][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.672433][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.705684][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.723375][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.736368][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.759581][T26389] lo speed is unknown, defaulting to 1000 [ 573.793828][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.824611][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 573.853900][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 574.034873][T26380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26380 comm=syz.4.15480 [ 574.920419][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 574.920437][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.537491][T26422] pimreg: entered allmulticast mode [ 575.564639][T26422] pimreg: left allmulticast mode [ 575.781656][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15494'. [ 576.587825][T26487] pimreg: entered allmulticast mode [ 576.607471][T26487] pimreg: left allmulticast mode [ 576.827413][T26496] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 576.920979][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 576.920998][ T29] audit: type=1326 audit(2000000143.255:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26505 comm="syz.2.15508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 576.951829][ T29] audit: type=1326 audit(2000000143.255:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26505 comm="syz.2.15508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 577.064046][ T29] audit: type=1326 audit(2000000143.308:15583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26505 comm="syz.2.15508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 577.087975][ T29] audit: type=1326 audit(2000000143.308:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26505 comm="syz.2.15508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 577.112080][ T29] audit: type=1326 audit(2000000143.308:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26505 comm="syz.2.15508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 577.137332][ T29] audit: type=1326 audit(2000000143.339:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.4.15510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 577.161922][ T29] audit: type=1326 audit(2000000143.339:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.4.15510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 577.185655][ T29] audit: type=1326 audit(2000000143.339:15588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.4.15510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 577.210530][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 577.218369][ T29] audit: type=1326 audit(2000000143.339:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.4.15510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 577.242889][ T29] audit: type=1326 audit(2000000143.339:15590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.4.15510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 577.946583][T26523] Set syz1 is full, maxelem 65536 reached [ 578.933134][T26565] xt_connbytes: Forcing CT accounting to be enabled [ 579.097559][T26565] Cannot find set identified by id 0 to match [ 579.354648][T26563] Set syz1 is full, maxelem 65536 reached [ 579.624750][T26604] netlink: 'syz.4.15552': attribute type 1 has an invalid length. [ 579.642760][T26607] selinux_netlink_send: 34 callbacks suppressed [ 579.642780][T26607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26607 comm=syz.8.15554 [ 579.665476][T26607] netlink: 'syz.8.15554': attribute type 1 has an invalid length. [ 579.694359][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15552'. [ 579.729161][T26604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.786143][T26619] vlan0: entered allmulticast mode [ 579.791518][T26619] bond0: entered allmulticast mode [ 579.841101][T26618] bond8 (unregistering): Released all slaves [ 579.963039][T26728] : (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.975379][T26728] : (slave ipvlan0): The slave device specified does not support setting the MAC address [ 579.980147][T26727] SELinux: ebitmap: truncated map [ 579.990561][T26728] : (slave ipvlan0): Error -95 calling set_mac_address [ 580.009864][T26727] SELinux: failed to load policy [ 580.178848][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.387959][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.483292][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.806871][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.140473][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.649170][T26994] futex_wake_op: syz.4.15649 tries to shift op by -1; fix this program [ 581.674128][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.733460][T27015] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 581.805064][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 581.805081][ T29] audit: type=1326 audit(2000000148.368:15786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.851135][ T29] audit: type=1326 audit(2000000148.368:15787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.876029][ T29] audit: type=1326 audit(2000000148.368:15788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.900082][ T29] audit: type=1326 audit(2000000148.368:15789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.924537][ T29] audit: type=1326 audit(2000000148.368:15790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.948656][ T29] audit: type=1326 audit(2000000148.410:15791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27027 comm="syz.2.15660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 581.973366][ T29] audit: type=1326 audit(2000000148.473:15792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27035 comm="syz.8.15664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 581.997554][ T29] audit: type=1326 audit(2000000148.473:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27035 comm="syz.8.15664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 582.021282][ T29] audit: type=1326 audit(2000000148.504:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27035 comm="syz.8.15664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 582.045257][ T29] audit: type=1326 audit(2000000148.504:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27035 comm="syz.8.15664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 582.122053][T27050] futex_wake_op: syz.2.15670 tries to shift op by -1; fix this program [ 582.179601][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15672'. [ 582.189084][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15672'. [ 582.845214][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 582.846224][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 583.113576][T27096] ref_ctr increment failed for inode: 0xb11 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888119571700 [ 583.126833][T27095] uprobe: syz.0.15687:27095 failed to unregister, leaking uprobe [ 584.092756][T27134] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15702'. [ 584.135839][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15702'. [ 584.247001][T27156] bridge: RTM_NEWNEIGH with invalid ether address [ 584.456830][T27174] ref_ctr increment failed for inode: 0x1bde offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119573f40 [ 584.470327][T27172] uprobe: syz.2.15714:27172 failed to unregister, leaking uprobe [ 584.634017][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15720'. [ 584.666343][T27189] 8021q: adding VLAN 0 to HW filter on device team3 [ 584.760168][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15724'. [ 584.777933][T27231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15724'. [ 584.803513][T27231] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15724'. [ 584.999420][T27244] netlink: 'syz.3.15728': attribute type 1 has an invalid length. [ 585.015498][T27244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.029426][T27244] bond6: (slave gretap2): making interface the new active one [ 585.037852][T27244] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 585.050474][T27244] bond6 (unregistering): (slave gretap2): Releasing active interface [ 585.061293][T27244] bond6 (unregistering): Released all slaves [ 585.164672][T27328] bridge: RTM_NEWNEIGH with invalid ether address [ 585.259768][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15741'. [ 585.270878][T27341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15741'. [ 585.335479][T27354] netlink: zone id is out of range [ 585.341551][T27354] netlink: zone id is out of range [ 585.347036][T27354] netlink: zone id is out of range [ 585.353665][T27354] netlink: zone id is out of range [ 585.359204][T27354] netlink: del zone limit has 8 unknown bytes [ 585.611349][T27360] netlink: 'syz.8.15758': attribute type 1 has an invalid length. [ 585.646318][T27360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.706709][T27396] bond6: (slave gretap2): making interface the new active one [ 585.789586][T27396] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 585.835110][T27360] bond6 (unregistering): (slave gretap2): Releasing active interface [ 585.869354][T27360] bond6 (unregistering): Released all slaves [ 585.902898][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.035094][T27444] 8021q: adding VLAN 0 to HW filter on device team3 [ 586.328638][T27497] netlink: zone id is out of range [ 586.338370][T27497] netlink: zone id is out of range [ 586.349152][T27497] netlink: zone id is out of range [ 586.365405][T27497] netlink: zone id is out of range [ 586.382725][T27497] netlink: del zone limit has 8 unknown bytes [ 586.639201][T27524] 8021q: adding VLAN 0 to HW filter on device team1 [ 586.668008][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 586.668026][ T29] audit: type=1326 audit(2000000153.480:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.715682][ T29] audit: type=1326 audit(2000000153.480:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.739813][ T29] audit: type=1326 audit(2000000153.480:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.763633][ T29] audit: type=1326 audit(2000000153.480:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.787441][ T29] audit: type=1326 audit(2000000153.480:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.811415][ T29] audit: type=1326 audit(2000000153.480:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.835161][ T29] audit: type=1326 audit(2000000153.480:15927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.859060][ T29] audit: type=1326 audit(2000000153.480:15928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.882865][ T29] audit: type=1326 audit(2000000153.480:15929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 586.906782][ T29] audit: type=1326 audit(2000000153.480:15930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27557 comm="syz.0.15772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 587.025376][T27575] __nla_validate_parse: 9 callbacks suppressed [ 587.025392][T27575] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15777'. [ 587.255006][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15786'. [ 587.391021][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15790'. [ 587.400073][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15790'. [ 587.472251][T27614] wireguard0: entered promiscuous mode [ 587.477885][T27614] wireguard0: entered allmulticast mode [ 587.487104][T27625] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15792'. [ 587.556230][T27627] netlink: 'syz.8.15795': attribute type 7 has an invalid length. [ 587.565015][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15795'. [ 587.737812][T27645] netlink: 'syz.8.15802': attribute type 13 has an invalid length. [ 587.828100][T27645] 8021q: adding VLAN 0 to HW filter on device  [ 587.836077][T27645] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.096266][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15808'. [ 588.144707][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15808'. [ 589.371263][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15831'. [ 589.380400][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15831'. [ 589.799020][T27741] wireguard0: entered promiscuous mode [ 589.804641][T27741] wireguard0: entered allmulticast mode [ 589.844857][T27751] netlink: 'syz.4.15839': attribute type 13 has an invalid length. [ 589.884895][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.446205][T27781] wireguard1: entered promiscuous mode [ 590.451810][T27781] wireguard1: entered allmulticast mode [ 590.643136][T27789] netlink: 'syz.3.15853': attribute type 13 has an invalid length. [ 590.751378][T27789] net_ratelimit: 13 callbacks suppressed [ 590.751392][T27789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.755706][ T3713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.781026][ T3701] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.877363][T27796] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡ [ 591.168652][T27810] netlink: 'syz.2.15862': attribute type 1 has an invalid length. [ 591.191548][T27810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.250045][T27810] bond0 (unregistering): Released all slaves [ 591.324244][ T3701] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.470793][T27895] netlink: 'syz.2.15868': attribute type 13 has an invalid length. [ 591.532702][ T6278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.591825][T27895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.761895][ T6278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.789597][T27909] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 593.096275][ T3713] usb usb8-port2: attempt power cycle [ 594.857589][ T3713] usb usb8-port2: unable to enumerate USB device [ 594.892073][T27962] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡ [ 594.909593][T27961] netlink: 'syz.0.15881': attribute type 13 has an invalid length. [ 594.957140][T27961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.997808][T27974] __nla_validate_parse: 8 callbacks suppressed [ 594.997827][T27974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15887'. [ 595.197730][T27995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15900'. [ 595.814893][T28011] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡ [ 595.898884][T28015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28015 comm=syz.3.15907 [ 595.956648][T28017] netlink: 'syz.2.15908': attribute type 13 has an invalid length. [ 595.983180][T28017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.007777][ T3701] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.147813][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 596.147831][ T29] audit: type=1326 audit(2000000163.432:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.188580][ T29] audit: type=1326 audit(2000000163.474:15968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.213214][ T29] audit: type=1326 audit(2000000163.474:15969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.236983][ T29] audit: type=1326 audit(2000000163.474:15970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.261539][ T29] audit: type=1326 audit(2000000163.474:15971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.285380][ T29] audit: type=1326 audit(2000000163.474:15972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.376538][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15919'. [ 596.385653][ T29] audit: type=1326 audit(2000000163.611:15973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.410155][ T29] audit: type=1326 audit(2000000163.611:15974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.3.15914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 596.559709][T28055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15927'. [ 596.579756][T28055] xfrm1: entered promiscuous mode [ 596.585651][T28055] xfrm1: entered allmulticast mode [ 596.640344][ T29] audit: type=1326 audit(2000000163.947:15975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.2.15930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 596.664215][ T29] audit: type=1326 audit(2000000163.947:15976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.2.15930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 596.754153][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15934'. [ 596.895812][T28084] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15936'. [ 596.945267][ T3701] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.010618][T28090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28090 comm=syz.4.15940 [ 597.765052][T28123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28123 comm=syz.8.15952 [ 597.932162][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15960'. [ 598.274992][T28176] netlink: 'syz.3.15986': attribute type 13 has an invalid length. [ 598.374302][ T3713] lo speed is unknown, defaulting to 1000 [ 598.380107][ T3713] syz0: Port: 1 Link DOWN [ 598.697022][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.884810][T28214] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 598.915942][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15991'. [ 598.990688][T28231] netlink: 'syz.2.15994': attribute type 13 has an invalid length. [ 599.020425][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.028683][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.036876][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.058691][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.066993][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.075967][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.084129][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.092376][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.101411][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.109634][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.117825][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.126827][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.134961][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.143079][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.152278][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.161537][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.169892][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.178137][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.187111][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.195246][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.203402][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.212293][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.220463][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.228603][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.236781][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.245547][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.253922][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.262144][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.270959][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: unknown main item tag 0x0 [ 599.286826][ T3706] hid-generic FFFF:FFFFFFFC:20000001.0022: hidraw0: HID va0.69 Device [syz0] on syz1 [ 600.122073][T28272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16008'. [ 600.270533][T28286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16013'. [ 600.709728][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16038'. [ 600.719483][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16038'. [ 600.736547][T28361] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16039'. [ 600.846689][T28380] bridge0: entered allmulticast mode [ 600.967146][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 600.967161][ T29] audit: type=1326 audit(2000000168.492:16095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28387 comm="syz.0.16050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa388f7e969 code=0x0 [ 601.015700][T28390] block device autoloading is deprecated and will be removed. [ 601.023750][T28390] syz.8.16051: attempt to access beyond end of device [ 601.023750][T28390] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 601.218916][ T29] audit: type=1326 audit(2000000168.755:16096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28399 comm="syz.4.16053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c83b1e969 code=0x0 [ 601.292088][T28405] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16055'. [ 601.358416][ T29] audit: type=1400 audit(2000000168.902:16097): avc: denied { write } for pid=28412 comm="syz.8.16059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 601.383064][T28415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16060'. [ 601.401530][T28415] 8021q: adding VLAN 0 to HW filter on device bond6 [ 601.408323][ T29] audit: type=1326 audit(2000000168.954:16098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.432930][ T29] audit: type=1326 audit(2000000168.954:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.456920][ T29] audit: type=1326 audit(2000000168.954:16100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.481525][ T29] audit: type=1326 audit(2000000168.954:16101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.482703][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16060'. [ 601.505300][ T29] audit: type=1326 audit(2000000168.954:16102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.539444][ T29] audit: type=1326 audit(2000000168.954:16103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.541515][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16062'. [ 601.564150][ T29] audit: type=1326 audit(2000000168.954:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28449 comm="syz.8.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 601.604873][T28451] bond6 (unregistering): Released all slaves [ 601.721821][T28502] wireguard1: entered promiscuous mode [ 601.727437][T28502] wireguard1: entered allmulticast mode [ 601.746955][T28508] netlink: 'syz.8.16069': attribute type 7 has an invalid length. [ 601.755036][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16069'. [ 601.819446][T28521] pim6reg: entered allmulticast mode [ 601.828524][T28521] pim6reg: left allmulticast mode [ 601.964420][T28546] openvswitch: netlink: Flow key attr not present in new flow. [ 602.206829][T28576] netlink: 'syz.0.16096': attribute type 14 has an invalid length. [ 602.224546][T28578] veth25: left allmulticast mode [ 602.229585][T28578] veth25: left promiscuous mode [ 602.234713][T28578] bridge8: port 1(veth25) entered disabled state [ 602.250280][ T3706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.773258][ T3706] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.972130][T28631] ALSA: seq fatal error: cannot create timer (-22) [ 603.158320][T28604] syz.2.16108 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 603.172442][T28604] CPU: 0 UID: 0 PID: 28604 Comm: syz.2.16108 Tainted: G W 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 603.172542][T28604] Tainted: [W]=WARN [ 603.172551][T28604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.172565][T28604] Call Trace: [ 603.172571][T28604] [ 603.172579][T28604] __dump_stack+0x1d/0x30 [ 603.172662][T28604] dump_stack_lvl+0xe8/0x140 [ 603.172684][T28604] dump_stack+0x15/0x1b [ 603.172708][T28604] dump_header+0x81/0x220 [ 603.172745][T28604] oom_kill_process+0x334/0x3f0 [ 603.172784][T28604] out_of_memory+0x979/0xb80 [ 603.172891][T28604] ? css_next_descendant_pre+0x138/0x160 [ 603.172916][T28604] mem_cgroup_out_of_memory+0x13d/0x190 [ 603.172947][T28604] try_charge_memcg+0x5e2/0x870 [ 603.172991][T28604] obj_cgroup_charge_pages+0xb7/0x1a0 [ 603.173029][T28604] __memcg_kmem_charge_page+0x9f/0x170 [ 603.173070][T28604] __alloc_frozen_pages_noprof+0x188/0x360 [ 603.173121][T28604] alloc_pages_mpol+0xb3/0x250 [ 603.173164][T28604] alloc_pages_noprof+0x90/0x130 [ 603.173254][T28604] __vmalloc_node_range_noprof+0x6d5/0xe40 [ 603.173330][T28604] __kvmalloc_node_noprof+0x312/0x4f0 [ 603.173368][T28604] ? ip_set_alloc+0x1f/0x30 [ 603.173410][T28604] ? ip_set_alloc+0x1f/0x30 [ 603.173439][T28604] ? __kmalloc_cache_noprof+0x189/0x320 [ 603.173471][T28604] ip_set_alloc+0x1f/0x30 [ 603.173510][T28604] hash_netiface_create+0x282/0x740 [ 603.173544][T28604] ? __pfx_hash_netiface_create+0x10/0x10 [ 603.173576][T28604] ip_set_create+0x3c9/0x960 [ 603.173698][T28604] ? __nla_parse+0x40/0x60 [ 603.173724][T28604] nfnetlink_rcv_msg+0x4c6/0x590 [ 603.173825][T28604] ? selinux_capable+0x1f9/0x270 [ 603.173880][T28604] netlink_rcv_skb+0x123/0x220 [ 603.173916][T28604] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 603.173960][T28604] nfnetlink_rcv+0x16b/0x1690 [ 603.174015][T28604] ? __list_del_entry_valid_or_report+0x65/0x130 [ 603.174094][T28604] ? __rmqueue_pcplist+0x9fb/0xc00 [ 603.174135][T28604] ? should_fail_ex+0x30/0x280 [ 603.174185][T28604] ? selinux_nlmsg_lookup+0x99/0x890 [ 603.174223][T28604] ? selinux_netlink_send+0x59f/0x5f0 [ 603.174267][T28604] ? __rcu_read_unlock+0x34/0x70 [ 603.174372][T28604] ? __netlink_lookup+0x266/0x2a0 [ 603.174422][T28604] netlink_unicast+0x59e/0x670 [ 603.174456][T28604] netlink_sendmsg+0x58b/0x6b0 [ 603.174580][T28604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.174609][T28604] __sock_sendmsg+0x142/0x180 [ 603.174655][T28604] ____sys_sendmsg+0x31e/0x4e0 [ 603.174694][T28604] ___sys_sendmsg+0x17b/0x1d0 [ 603.174821][T28604] __x64_sys_sendmsg+0xd4/0x160 [ 603.174854][T28604] x64_sys_call+0x2999/0x2fb0 [ 603.174877][T28604] do_syscall_64+0xd2/0x200 [ 603.174911][T28604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 603.174969][T28604] ? clear_bhb_loop+0x40/0x90 [ 603.175058][T28604] ? clear_bhb_loop+0x40/0x90 [ 603.175085][T28604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.175179][T28604] RIP: 0033:0x7f50feb3e969 [ 603.175274][T28604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.175299][T28604] RSP: 002b:00007f50fd1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.175322][T28604] RAX: ffffffffffffffda RBX: 00007f50fed65fa0 RCX: 00007f50feb3e969 [ 603.175336][T28604] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 603.175348][T28604] RBP: 00007f50febc0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 603.175361][T28604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.175373][T28604] R13: 0000000000000000 R14: 00007f50fed65fa0 R15: 00007ffef2a8d708 [ 603.175575][T28604] [ 603.530426][T28604] memory: usage 307200kB, limit 307200kB, failcnt 342 [ 603.537334][T28604] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 603.545332][T28604] kmem: usage 239704kB, limit 9007199254740988kB, failcnt 0 [ 603.552814][T28604] Memory cgroup stats for /syz2: [ 603.600916][T28604] cache 69079040 [ 603.609542][T28604] rss 4096 [ 603.612681][T28604] shmem 0 [ 603.615696][T28604] mapped_file 53248 [ 603.619562][T28604] dirty 53248 [ 603.622965][T28604] writeback 12288 [ 603.626717][T28604] workingset_refault_anon 3961 [ 603.631816][T28604] workingset_refault_file 0 [ 603.636393][T28604] swap 253952 [ 603.639728][T28604] swapcached 32768 [ 603.643502][T28604] nr_memmap_boot_pages 424900 [ 603.648223][T28604] pgpgin 408026 [ 603.651764][T28604] pglazyfree 452889 [ 603.655605][T28604] pgfault 599 [ 603.658965][T28604] a_other 32768 [ 603.662534][T28604] inactive_anon 0 [ 603.666338][T28604] active_anon 57344 [ 603.670199][T28604] inactive_file 0 [ 603.673850][T28604] active_file 69025792 [ 603.678044][T28604] hierarchical_memory_limit 314572800 [ 603.683568][T28604] hierarchical_memsw_limit 9223372036854771712 [ 603.689817][T28604] total_cache 69079040 [ 603.693902][T28604] total_rss 4096 [ 603.697497][T28604] total_shmem 0 [ 603.700986][T28604] total_mapped_file 53248 [ 603.705335][T28604] total_dirty 53248 [ 603.709263][T28604] total_writeback 12288 [ 603.713449][T28604] total_workingset_refault_anon 3961 [ 603.718831][T28604] total_workingset_refault_file 0 [ 603.723877][T28604] total_swap 253952 [ 603.727842][T28604] total_swapcached 32768 [ 603.732119][T28604] total_nr_memmap_boot_pages 424900 [ 603.737462][T28604] total_pgpgin 408026 [ 603.741645][T28604] total_pglazyfree 452889 [ 603.746029][T28604] total_pgfault 599 [ 603.749874][T28604] total_a_other 32768 [ 603.753961][T28604] total_inactive_anon 0 [ 603.758200][T28604] total_active_anon 57344 [ 603.762561][T28604] total_inactive_file 0 [ 603.766857][T28604] total_active_file 69025792 [ 603.771484][T28604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.16108,pid=28602,uid=0 [ 603.786580][T28604] Memory cgroup out of memory: Killed process 28602 (syz.2.16108) total-vm:93880kB, anon-rss:1068kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 603.914041][T28661] all: renamed from lo [ 604.433426][T28705] netlink: 'syz.8.16156': attribute type 30 has an invalid length. [ 604.444476][T28705] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.453401][T28705] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.461713][T28705] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.470050][T28705] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.479925][T28705] netlink: 'syz.8.16156': attribute type 30 has an invalid length. [ 605.792194][T28796] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 607.773736][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 607.773757][ T29] audit: type=1400 audit(2000000175.631:16344): avc: denied { connect } for pid=28854 comm="syz.2.16199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 607.812883][ T29] audit: type=1326 audit(2000000175.673:16345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.0.16198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 607.836792][ T29] audit: type=1326 audit(2000000175.673:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.0.16198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 607.862163][ T29] audit: type=1326 audit(2000000175.705:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.0.16198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 607.886193][ T29] audit: type=1326 audit(2000000175.705:16348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.0.16198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 607.909910][ T29] audit: type=1326 audit(2000000175.705:16349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.0.16198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388f7e969 code=0x7ffc0000 [ 607.961088][T28866] ip_vti0: entered promiscuous mode [ 607.967188][T28866] ip_vti0: entered allmulticast mode [ 607.999256][T28870] netlink: 'syz.4.16207': attribute type 13 has an invalid length. [ 608.038350][T28874] __nla_validate_parse: 7 callbacks suppressed [ 608.038369][T28874] netlink: 60 bytes leftover after parsing attributes in process `syz.8.16209'. [ 608.170631][T28893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16213'. [ 608.607669][ T29] audit: type=1326 audit(2000000176.502:16350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 608.631537][ T29] audit: type=1326 audit(2000000176.502:16351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 608.655312][ T29] audit: type=1326 audit(2000000176.502:16352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 608.679295][ T29] audit: type=1326 audit(2000000176.502:16353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz.8.16216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ffae969 code=0x7ffc0000 [ 608.744118][T28917] ALSA: seq fatal error: cannot create timer (-22) [ 608.773417][T28925] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16222'. [ 608.845384][T28941] tipc: New replicast peer: 10.1.1.2 [ 608.847532][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16229'. [ 608.850915][T28941] tipc: Enabled bearer , priority 10 [ 608.888543][T28939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.906878][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16229'. [ 608.931794][T28939] bond0 (unregistering): Released all slaves [ 609.156073][T29011] netlink: 'syz.0.16231': attribute type 13 has an invalid length. [ 609.164340][T29013] bridge0: entered allmulticast mode [ 609.557793][T29048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16245'. [ 609.605883][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16245'. [ 609.698710][T29048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.755761][T29051] bond6 (unregistering): Released all slaves [ 609.987916][T29126] bridge0: entered allmulticast mode [ 610.483574][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.491107][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.498634][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.506215][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.513772][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.521234][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.528836][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.536342][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.543809][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.551433][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.558945][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.566403][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.573851][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.581390][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.588850][ T6278] hid-generic 0006:0000:0000.0023: unknown main item tag 0x0 [ 610.596667][ T6278] hid-generic 0006:0000:0000.0023: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 610.625971][T29150] tipc: New replicast peer: 255.255.0.10 [ 610.631758][T29150] tipc: Enabled bearer , priority 10 [ 610.697688][T29160] netlink: 'syz.8.16259': attribute type 13 has an invalid length. [ 610.747753][T29160] geneve0: left allmulticast mode [ 610.752868][T29160] geneve0: left promiscuous mode [ 610.970361][T29160] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.980424][T29160] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.988939][T29160] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.998115][T29160] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.032846][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16263'. [ 611.055445][T29168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.068423][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16263'. [ 611.091441][T29168] bond0 (unregistering): Released all slaves [ 611.713832][T29285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16279'. [ 611.735554][T29285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 611.757742][T29285] bond8 (unregistering): Released all slaves [ 612.204713][ T3706] Process accounting resumed [ 612.929787][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 612.929806][ T29] audit: type=1326 audit(2000000181.048:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 612.959783][ T29] audit: type=1326 audit(2000000181.048:16434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.038212][ T29] audit: type=1326 audit(2000000181.048:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.062200][ T29] audit: type=1326 audit(2000000181.048:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.085899][ T29] audit: type=1326 audit(2000000181.048:16437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.109543][ T29] audit: type=1326 audit(2000000181.048:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.133266][ T29] audit: type=1326 audit(2000000181.048:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.157137][ T29] audit: type=1326 audit(2000000181.048:16440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50feb3e969 code=0x7ffc0000 [ 613.180969][ T29] audit: type=1326 audit(2000000181.048:16441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50feb40887 code=0x7ffc0000 [ 613.204558][ T29] audit: type=1326 audit(2000000181.048:16442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29473 comm="syz.2.16321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f50feb407fc code=0x7ffc0000 [ 613.252214][T29480] xt_hashlimit: size too large, truncated to 1048576 [ 613.273505][T29484] __nla_validate_parse: 2 callbacks suppressed [ 613.273526][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16326'. [ 613.526172][T29501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16330'. [ 613.542422][T29501] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.552055][T29501] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.560682][T29501] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.570042][T29501] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.580345][T29501] vxlan0: entered promiscuous mode [ 614.219517][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16340'. [ 614.662574][T29570] IPVS: Error connecting to the multicast addr [ 614.801495][T29599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16370'. [ 614.839509][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16373'. [ 615.304109][T29645] bridge0: entered allmulticast mode [ 615.593307][T29680] 9pnet: p9_errstr2errno: server reported unknown error [ 615.856971][T29727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16414'. [ 616.462425][T29763] futex_wake_op: syz.3.16426 tries to shift op by -1; fix this program [ 616.586528][T29771] xt_CT: No such helper "snmp_trap" [ 616.636080][T29776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16430'. [ 616.638406][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16429'. [ 616.713586][T29783] ip_vti0: entered promiscuous mode [ 616.719607][T29783] ip_vti0: entered allmulticast mode [ 616.805811][T29800] syz.2.16440: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 616.822173][T29800] CPU: 1 UID: 0 PID: 29800 Comm: syz.2.16440 Tainted: G W 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 616.822315][T29800] Tainted: [W]=WARN [ 616.822322][T29800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.822337][T29800] Call Trace: [ 616.822345][T29800] [ 616.822355][T29800] __dump_stack+0x1d/0x30 [ 616.822387][T29800] dump_stack_lvl+0xe8/0x140 [ 616.822409][T29800] dump_stack+0x15/0x1b [ 616.822428][T29800] warn_alloc+0x12b/0x1a0 [ 616.822491][T29800] __vmalloc_node_range_noprof+0x9c/0xe40 [ 616.822528][T29800] ? __futex_wait+0x1ff/0x260 [ 616.822565][T29800] ? __pfx_futex_wake_mark+0x10/0x10 [ 616.822620][T29800] ? __rcu_read_unlock+0x4f/0x70 [ 616.822647][T29800] ? avc_has_perm_noaudit+0x1b1/0x200 [ 616.822751][T29800] ? should_fail_ex+0x30/0x280 [ 616.822824][T29800] ? xskq_create+0x36/0xe0 [ 616.822860][T29800] vmalloc_user_noprof+0x7d/0xb0 [ 616.822906][T29800] ? xskq_create+0x80/0xe0 [ 616.823020][T29800] xskq_create+0x80/0xe0 [ 616.823082][T29800] xsk_init_queue+0x95/0xf0 [ 616.823115][T29800] xsk_setsockopt+0x3de/0x510 [ 616.823146][T29800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 616.823177][T29800] __sys_setsockopt+0x184/0x200 [ 616.823248][T29800] __x64_sys_setsockopt+0x64/0x80 [ 616.823275][T29800] x64_sys_call+0x2bd5/0x2fb0 [ 616.823361][T29800] do_syscall_64+0xd2/0x200 [ 616.823388][T29800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 616.823468][T29800] ? clear_bhb_loop+0x40/0x90 [ 616.823509][T29800] ? clear_bhb_loop+0x40/0x90 [ 616.823534][T29800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.823557][T29800] RIP: 0033:0x7f50feb3e969 [ 616.823639][T29800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.823659][T29800] RSP: 002b:00007f50fd1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 616.823680][T29800] RAX: ffffffffffffffda RBX: 00007f50fed65fa0 RCX: 00007f50feb3e969 [ 616.823757][T29800] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 616.823770][T29800] RBP: 00007f50febc0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 616.823783][T29800] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 616.823840][T29800] R13: 0000000000000000 R14: 00007f50fed65fa0 R15: 00007ffef2a8d708 [ 616.823861][T29800] [ 617.055345][T29800] Mem-Info: [ 617.060607][T29800] active_anon:35209 inactive_anon:7376 isolated_anon:0 [ 617.060607][T29800] active_file:23236 inactive_file:3004 isolated_file:0 [ 617.060607][T29800] unevictable:16857 dirty:257 writeback:0 [ 617.060607][T29800] slab_reclaimable:3773 slab_unreclaimable:256767 [ 617.060607][T29800] mapped:28710 shmem:20128 pagetables:1213 [ 617.060607][T29800] sec_pagetables:0 bounce:0 [ 617.060607][T29800] kernel_misc_reclaimable:0 [ 617.060607][T29800] free:1569930 free_pcp:9992 free_cma:0 [ 617.108164][T29800] Node 0 active_anon:140720kB inactive_anon:29504kB active_file:92944kB inactive_file:12016kB unevictable:67428kB isolated(anon):0kB isolated(file):0kB mapped:114840kB dirty:1028kB writeback:0kB shmem:80512kB writeback_tmp:0kB kernel_stack:5040kB pagetables:4852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 617.139697][T29800] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.168500][T29800] lowmem_reserve[]: 0 2882 7861 7861 [ 617.174135][T29800] Node 0 DMA32 free:2947844kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951472kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 617.190505][T29806] lo speed is unknown, defaulting to 1000 [ 617.204705][T29800] lowmem_reserve[]: 0 0 4978 4978 [ 617.215597][T29800] Node 0 Normal free:3316516kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:140836kB inactive_anon:29504kB active_file:92944kB inactive_file:12016kB unevictable:67428kB writepending:1028kB present:5242880kB managed:5098232kB mlocked:20kB bounce:0kB free_pcp:36192kB local_pcp:20788kB free_cma:0kB [ 617.248453][T29800] lowmem_reserve[]: 0 0 0 0 [ 617.253089][T29800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 617.266593][T29800] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947844kB [ 617.284256][T29800] Node 0 Normal: 2062*4kB (UME) 924*8kB (UME) 1375*16kB (UME) 481*32kB (UME) 415*64kB (UME) 313*128kB (UME) 295*256kB (UME) 242*512kB (UME) 289*1024kB (UME) 65*2048kB (UME) 627*4096kB (UM) = 3316328kB [ 617.305087][T29800] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 617.315169][T29800] 63668 total pagecache pages [ 617.320656][T29800] 135 pages in swap cache [ 617.325004][T29800] Free swap = 85388kB [ 617.329224][T29800] Total swap = 124996kB [ 617.333417][T29800] 2097051 pages RAM [ 617.337240][T29800] 0 pages HighMem/MovableOnly [ 617.343620][T29800] 80785 pages reserved [ 617.359708][T29825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16444'. [ 617.492220][T29851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29851 comm=syz.8.16453 [ 617.562304][T29865] netlink: 'syz.2.16457': attribute type 4 has an invalid length. [ 617.575746][T29865] netlink: 'syz.2.16457': attribute type 4 has an invalid length. [ 617.610645][T29869] random: crng reseeded on system resumption [ 617.814772][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 617.814791][ T29] audit: type=1326 audit(2000000186.182:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.857140][ T29] audit: type=1326 audit(2000000186.213:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.881218][ T29] audit: type=1326 audit(2000000186.213:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.905370][ T29] audit: type=1326 audit(2000000186.213:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.929092][ T29] audit: type=1326 audit(2000000186.213:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.953021][ T29] audit: type=1326 audit(2000000186.213:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 617.976848][ T29] audit: type=1326 audit(2000000186.213:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 618.000592][ T29] audit: type=1326 audit(2000000186.213:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 618.024712][ T29] audit: type=1326 audit(2000000186.213:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 618.048497][ T29] audit: type=1326 audit(2000000186.213:16780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29888 comm="syz.3.16463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 618.136738][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16465'. [ 618.310987][T29928] wireguard1: entered promiscuous mode [ 618.316596][T29928] wireguard1: entered allmulticast mode [ 618.482662][T29948] pim6reg: entered allmulticast mode [ 618.492221][T29948] pim6reg: left allmulticast mode [ 618.574651][T29961] wireguard0: entered promiscuous mode [ 618.580309][T29961] wireguard0: entered allmulticast mode [ 619.806859][T30060] tipc: Enabling of bearer rejected, failed to enable media [ 619.856775][T30070] bridge0: entered allmulticast mode [ 620.303754][T30128] netlink: 'syz.3.16542': attribute type 7 has an invalid length. [ 620.311952][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16542'. [ 620.521426][T30156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.539897][T30156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.760548][T30166] infiniband syz1: set down [ 620.765136][T30166] infiniband syz1: added syz_tun [ 620.780437][T30166] RDS/IB: syz1: added [ 620.784482][T30166] smc: adding ib device syz1 with port count 1 [ 620.790696][T30166] smc: ib device syz1 port 1 has pnetid [ 621.102637][T30176] wg2: entered promiscuous mode [ 621.107593][T30176] wg2: entered allmulticast mode [ 621.458933][T30222] wg2: entered promiscuous mode [ 621.467401][T30222] wg2: entered allmulticast mode [ 621.543384][T30230] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 621.604409][T30243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16586'. [ 621.624508][T30244] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16585'. [ 621.636057][T30246] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16587'. [ 621.852259][T30290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16602'. [ 621.939901][ T3721] Process accounting resumed [ 622.401708][T30334] netlink: zone id is out of range [ 622.406923][T30334] netlink: zone id is out of range [ 622.412083][T30334] netlink: zone id is out of range [ 622.417278][T30334] netlink: zone id is out of range [ 622.422396][T30334] netlink: zone id is out of range [ 622.427539][T30334] netlink: zone id is out of range [ 622.432664][T30334] netlink: zone id is out of range [ 622.437880][T30334] netlink: zone id is out of range [ 622.443041][T30334] netlink: zone id is out of range [ 622.448166][T30334] netlink: zone id is out of range [ 622.610510][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 622.610527][ T29] audit: type=1400 audit(2000000191.210:17460): avc: denied { name_bind } for pid=30348 comm="syz.0.16622" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 622.638916][ T29] audit: type=1400 audit(2000000191.210:17461): avc: denied { node_bind } for pid=30348 comm="syz.0.16622" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 622.666418][ T29] audit: type=1326 audit(2000000191.273:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.690302][ T29] audit: type=1326 audit(2000000191.273:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.731468][ T29] audit: type=1326 audit(2000000191.326:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.755269][ T29] audit: type=1326 audit(2000000191.326:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.779449][ T29] audit: type=1326 audit(2000000191.326:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.803233][ T29] audit: type=1326 audit(2000000191.326:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.827172][ T29] audit: type=1326 audit(2000000191.326:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 622.850979][ T29] audit: type=1326 audit(2000000191.326:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30335 comm="syz.3.16620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 623.175612][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16633'. [ 623.235732][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16633'. [ 623.285340][T30392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16637'. [ 623.437567][T30401] netlink: 'syz.0.16640': attribute type 21 has an invalid length. [ 623.488025][T30409] netlink: 'syz.4.16643': attribute type 13 has an invalid length. [ 623.498141][T30409] 0{X: refused to change device tx_queue_len [ 624.045560][T30473] veth17: left allmulticast mode [ 624.050760][T30473] bridge2: port 1(veth17) entered disabled state [ 624.060312][T30475] netlink: 'syz.2.16672': attribute type 14 has an invalid length. [ 624.079778][T30472] lo speed is unknown, defaulting to 1000 [ 624.215654][T30509] netlink: 10 bytes leftover after parsing attributes in process `syz.0.16677'. [ 624.689706][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16690'. [ 625.188513][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16708'. [ 625.206844][T30601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16708'. [ 625.287855][T13149] nci: nci_rsp_packet: unknown rsp opcode 0x116 [ 625.330520][T30628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16723'. [ 625.666452][T30659] pim6reg: entered allmulticast mode [ 625.674000][T30659] pim6reg: left allmulticast mode [ 625.771398][T30669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16730'. [ 625.913228][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16735'. [ 625.923048][T30694] netlink: 'syz.2.16735': attribute type 30 has an invalid length. [ 625.934943][T30694] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.944871][T30694] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.953231][T30694] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.962353][T30694] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.972745][T30694] netlink: 'syz.2.16735': attribute type 30 has an invalid length. [ 626.993133][T30785] block device autoloading is deprecated and will be removed. [ 627.509419][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 627.509439][ T29] audit: type=1326 audit(2000000196.354:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.3.16776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 627.568997][ T29] audit: type=1326 audit(2000000196.354:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.3.16776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 627.593583][ T29] audit: type=1326 audit(2000000196.354:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.3.16776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 627.618686][ T29] audit: type=1326 audit(2000000196.354:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.3.16776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 627.643196][ T29] audit: type=1326 audit(2000000196.354:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30816 comm="syz.3.16776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c56ae969 code=0x7ffc0000 [ 627.745700][ T29] audit: type=1400 audit(2000000196.596:17753): avc: denied { bind } for pid=30826 comm="syz.3.16780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 627.768172][ T29] audit: type=1400 audit(2000000196.596:17754): avc: denied { setopt } for pid=30826 comm="syz.3.16780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 628.110466][ T29] audit: type=1400 audit(2000000196.984:17755): avc: denied { read } for pid=30833 comm="syz.8.16783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 628.201569][ T29] audit: type=1400 audit(2000000197.047:17756): avc: denied { name_connect } for pid=30840 comm="syz.2.16786" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 628.241011][ T29] audit: type=1326 audit(2000000197.078:17757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30838 comm="syz.4.16785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83b1e969 code=0x7ffc0000 [ 628.344718][T30854] netlink: 'syz.3.16791': attribute type 12 has an invalid length. [ 628.574919][T30863] __nla_validate_parse: 3 callbacks suppressed [ 628.574968][T30863] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16796'. [ 628.616958][T30865] ip6gre3: entered allmulticast mode [ 628.754412][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16801'. [ 628.963914][T30917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16805'. [ 628.986804][T30879] bond8: entered promiscuous mode [ 628.993825][T30879] bond8: entered allmulticast mode [ 629.006925][T30879] 8021q: adding VLAN 0 to HW filter on device bond8 [ 629.098025][T30924] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 629.177770][T30930] ================================================================== [ 629.185908][T30930] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 629.194886][T30930] [ 629.197232][T30930] write to 0xffff888148466ea0 of 4 bytes by task 30928 on cpu 0: [ 629.204977][T30930] selinux_inode_permission+0x31b/0x620 [ 629.210561][T30930] security_inode_permission+0x6d/0xb0 [ 629.216074][T30930] inode_permission+0x106/0x310 [ 629.221031][T30930] link_path_walk+0x162/0x900 [ 629.225774][T30930] path_openat+0x1de/0x2170 [ 629.230309][T30930] do_filp_open+0x109/0x230 [ 629.234841][T30930] io_openat2+0x272/0x390 [ 629.239187][T30930] io_openat+0x1b/0x30 [ 629.243274][T30930] __io_issue_sqe+0xfb/0x2e0 [ 629.247893][T30930] io_issue_sqe+0x53/0x970 [ 629.252336][T30930] io_submit_sqes+0x667/0xfd0 [ 629.257040][T30930] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 629.262621][T30930] __x64_sys_io_uring_enter+0x78/0x90 [ 629.268027][T30930] x64_sys_call+0x28c8/0x2fb0 [ 629.272723][T30930] do_syscall_64+0xd2/0x200 [ 629.277257][T30930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.283178][T30930] [ 629.285607][T30930] read to 0xffff888148466ea0 of 4 bytes by task 30930 on cpu 1: [ 629.293255][T30930] selinux_inode_permission+0x2a7/0x620 [ 629.298820][T30930] security_inode_permission+0x6d/0xb0 [ 629.304322][T30930] inode_permission+0x106/0x310 [ 629.309197][T30930] link_path_walk+0x162/0x900 [ 629.313920][T30930] path_openat+0x1de/0x2170 [ 629.318448][T30930] do_filp_open+0x109/0x230 [ 629.322975][T30930] io_openat2+0x272/0x390 [ 629.327323][T30930] io_openat+0x1b/0x30 [ 629.331406][T30930] __io_issue_sqe+0xfb/0x2e0 [ 629.336043][T30930] io_issue_sqe+0x53/0x970 [ 629.340487][T30930] io_wq_submit_work+0x3f7/0x5f0 [ 629.345457][T30930] io_worker_handle_work+0x44e/0x9b0 [ 629.350790][T30930] io_wq_worker+0x22e/0x870 [ 629.355318][T30930] ret_from_fork+0xda/0x150 [ 629.359846][T30930] ret_from_fork_asm+0x1a/0x30 [ 629.364633][T30930] [ 629.366964][T30930] value changed: 0x00000001 -> 0x00000002 [ 629.372689][T30930] [ 629.375027][T30930] Reported by Kernel Concurrency Sanitizer on: [ 629.381190][T30930] CPU: 1 UID: 0 PID: 30930 Comm: iou-wrk-30928 Tainted: G W 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 629.395191][T30930] Tainted: [W]=WARN [ 629.399003][T30930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.409073][T30930] ================================================================== [ 633.847621][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 633.847638][ T29] audit: type=1400 audit(2000000203.010:17804): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=49024 daddr=10.128.0.184 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1