last executing test programs: 5.654357688s ago: executing program 2 (id=735): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket(0x10, 0x803, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2000}, 0x18) r4 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.79207658s ago: executing program 2 (id=740): open$dir(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) sendmmsg(r4, &(0x7f0000001800)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0x7ff, @remote, 0xff}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)="8252a3ca2de767a3b68022303fabdfa131b7e8833d4fa6056a3d69c07c6849fe2f949253f02af2ea4b66d1180134ba5bb10fa4493a7f8c0b43435fc005c5da5dae99702fd1968d1e1d26d187c7abbf662c708f902ec3f3e6df75782b700127a1f7bff9c0a47639a5ef496812c922cfd4914aba979af22e2d8d227f098068ce1325cafeca007f45b42b213f01ce7c1a95a32807638342099ad9dec9ef9ff2d0c53dd441a2d16221c5854737c63ff54a497b116f4779e40b19cfc5e19aebe284889cc2ec", 0xc3}, {&(0x7f00000001c0)="d27007b8db3667b9", 0x8}, {&(0x7f0000000680)="f60b6abb8f8c49c1be4e562d736d4ffa5c363f940f16bcaf31b106ca2f5fc6e6bec55c83dc7a49928bda6bc1e996ded203185d74ecf71b1c0493716cd3a03e5d4ca352246a74decfb47540ef75d5de3ad13900e6ef5d0acd8ec3d678d6e719381d5cb3c15f3e215e8f78256587ff42e1879c2dd351a9087842a8f06ec03d265cf619b34fea0d2b9676de74bfe880b22364b23396207a41f5dbc85363fc96c298b0cedf73736e32de528d5f1858d7319a78633d9aa54f340f3629cc45147d739134bb495d40da9a294a892076d2a88c8394a6567b316aecff86e57d3da960e60902d79b897879c09ffd50fabd7b63487bdee209453cd43d482160ce8b1895e3cd58976a6a111f5ebfa84f9e79ec97b19519f9b3e1ba14999066d0854810e23e8e4c28c2d374edb9448af2de42477ad88cc91e6019b85131fa2fd6b1fb93ddc5eb7d41205fd6a2e8ce8b23140431f1ec42ffc8253342aa597fe41bddb98d5aa8dad2439e75c675ef1e38a709e8051056aa492aefab1965daee7f997ab9b14a825b177ef22994d4bb5992aba7b66e83bf7800c0479ab68dc4abb8a61e1f9f8ab1690be8f0823d26e57f5f9b45bcacfac5562b04bf0a655eb998b06a8f93d2b389403ec19ebc26b192786ff62f921f712c0d02648de0ea5ef7c0fbd251cc3638d5fc1325d41a6e174a6177b2567e644a57a602c37b11c21d690907101a1d8c4ff49335757cfb736a625fc72ae1365a2bbaadcb2397e9b0c54b7ffeaa1e1a94813bda9d7c7df5ea55ee775a566f7818d61f13d0eef925f43973007b5031d38c91f6eafb11984425d220f7dcc9c293801b7987d7f6e8293146a9a1a9c28ace5315c8e34e6a84b4c08b6b17ce3a485026dd55041112d8ae8b822420d03e713947ccf71570a6aecc2562f765c9eb5a6450901d867374f3df20b0f1bfed03177b57ade10c1b52e5b20e945d7921f99694f47dc482a30ccfdfe047f4734235141ba3c633e3b3dec51f4987bd4911d5d01792149511dd6c94ef662e2ad4215f65efcf46ce2227b5b378ee16f46e9f6f913a4ce85b39ae46bbf594b00d252aca15521427e20875e236ef80f5fcbb97662972f5bee96df67210224aa87a98899470f5b4cebdef691580d7c44aef95091f20f0c22104d080f3f7ae60d754755dd79318d8ffdf21ea6b78719fb4d87150760dac37d40cd4cd0556d519621a4257aa55da2963e8d21f4160f949900552f0483c776605abe1dc014c3ec8591cd2e754825833656ba12dd3e54c9c45c7ae12ae81b9b41f58c033d1bf671d575d263b7ae6ee42167b9ac894d3c981097e7de30108486c43efe0d54086275c67144194ffb223ef9c5797c642829555cf652c1b4c1d1a2cfa707c0ea38ade8423753ce28b8f8161156fac90d09529c42288bc7fc816d4738ebfcee36e4f6906b2c2ad14bd8f30c5fe5166229ec9f91c792f6cc17087c24dda7d0d0c34ec9b4e3a8eac2626fafb267fff282e942f36d4dd20ea8fb8268f67e1dbbf54f7f56b35bc0aea675bec5628971d17f5550e65c5ab39cb28b356f86330a6e1e5657c3a8f08bee0826a939afc2b67424a4900ca3f7bc2e26d39e1af06e411b4f5b62b10bf941004fc0e62d1f8a2df485d59f73793b7d1762857cc9a2f53783b9026f9da860f4543ff44820e4baa0a53d2cb16e4393e4e39effe0e660abc9e5390b0be05102baa283f6ed05b5e35273e4b59f547b3c87ee27cdd50d90044a168aa9ef00e1879f0356b8d8564e6230fe123bc6faf417c883e273df0e0127e9ce32183afb5d9b5e175c097436e81549bdb21c8215efe632ce3a6aa5283ad8a80f573f17ea94010ed71a1d68b2b8880bd31ecd25336220b839f82f73d8c0fbb90dc94c3849665feb1414af5a7f5d635040274076fe4812a2aa95af895393f83d1cc5db14ba315d3d064963d056a1f46391bc31b55fd308bc45647abdd8858e5995eb45a6c4b72ba144b77dd2e967dc3d37bca768ef05aae2919241dff24f2fc72603c5407580fe72d2e4ebc70a5990e7562a70898988e5f8196b90df1b9e2577fd75929a02f475481a6e445d837caf38ebd95f1aa0795167d9b707ce536610916033f9897bea1d09a6537fe36833e6ce6cf3c90eb8c53df2803e4ed4639843fe443b2e2238c069ea2c4b90e2b32f68e196478f54d31be5832c477c8dfb0b17135701ca8f07dc612a5c0e258ce412005214737f686d379a63d08bdbff0b825f9fccbd477b1d8599847662a12799fa27f6820ad2aed49b8eebb310a60ca1a849504e871c471759643d73e67e9295a3790eaf36b26aa681c444092d41dff52459c54464fb0b6a337be38ea7d42a60308580ec7f3e391412892a4a4039d6d957759832772c0e1c4ad65999175107327bc101367b64ab9cd0348b255e1a4b4d3d63fef5ac8234328a04d4003014da8ede54a99c92159f3e0ab0937eedfc5f4de1bdba88474c102699ca51a7aaad34dddd84051735d37d02a757247c3bc039965d7b6a876f5356a719c9923274767fb92e48f92b70fc8c75dcb55d892c2c77436ee95e1aa1536fb5e5c6981723247243de5d9af80c911efa44644f5219e3331cf85c26dcce627049e4d69dca9964323d7dc34da20884326f254e2d76fa31af28b1e3e638aa45ddfc6fe99637cc84ece4b6e1f7026b092236fd9c2277de9b96dd7e4b7865ee5e9d0ea780ab6e268604988d203ce4118a3e6d9aebb5dbbe1baceb6be9834a28b7879f740dad4ee99ab9243cb7c5bf82fe2a463eed70ef38a0a49b2ab8edc711901edcfa1d4ad4992e60fd31a0f5bb3751d2174b464a388aeded601d37ea94e238ea5659bc054aecb0d5c72a2ef5672fa02b15c18c5bf3f97a9f83fd94aa18dc7658fdf12a2a0957f2ca933734d194f7f8ecdf9d11d30dd353821dee96366ece0aff80eb14cfbbcd79bff3f297d52779cc03e9174d904f1ee177e8547fcdcef1961cf9074e0aa2c20d4b76f3b6c91aa5cd1b3587e756dc096dd7da716c1788d03acd02d91f7a6907ecf4ce91938a3db7ff18e9e1f305edb45a8ff80bda3908ccfa110e9827e830ad6b7fa8ddc06ffbd546cbd4a91b61373a159196e81cfcea3b8ca7c3f72f62188cd5a5a713627b9e2cc78c132e5fb0cde4f63c517d8d064cdbda1573ba7c51675dcb365804395824798c3690a14e1668267923854706e55ab632cc05932ec4f20ca55e1de59e1469c31b5cfcef73f64574b38a3d4cb2517c933dcc65ec2b157344f0bd0b44fedb257d881329228c5f7823934007f7363a7e173c3b66e461120312add250729832c8845d390a417e93ada82cc7a1a1ad101c6389e2ada378f54afc43cf456c6986f3a27e98c4502bba46730b9398e26e3e387dfc74350f1a19cb428916f6137a9788756ca099c836a8a6958f2053b7efbe2b9127b50ea08a0a3902269e6e5596d245a9ebe45562e789f223d078680504ad2e5e4580a0ab46d5fa9b7c431f5a35cef56e7dfbcd0214966c4a3c0e678af99b25d3fac3fbfcb4878d52d1daf343648f6155fe01131fece43002f498a4a38c9f3673169aee215cac3cfe2b01b0b573eaf6e4f49066f1490a731db990ca0778e84d214abac0fa8cb2efd02de7b6e50261d47abd83fb436d0a4e13f99bd7b432c5fcc59c651d467d50e8a6849071a8ece161dff94376ad2ea99cf1001def986d2d15016eb382b646c9706e7df3e1d0a7144fbc8eafb42a0f6ceeb58bc7ccea16726379fb6c89ee8a3512394daedaddb3f336216acc0156d217fd1ed496f59c59d9558374ed9bbe97e26620557322fb8d1727f79500cc4c40d9292a8a0ef2de1365c3dbb6d4fba37d8a4bff7f477c2ece1f42fb798b0897f212df686346c47b61be9f303b80c4ec7c8dae494f0aaffb05375314fcd4b5ef02a23bd7e2c9e6cd8c7d5c5b670ca94af82d819b729d76650378748d3efb33f99283e6429fb1e9ddb26e26738cb8978653618758b350a43c83070514bd6dd910bb5aa7d61c8f5543eb4f3dbe80313e67a4c468095a51a0111c574f890c2d165b5ce58751da19d7888e479794ac0ee6a57220b6325f1e037dacc6f0306e5b92f6bc8c3e33e8bb30a42213b78d78f48bdf4f72b1ef62971ccbc54beffb9d149f063df258a58945960108321a626cc1b06268e52aaaf125098dcf225db2bc7f2f1a42458a92e7f724c00b998ab1da32b435319bc56ce9df7b5c65170832647b35276db40d57930839ea6cf69d3f6fbe9a22b1cd55687f595a3f12ea23fbd0c5490b8523132d7992b29fb930c88ad9fb853fe94ba46266411f8d9fc217384fcc7f80c4fa415213ea927b0231d6ca0def967adf8d1f5295af1c2f9ca7dc946f59baac1ccfbbb3572aeb9dd7a8daffe8a95a9da838ad79b10fd2c9d35c953bbfa3412b4bd4c75ca1fef52cb052da5613ea5e62f789e3a2638adf5b73852c8c3502f02faff53e6fc329257c55f9f84afb2f562fb99c5c6c1baf903316068e65017447f8e99d96bb7b4a4b4f81b2017c50aa5b0c6716a8ed45fafe82f26a1203b5e37edf1c05e63ab8d0cd66bae433cc763f3565d3c2a40896d9c7cbe45b5619519e6cb3a220414134b6c991ced880f3aefe69bf5c7ffd4af66de5fded9327f80b61056c3aaeec29ff74e5a418787da8e97c73e0edfb4368909c8e3fa6e1286d9b9647d60912663e71692f32e363adde1d3b7fed1b00f9b0999019609a553d40551677989daee572996a2a8dde3bd8081534363739cb08fabdf715e0d52acdd7d49e986d3fe4008033a7cd5f472fb80c4858ee4948dd7049ea186408a524d0194157e3e0e6eddc73644d5881b999f8b944cc995381274df1c07755b8735b0ea5a8d440018a617268eb70e37b8253c51ea64febecbd41a6e10d2b6b67a6d14b0da966f5b7e1ee7873071d838cca9a0ece029c88e0ffc2383558bc4e7a3dab2492281935f1e201f69cb3c77df9dfabe8df0ded6dbc36640fb3d851728eddbec42e183df497b1b52576909c7efe2ff80584c9bbd37e416549dd5f0902b4d6762b2a281886c626789e2b6fb56c99d93192f2a04fdb7971ce7f501decb59449eba612594252dd9118688cc8c38a765727849d0eef392965e31764dbf3994d780237b8cd6e3fbb5a5ce8728d7086cf219db597c369de81a8e45676d153256d215e67f7c8b7e9a3339a2f94348c83764a7bfeedf8e7d2b37df6306222806cf539962e6802ff78b6134cdaa51cbc152d515e5ae74f0361f83a27db3378be4ab6d8178f74b1e77b37c1849e48eff2482bba71275ef807c9fd41c590dc0dd678f701f72643d102cc28e63e320b5e7e28a46435f62fc17e38ff9e4e7e123c540a84006e00fa4345d64749cd1f8b0e23a10440df3b14c8734a6bae5a926b718f1f616841fbcb68389aff74279ff2be2c7fbd990a3291696d7e5a88ca7124f5377150f52f4af4810cf38da9b31fb406d78e846cdadf4500b2f1bf5d9e536efabeb168197f1f900e044b73d8521d06d9b1a7b1b5e5bb1135414f2db69db5791f1ba03db049fb413e0b4fd7940f22c7d0008608d0cf3c75334894f4b43d5ac9244ded1dcb77cc43f4708060626378d9cc5d0e4b21119e43ac3936b2712c37989c329cea582f263f85e760a1ec4ab81edb461d81d68023d7dda030b40531de8851540afd408a9a78a6ebf8b0db1e48f529665832810aa06b106a665d4024200272b426ac0f62db9ef4018fc35100b769831fdf8cd7c58ca73a3f329398e0ae1ca6698b57d58bece48bce2b3c4a26dd9988f50bda0b67000e57e1299ac1bc6ce8bf0c96bd68cd9c6", 0x1000}, {&(0x7f0000001680)="f606c8f6734ec733150fcde0e48d1fec929e1a976e81589665c4320f8f782f54aa3647304e3fb79ace1501f03d95be1729ce9123f7c0fec767e27e11fd329bc17659644c9253e7ba5896f434c9b810984b1a6136f30b49594cff476d185b79616360d1cba239caeb444455004cb233da9e65379d844dd659a765d68da6ba1dbf4810f59aeb5092301be780db6f9a95469198632c1997200a33ee04e87ec8fb743745e34c60314e4ca45794f789360899f76b71b806b85865b81c8bf62b36a9910799a2ac93cbe97d187fa6a5a2a926609c9fb3c442027cdc6a7a4674a4e9eb566f42837298e1efe8545d90cead4ec55cb6d01eaf2e", 0xf5}, {&(0x7f0000000300)="c0dd121bad111141a0fc903c7cb66d7a0fae35eed5de8e39eedbeea91938", 0x1e}, {&(0x7f0000000400)="1cefdc8419eb84602e6f134751bc69da73b7e45b16add60f90df6ee86630adb05335bda6c11e6d0f6c48914ed988f9a0f786a827930a816a0300769ce5cbfccaab8ba37dda884872e74b5d76608331a01aac3cbe238b94573c4507bb4d25e06cdc354f012cf7eb172486080a2067527406c088a0", 0x74}, {&(0x7f0000000480)="9bb2ec4d2bdd0b960b208734ef504e93", 0x10}, {&(0x7f0000001ec0)="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", 0xbe0}], 0x8}}], 0x1, 0x2004c849) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r7, 0x0, 0x2}, 0x18) mq_timedsend(r6, 0x0, 0x3, 0x8, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x82) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4.492730559s ago: executing program 2 (id=741): r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x800000000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x2c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0xd, 0x1, {0x0, r5, r1}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r6) socketpair(0x1, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x3513, 0x0, 0x0, 0x0, 0x0) 4.361268036s ago: executing program 2 (id=744): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0x1, 0x5, 0x11, @private1, @mcast1, 0x8041, 0x40, 0x3, 0x67}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x63, '\x00', r0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) tee(r3, 0xffffffffffffffff, 0xfffffffffffffc01, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000300)={'veth1_to_bond\x00', 0x1, 0xffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 3.265173207s ago: executing program 3 (id=747): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x10, 0x2, 0x0) setresuid(0xee00, 0xee01, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, r2, 0x0) setreuid(0xee01, 0x0) flistxattr(r1, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x80, 0x8}, {0x1}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'bridge0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x0, 0x5}, {{0x100000001}, 0x9c}, {}, 0xff}}, @common=@inet=@iprange={{0x68}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, 0x11}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'pimreg\x00', {0xf2e3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x150}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4) 3.179718988s ago: executing program 2 (id=748): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x11018, 0xfffffffffffffffe, 0x6, 0x5, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 3.056988684s ago: executing program 3 (id=749): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000400), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000100)=0x0) timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r8, 0x0, r9, 0x0, 0x7ffff000, 0x100000000000000) 3.046264726s ago: executing program 1 (id=750): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 2.999562462s ago: executing program 0 (id=752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000a33d8868fe2fd276000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x24}, 0x94) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x237}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) getpid() gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xbfffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0xa, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x10000000, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0xfffffdcc}, 0x1, 0x0, 0x0, 0x804}, 0x44800) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 2.852148111s ago: executing program 4 (id=753): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r2, &(0x7f0000000e80)=""/4072, 0xfe8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x40001) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 2.851465901s ago: executing program 2 (id=754): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x17, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x5, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x95, 0xa3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x30, 0x7, 0x7}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) inotify_init1(0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000002c0)) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x10c, r4, 0x408, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x8000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xf}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8001}, {0x5, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xf3e4aaf7ab570c51}, 0x8000) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.716867878s ago: executing program 0 (id=755): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000400080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c00)=@delchain={0x1420, 0x65, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0xf, 0xffff}, {0xc, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x13e4, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x5e}, @TCA_U32_ACT={0x2f4, 0x7, [@m_sample={0xc8, 0x1b, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffbff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x8, 0x1, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}]}, {0x6b, 0x6, "44c7c613907537ebd610cfb1c9ae022ef8649b4c2b27496be4e5cc1b5dbed9de783b92da8865e84adfcc46751b1c190ccee199722ca84bcaa849fe2e70fdcfb1d3684f24045f07a30c44562aeb12aaaf4a43d1381d4a5eca29d1bfea56c7cb133f2d4fa367acf6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xa8, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xffffffff, 0xfffffffffffffff8, 0x83b, 0x10}, 0x10}}]}, {0x60, 0x6, "157d96bab58688193e7ce48d7d4111e201dec4ad7080aec3c0f584b8385291124acfa0b389ec9dd53c1764edd5bfff0998d4290481dcd3a415857de5cec2065af22b0b95a00044f82114a9b720e317d0e51a515fbd67dfa796ba726e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xe0, 0x15, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xaa, 0x6, "465b9fffb2fb65cae38c41522998e39593821471de031b3c4671f563ee458a076efdc80eb9303871914b3dc48a77fe655ef9715025381ccc58c5f3b49457270f4551d4d83b9d884f616cf29662589896d15842658b5f68e987278f9dbc589ef8407d585731ae691b43a96f0daef7cbb60b796f25fc08001015ddd7e73309bae9429525a54e0d320413aa3bbc1d57a14ed81badbb1b7e3ff450d390660c3507692c4e54f81587"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x44, 0x9, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x11, 0x6, "ba0a10dc57cd4003d29960bc9b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x5c, 0x11, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x645}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x8, 0x6, "246cc6da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xcf}, @TCA_U32_POLICE={0xcb8, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffffe, 0x8, 0xba, 0x0, 0x10001, 0x7, 0x8d, 0x932, 0x5, 0xb, 0x4, 0x45, 0x4, 0x2, 0x6, 0x1, 0x834, 0x6a, 0x0, 0x4, 0x6, 0xff, 0x5, 0x2, 0x75ac, 0x80000000, 0x9, 0x1, 0xa, 0x2, 0x2, 0xa, 0x9, 0x80000000, 0x3, 0x2, 0x2, 0x5, 0x0, 0x0, 0x8, 0x2, 0xc, 0xfffffff8, 0x8, 0x7, 0xffffff01, 0x40, 0xa8, 0x5, 0x8, 0x4f, 0x1, 0x54, 0xe, 0xe8, 0x56, 0x0, 0x8001, 0xa, 0x3, 0x8001, 0x2, 0x4, 0x1, 0x3, 0x1, 0x32, 0x2, 0x2, 0x8001, 0x6, 0x6a, 0x7, 0x9, 0xea28, 0x5, 0x0, 0x1, 0x19f, 0x3, 0x8, 0x5, 0xffff0000, 0x8, 0xa, 0x2, 0x2, 0x9, 0x9, 0x9, 0x5, 0x2575, 0x3, 0x6, 0x4, 0x400, 0x7, 0x3, 0x4, 0x9, 0x6, 0x57, 0x97, 0x10, 0x10001, 0x7ff, 0x80, 0xbf, 0x7, 0xfffffbff, 0x6e5, 0x8001, 0xd5c3, 0x5, 0x5, 0x5, 0x8, 0x7, 0x0, 0x400, 0x7fff, 0x2, 0x2, 0xff, 0x0, 0x2, 0x2, 0x8, 0x8, 0xe5c3, 0x3, 0x80000001, 0x8, 0x4, 0x8, 0xd, 0x2, 0x9, 0x4075, 0x3, 0x76bd, 0x6f, 0x9, 0xffffffff, 0x0, 0x5, 0x4, 0x0, 0x6, 0x1, 0x9, 0x7, 0x800, 0x9, 0x7, 0x48274ed5, 0xce2, 0x1, 0x9, 0x7, 0xb, 0x200, 0x3, 0x4, 0x9, 0xa, 0x10000, 0x9, 0xd72, 0xd, 0x4, 0x3, 0x9, 0x10000, 0x3, 0x4, 0x3, 0x8, 0x9, 0x6, 0x4, 0x401, 0x7fffffff, 0xfffffff8, 0x80000001, 0x6, 0x10000, 0xe, 0x8000, 0x9, 0x4, 0x3, 0x9, 0xd0d9, 0x7ff, 0xfffffffe, 0xe4, 0x7f, 0x8000, 0x2, 0x1000, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7c, 0xd, 0xd01, 0x3, 0x80, 0x8b, 0x8001, 0x4, 0xe, 0x80, 0x1ff, 0x7, 0xeb, 0xcbc, 0x10000, 0xa, 0x6, 0x1, 0x9146, 0x9, 0x1, 0x8, 0x5, 0xffff, 0x2, 0x6, 0x4d6, 0x1, 0x9, 0x2, 0x4, 0x6923, 0x0, 0x2, 0x163, 0x8f3, 0x3a, 0x83ad, 0xbb3, 0x4, 0x8001, 0x1, 0x6, 0xbcfa, 0x5, 0x8001, 0xa065, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x67, 0x40, 0x1, 0x50, 0x9, 0xcb5, 0x0, 0x3, 0x5, 0x3, 0x80, 0x0, 0xacb, 0x7, 0x9, 0x2, 0x2, 0x25, 0x4, 0x8, 0x3, 0xf7b, 0x40, 0xf, 0x80000000, 0xd284, 0x4e28, 0x2, 0x4a, 0x5, 0x4, 0x1, 0x15ba, 0x8, 0x6, 0x7000, 0x7, 0x1, 0xffffffff, 0x6, 0x7, 0x2, 0xfffffff8, 0x3, 0x25, 0x6, 0xfff, 0x5, 0x3, 0x1, 0x7f, 0x3b, 0xe, 0x6, 0x1, 0x9, 0x2, 0x3, 0xfffffffe, 0xe, 0xc9, 0x5, 0x7fffffff, 0xfffffff9, 0x1, 0xce6, 0xd82, 0x70000000, 0xfff, 0xffffac72, 0x1, 0x5, 0x7, 0x2, 0x100, 0x5, 0x3, 0x3, 0x110, 0x7, 0x9, 0x6, 0x2, 0x200, 0xfff, 0xfffffa5c, 0x3ff, 0x3, 0xc4, 0x7, 0x0, 0xb23, 0x5, 0xa9d, 0x8, 0xffffffff, 0x1, 0x80, 0x8, 0x80000001, 0x5, 0x4, 0x3, 0x2, 0x7f, 0x7, 0xa, 0x0, 0x1, 0x6, 0x1c000000, 0x5, 0x1, 0x7f, 0x0, 0x9, 0x254e, 0x7, 0x9, 0x50, 0x6, 0x8, 0xeb6e, 0xf, 0x100, 0x100, 0x800, 0x723, 0x22, 0x5, 0x950, 0x5, 0x5, 0x2, 0x8, 0xddc3, 0x7, 0x2, 0xd86c, 0x22, 0x9, 0x4, 0x9, 0xe, 0x4, 0x7fffffff, 0x9, 0xfffffffb, 0x80, 0x4, 0x2, 0xff, 0x7, 0x401, 0xfffffffa, 0x1000, 0x3, 0xbf, 0x7, 0x651, 0x4, 0x80000001, 0x6, 0xda, 0x6, 0x95f, 0x5, 0xe, 0x54a, 0xb8, 0x0, 0xc0, 0x6, 0x8001, 0x1, 0x3, 0xcdad, 0x6, 0x8, 0xffffffff, 0x4, 0x800, 0xb, 0x6, 0x2, 0x2c, 0xffff, 0xf, 0x1, 0xfffffddb, 0x3, 0xe2, 0x6b05, 0x9c2, 0x0, 0x2b, 0x7bd4, 0x24f, 0xfffffffa, 0x6, 0xd411, 0x3, 0x8, 0x2, 0x80, 0xfffffffe, 0x4, 0x9, 0x7, 0x7fffffff, 0x9, 0x8, 0x200, 0x7ff, 0x0, 0x7, 0x5f, 0xfffffffb, 0x8, 0x9, 0x2, 0x5, 0x3, 0x3a, 0x9, 0x2, 0x304, 0x4, 0x9, 0x15, 0x413, 0x7, 0x7, 0x8, 0x49b, 0x925, 0x7ff, 0x7ff, 0x0, 0x9, 0xfffffffa, 0xffffffff, 0x470, 0x1, 0x2, 0x0, 0x6, 0x6, 0xff, 0xfffffff2, 0x85b, 0x6, 0x3, 0x9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x816}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x65a, 0x4, 0x6, 0x97d, 0x0, 0x79, 0x4, 0x581d, 0x1, 0x200000, 0x400, 0xee4, 0x10000, 0x6, 0xea, 0x1, 0x0, 0x7, 0x4, 0xfff, 0x200, 0xaf, 0x101, 0xffff, 0xc93, 0x10000, 0x3, 0x40, 0x1dfe91c5, 0x6, 0x80, 0x5, 0x5c0, 0x800000, 0x8, 0x9, 0x7fffffff, 0xff2b, 0x8, 0x0, 0x0, 0xb3, 0x8, 0x10001, 0x10001, 0x5, 0x8, 0x2, 0x8, 0x10001, 0x1ff, 0x2, 0x5, 0x6, 0x5, 0x0, 0x685c, 0x5, 0x9, 0x4, 0xfffffffd, 0x10, 0x2, 0x41, 0x5, 0x4, 0x2, 0x5, 0x9, 0x101, 0x9, 0x9, 0x401, 0x2, 0xffffffff, 0x8, 0x5, 0x8001, 0x0, 0x4, 0x7fff, 0x70, 0x2, 0x8001, 0x3, 0x2, 0x100, 0x3, 0x0, 0x2, 0x0, 0x4d9, 0x1, 0x2, 0x52, 0x7ff, 0x1, 0x0, 0x6be, 0x7, 0x3, 0xe6f2, 0x8, 0x4, 0x5, 0x971, 0x7, 0xaf60, 0x0, 0x2, 0x35, 0x9, 0x0, 0xffff, 0x2, 0xa13, 0x7, 0xa88, 0x1, 0xd, 0x7, 0x80, 0x9, 0x7f, 0x0, 0xffffffff, 0x7, 0xe0000000, 0x5, 0xe2, 0x5, 0x4, 0xf, 0xcf5, 0xffff, 0x9, 0x37, 0x2, 0x7, 0x9, 0x90, 0x6817, 0xf2, 0x3, 0x0, 0x101, 0x3, 0xe, 0x7, 0x8, 0xbf6, 0xb, 0x1, 0x3, 0x5, 0x4, 0x6, 0x0, 0x3, 0xc5a1, 0x7, 0x0, 0x10000, 0xc864, 0xfffffe00, 0x7, 0x480, 0x3, 0x3000000, 0x3, 0xbb8, 0x8000, 0x3180, 0x4, 0xcd35, 0x1, 0x6, 0x7fff, 0x7e, 0x3ff, 0x4, 0x1dcef53f, 0x5d8, 0xc0, 0x6, 0x89e, 0xfec, 0x1, 0x7, 0xfffffffe, 0x7fff, 0x7b0, 0x800, 0x5, 0x1, 0x0, 0xe515, 0x100, 0x5, 0x4, 0x0, 0x8, 0x4, 0x8, 0x9, 0x76, 0x200, 0x1ff, 0x800, 0x7, 0x100, 0xada7, 0x3, 0x6, 0x8, 0x280000, 0x5, 0x5, 0x10, 0x3, 0x10001, 0x200, 0x3, 0x2, 0x4, 0x3, 0xff, 0x4684, 0x934, 0xac0b, 0x7ff, 0xb38d, 0x8, 0x5, 0xffff, 0x96, 0x8000, 0x44f, 0x7fff, 0xfffffffd, 0x2, 0x5, 0x8, 0x4, 0xffffffff, 0x5a0d, 0x10000, 0x0, 0x2, 0xffff6b41, 0x9, 0x3, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x5, 0x96, 0x7, {0xfb, 0x2, 0x46e8, 0x4, 0x7, 0x6}, {0x9, 0x2, 0x4, 0x8, 0x6, 0x1}, 0x8, 0x5, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2f2c, 0x1, 0x40, 0x8, 0x2, {0x5, 0x1, 0x0, 0x8, 0x5, 0x3d}, {0x1, 0x1, 0xffc0, 0x4, 0x5, 0xfff}, 0x8, 0xa0, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}]}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x2, 0x3, 0x0, 0x9, 0x7fffffff, 0x3, 0x2, 0x2, 0xca, 0xfffffff5, 0xb, 0x9, 0x2, 0xfff, 0x1, 0x2, 0x6, 0x1, 0x8bde, 0x5, 0x8, 0x4, 0x2, 0xc, 0x6, 0x3, 0x0, 0x4, 0xffff, 0xfffffffd, 0x80, 0x8, 0x3, 0x2, 0x2, 0x1, 0x7ff, 0x7, 0xffff, 0x46a, 0x9, 0x80000000, 0x3, 0x5, 0x6, 0x3516, 0x69abff2c, 0x9, 0x38, 0xfffffffc, 0x9, 0x7, 0xb2d, 0x3120, 0x826, 0x2, 0x8, 0x7fffffff, 0x800, 0x4, 0x6, 0x5, 0x4, 0xd2d, 0x5, 0x5, 0x909, 0x2, 0x2e3, 0x10, 0x7, 0x6, 0x2, 0x2, 0x1, 0x7f, 0x7, 0xa, 0x5, 0x5, 0x8, 0x100, 0x6a, 0x8, 0x705b, 0x39b6, 0x6, 0x1, 0x1, 0x1, 0x6, 0x6, 0x3, 0x3, 0x9, 0x3, 0x5, 0x5, 0x401, 0x1, 0x8001, 0x10001, 0x4, 0xffffffff, 0xf265, 0x2, 0xfffffff7, 0xa8, 0xee36, 0x7, 0x8, 0xfdd, 0x0, 0x7, 0xad7, 0x1cb6, 0x208, 0x8, 0x2, 0x6b76faec, 0x6, 0x1ff, 0x0, 0x1000, 0x7, 0x8, 0x400, 0xfffffffc, 0xf, 0x8, 0x0, 0x1, 0xb8, 0xb, 0x1ff, 0x10, 0x8, 0x10001, 0x5, 0x9, 0xfff, 0xfffffffa, 0x7, 0x1, 0x6, 0x6, 0x9, 0xc, 0x5, 0x7, 0x6, 0x1, 0x1306, 0x3, 0x2, 0x395f, 0x2, 0x8, 0x9, 0x6, 0x6b2, 0x4, 0x9, 0x4, 0x3, 0x5, 0x5, 0x5, 0x0, 0x5c, 0x9, 0x2, 0x6b19, 0x8, 0x1, 0x9, 0x6, 0xfffffffd, 0x9, 0x6, 0x7c40, 0x2, 0x6, 0x3, 0x7, 0x8, 0x8, 0x3, 0x7fffffff, 0x2, 0x3, 0x1, 0x401, 0x7, 0x80000000, 0x100, 0x6, 0xca381594, 0x7, 0x9, 0x9, 0x608, 0x1, 0x7, 0x80, 0x2, 0x100, 0x80000001, 0x7ff, 0x4, 0x1, 0x3, 0xff, 0x800, 0x5, 0x5, 0xdf8, 0x5, 0x401, 0x8, 0xffffffff, 0x800, 0x2, 0x3, 0x5, 0x1000, 0x9, 0x5, 0x6, 0x1c7, 0x4, 0xe8b00000, 0x20000, 0x9, 0x7, 0x9, 0x6c, 0x9, 0x400, 0x7, 0x6, 0x9, 0x7, 0x3, 0x3, 0x401, 0x6, 0x1, 0x401, 0xffffffdd, 0x73, 0xd92, 0xdca, 0xc0]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}]}, @TCA_U32_LINK={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xcb}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x1420}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201030000000000000000000a000000180001801400018008000100ac141422085df9000200ac146401f2117f098f09ca77368308c9243ffde913f9104aa741658b4bb02b971ad4b8633b6805b60fc0b0ae219a79c95539096135a1b8873d78ac9e2a43e80719636a198e36cae614784562406dadccfeeb3c3249691ce1a026b6762f298319422551352a5d73bf2d2aaabc0a2fb05203e1f10c7595ff33f3047beb5a5b10c88b7fce15713427bcecf464d64b57c5a96f49e3"], 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000004c9e357fb299c997af00800d03000000000000000000000905000000004000000000000a02000000000000000000000b000000000000000000"], 0x0, 0x56}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) 1.523638003s ago: executing program 0 (id=756): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}, @nested={0x4, 0x84}]}, 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x1ff}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x460}, {0x7ff}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x800000, 0x4}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x38a}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x2}, {0x4, 0xc000000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x202, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000001}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5, 0x0, 0x0, 0xfffffffc}, {0x0, 0x9}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) 1.431346015s ago: executing program 1 (id=757): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\a'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x7f) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r0, 0x6, 0x1, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0]}, 0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r4, 0x5) r5 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.429952005s ago: executing program 4 (id=758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "7cff0000080094cf", "c11d9a1e03550000000000000fd7aab9", ']G\x00', "5e33931677e0f2d7"}, 0x28) sendto$inet6(r8, 0x0, 0x0, 0x20004880, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 1.426303405s ago: executing program 3 (id=759): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) timer_create(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60, 0x80800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.372976652s ago: executing program 3 (id=760): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket(0x10, 0x803, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2000}, 0x18) r4 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 1.343606266s ago: executing program 1 (id=761): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40008d0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@user_xattr}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7ba, &(0x7f0000002040)="$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") socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000563000/0x1000)=nil, 0x1000, 0x100000b, 0x4082172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="d389fae4d4cdf3110716d671baf2c2ecdc12eccbf68b3481d99544a445344f91fdee9e300c94ac6360e45da70166980515f7f196b0179b2e9dc1eaaa4f74bcb0057b4ddeb54aff4b9ac354ba5ccf53a0e85febe0f49f34cfdb1e6d9bcc9209844eea617127ef9e9aa2709b61a8490c3548f548f8a12247665f530c66e410e514f1c29e6cf908c0e82ad9dd2c7b8a33979ea0e2b8813249ba9c2767e3884c7209a7573a9692fbe2874d0000deed31904845160f367cd1abe818dbec59240d184f2823", @ANYBLOB="180000000000040000000000000000001811", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x729c16dc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0xd20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1001219, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.216442583s ago: executing program 0 (id=762): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2a7203d3}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400000001000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="19"], 0x48) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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"/318], 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.020085458s ago: executing program 0 (id=763): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket(0x10, 0x803, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2000}, 0x18) r4 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 850.29168ms ago: executing program 3 (id=764): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket(0x10, 0x803, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 701.722479ms ago: executing program 0 (id=765): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 482.893378ms ago: executing program 4 (id=766): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r5) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x2, &(0x7f0000000640)=""/177, 0xb1) socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000180001002abd7000000000001d010300150004000100008000010000a67494fcd3a42289030000001e010600035800000071ec6d721744cd5200080000f8cfcad4c4ec6511fe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6167281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd2b3de76f59264c9f63aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7f3b740e105d00118fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c000000000000000000000000025c8d586b2a88d81866930fca15c8a95d29e5b2ea0000"], 0x14c}}, 0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000059f5d7929fac91c73faa4f9cf55cde34d8fd4a3f3883a843b975b9e394ee59f568240700f1bd0b4ccb23e3be9dc3106e04d8fd4b4479040034e62cad726671500b3d2b4ba7195945c715e153aa1dc397a118c51f21777b45fb8210235fd21751176d02ccee7883f16aa989ec11c8fc6f2fa783356a8ddb1f095d5c73d874b137544f1fb79a4073c610e72eef9045d908221fd365ad91ed30000000000000"], 0x48) 324.109228ms ago: executing program 1 (id=767): socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0xfd0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) wait4(0x0, &(0x7f00000003c0), 0x80000001, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) 303.65732ms ago: executing program 1 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800124000"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) unshare(0x68040200) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="7379730f74656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c6962b5c9656c6570617468792f6d697373696f6e2d636f6e74726f6c2d35203030"], 0x58) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) flock(r6, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0xffffffff, @private0, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x40, 0x6, {{0x37, 0x4, 0x0, 0x0, 0xdc, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0xa1, [@broadcast, @multicast1, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast]}, @timestamp={0x44, 0x14, 0x5e, 0x0, 0xa, [0x9, 0x4, 0x8, 0x4bbd]}, @noop, @rr={0x7, 0x7, 0xb7, [@remote]}, @cipso={0x86, 0x19, 0x1, [{0x0, 0x9, "49f1b5bd1e9db6"}, {0x5, 0x8, "15b7092f0530"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0x3c, 0x59, 0x3, 0x6, [{@broadcast, 0x51}, {@rand_addr=0x64010101}, {@empty, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8580}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4160}, {@multicast1, 0x9}]}, @timestamp={0x44, 0x8, 0x28, 0x0, 0x6, [0x1]}, @timestamp={0x44, 0x10, 0x46, 0x0, 0x7, [0x6, 0x6fc, 0x5]}, @ssrr={0x89, 0x17, 0x7e, [@private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x94, 0xb, "3189526e0d62d57078"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="20002abd7000fcdbdf250600000088000180080003000000000008000100", @ANYRES32, @ANYBLOB="14000200766c616e3100000000000000000000001400020076657468305f766c616e00000000000014000200626f6e645f736c6176655f31000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f627269646765002000018008000100", @ANYRES32=r10, @ANYBLOB="140002007465616d5f736c6176655f3100000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10004840}, 0x4000044) 133.474242ms ago: executing program 3 (id=769): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r2, &(0x7f0000000e80)=""/4072, 0xfe8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x40001) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 132.958703ms ago: executing program 4 (id=770): syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x0, 0x3c, 0x0, @dev, @local}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x21) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40020000c4783a375e8d1b2efe2ed793c8b7e14f5670a7d38b9588d7f10fcbafce910fa8fb5ed9bf66d0143f9dc9c7510acaaabb0ca0311db66a062cca1d90fe0b97befa477a6054023073aa86151eb5c888421ba1f5b3e79a645c0bc757ecf0c5d638d81d2dc155196ed20c6eecfc2cc29f0a30c5ac3d5d668df21a8d8507df3f4e074f9080175b8614c9702f9e6b9bb757f78b5fe2ef9ad03aa311", @ANYRES16=r4, @ANYBLOB="02002bbd7000fedbdf25020000002c00018008000900160000000800050002000000080009003000000007000600727200000800060077727200"], 0x40}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 53.621283ms ago: executing program 4 (id=771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) timer_create(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60, 0x80800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 13.086498ms ago: executing program 4 (id=772): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2a7203d3}, 0x18) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000fd89000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000000000000000002b9200"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0278970004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="03000000020000000100"/21], 0x50) tgkill(r4, r4, 0x21) wait4(r4, 0x0, 0x40000000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xa, @broadcast, 0x4e23, 0x1, 'wrr\x00', 0x0, 0x0, 0x30}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2240, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000600)) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r4], 0x3c}}, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4e, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) kernel console output (not intermixed with test programs): 278622.255:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 45.144823][ T29] audit: type=1326 audit(1768278622.255:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 45.168083][ T29] audit: type=1326 audit(1768278622.255:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 45.217700][ T3793] loop0: detected capacity change from 0 to 512 [ 45.247860][ T3776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.282907][ T3788] lo speed is unknown, defaulting to 1000 [ 45.319227][ T3786] veth1_vlan: left promiscuous mode [ 45.329652][ T3786] batman_adv: batadv0: Adding interface: veth1_vlan [ 45.336833][ T3786] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.379867][ T3786] batman_adv: batadv0: Interface activated: veth1_vlan [ 45.447082][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.455771][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.541946][ T3806] EXT4-fs: inline encryption not supported [ 45.551175][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 45.559615][ T3793] EXT4-fs (loop0): 1 orphan inode deleted [ 45.566871][ T3806] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.577397][ T411] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 45.591020][ T3806] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.80: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.613871][ T3806] EXT4-fs (loop2): Remounting filesystem read-only [ 45.627453][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.641125][ T3806] EXT4-fs (loop2): 1 orphan inode deleted [ 45.647314][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.661731][ T3793] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.709733][ T3811] set_capacity_and_notify: 1 callbacks suppressed [ 45.709825][ T3811] loop3: detected capacity change from 0 to 1024 [ 45.749704][ T3811] EXT4-fs: Ignoring removed orlov option [ 45.770179][ T3811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.829982][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.923231][ T3806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3806 comm=syz.2.80 [ 45.937270][ T3817] loop0: detected capacity change from 0 to 128 [ 45.975722][ T3819] lo speed is unknown, defaulting to 1000 [ 46.055446][ T3820] syz.0.82: attempt to access beyond end of device [ 46.055446][ T3820] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 46.106220][ T3820] syz.0.82: attempt to access beyond end of device [ 46.106220][ T3820] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 46.151053][ T3820] syz.0.82: attempt to access beyond end of device [ 46.151053][ T3820] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 46.199727][ T3820] syz.0.82: attempt to access beyond end of device [ 46.199727][ T3820] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 46.228656][ T3820] syz.0.82: attempt to access beyond end of device [ 46.228656][ T3820] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 46.256402][ T3820] syz.0.82: attempt to access beyond end of device [ 46.256402][ T3820] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 46.308081][ T3820] syz.0.82: attempt to access beyond end of device [ 46.308081][ T3820] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 46.328581][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.346615][ T3820] syz.0.82: attempt to access beyond end of device [ 46.346615][ T3820] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 46.385914][ T3820] syz.0.82: attempt to access beyond end of device [ 46.385914][ T3820] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 47.011647][ T3820] syz.0.82: attempt to access beyond end of device [ 47.011647][ T3820] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 47.189634][ T3834] netlink: 19 bytes leftover after parsing attributes in process `syz.1.86'. [ 47.366410][ T3841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 47.441565][ T3845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3845 comm=syz.3.90 [ 47.758075][ T3853] lo speed is unknown, defaulting to 1000 [ 47.862697][ T3853] loop4: detected capacity change from 0 to 1024 [ 47.881167][ T3853] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 48.006886][ T3860] SELinux: Context system_u:object is not valid (left unmapped). [ 48.043755][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.053927][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 48.142027][ T3866] SELinux: Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 48.191845][ T3871] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 48.200164][ T3871] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 48.243651][ T3873] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 48.328246][ T3878] gretap1: entered promiscuous mode [ 48.484532][ T3882] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 48.491207][ T3882] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.499024][ T3882] vhci_hcd vhci_hcd.0: Device attached [ 48.513026][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 48.525123][ T3888] 9p: Bad value for 'wfdno' [ 48.550974][ T3888] loop2: detected capacity change from 0 to 2048 [ 48.945893][ T3890] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 48.975409][ T3888] GPT:first_usable_lbas don't match. [ 48.980768][ T3888] GPT:34 != 290 [ 48.984321][ T3888] GPT: Use GNU Parted to correct GPT errors. [ 48.990537][ T3888] loop2: p1 p2 p3 [ 49.054914][ T3425] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 49.064473][ T3008] GPT:first_usable_lbas don't match. [ 49.069851][ T3008] GPT:34 != 290 [ 49.073364][ T3008] GPT: Use GNU Parted to correct GPT errors. [ 49.079562][ T3008] loop2: p1 p2 p3 [ 49.117331][ T3425] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 49.130482][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 49.141625][ T3883] vhci_hcd: connection reset by peer [ 49.151188][ T1624] vhci_hcd vhci_hcd.1: stop threads [ 49.156491][ T1624] vhci_hcd vhci_hcd.1: release socket [ 49.161912][ T1624] vhci_hcd vhci_hcd.1: disconnect device [ 49.171295][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 49.205270][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 49.215531][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 49.353553][ T3901] loop0: detected capacity change from 0 to 1024 [ 49.373431][ T3903] loop3: detected capacity change from 0 to 1024 [ 49.376880][ T3901] EXT4-fs: Ignoring removed orlov option [ 49.397785][ T3903] loop3: detected capacity change from 0 to 1024 [ 49.426055][ T3901] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 49.444579][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.504376][ T3901] loop0: detected capacity change from 0 to 128 [ 49.520031][ T3901] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 49.540595][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.579243][ T3911] loop3: detected capacity change from 0 to 512 [ 49.587081][ T3911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.607497][ T3911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.628778][ T3911] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.710880][ T3922] netlink: 'syz.1.111': attribute type 7 has an invalid length. [ 49.720894][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.757770][ T3922] ALSA: seq fatal error: cannot create timer (-19) [ 49.838205][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 49.838220][ T29] audit: type=1400 audit(1768278627.195:2760): avc: denied { setopt } for pid=3923 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.877522][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 49.957306][ T3939] Zero length message leads to an empty skb [ 49.968040][ T29] audit: type=1400 audit(1768278627.325:2761): avc: denied { name_bind } for pid=3938 comm="syz.4.114" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.007412][ T3939] loop1: detected capacity change from 0 to 1024 [ 50.028806][ T3939] EXT4-fs: Ignoring removed orlov option [ 50.038557][ T29] audit: type=1326 audit(1768278627.355:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 50.062118][ T29] audit: type=1326 audit(1768278627.355:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 50.085551][ T29] audit: type=1326 audit(1768278627.355:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 50.100154][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.109003][ T29] audit: type=1326 audit(1768278627.355:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46f9baf783 code=0x7ffc0000 [ 50.109038][ T29] audit: type=1326 audit(1768278627.355:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f46f9bae1ff code=0x7ffc0000 [ 50.167802][ T29] audit: type=1326 audit(1768278627.365:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f46f9baf7d7 code=0x7ffc0000 [ 50.191207][ T29] audit: type=1326 audit(1768278627.365:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46f9badf90 code=0x7ffc0000 [ 50.214626][ T29] audit: type=1326 audit(1768278627.365:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46f9baf34b code=0x7ffc0000 [ 50.301977][ T3952] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.440919][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 50.451583][ T3952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.494979][ T3952] EXT4-fs (loop2): 1 truncate cleaned up [ 50.534615][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.612456][ T3972] lo speed is unknown, defaulting to 1000 [ 50.703833][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.937762][ T3979] set_capacity_and_notify: 1 callbacks suppressed [ 50.937833][ T3979] loop4: detected capacity change from 0 to 1024 [ 50.969023][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.996165][ T3982] lo speed is unknown, defaulting to 1000 [ 51.011142][ T3985] netlink: 'syz.3.121': attribute type 13 has an invalid length. [ 51.063619][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 51.366416][ T2675] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.427456][ T3987] lo speed is unknown, defaulting to 1000 [ 51.510988][ T3997] lo speed is unknown, defaulting to 1000 [ 51.916534][ T2675] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.934946][ T2675] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.953365][ T2675] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.022981][ T4003] Driver unsupported XDP return value 0 on prog (id 119) dev N/A, expect packet loss! [ 52.128237][ T4003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 52.320412][ T4017] ip6t_rpfilter: unknown options [ 52.453609][ T4020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.537487][ T4021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.556749][ T4020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.638632][ T4020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.681453][ T4020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.734617][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746545][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.758161][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.770057][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.818896][ T4024] loop1: detected capacity change from 0 to 1024 [ 52.829969][ T4024] EXT4-fs: test_dummy_encryption option not supported [ 52.846032][ T4024] loop1: detected capacity change from 0 to 512 [ 52.877647][ T4026] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 52.952762][ T4026] loop4: detected capacity change from 0 to 512 [ 52.991284][ T4026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.022218][ T4032] lo speed is unknown, defaulting to 1000 [ 53.038114][ T4032] lo speed is unknown, defaulting to 1000 [ 53.055129][ T4026] EXT4-fs (loop4): 1 truncate cleaned up [ 53.064948][ T4032] lo speed is unknown, defaulting to 1000 [ 53.110759][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.162586][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 53.166935][ T4032] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.210410][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 53.291796][ T4032] lo speed is unknown, defaulting to 1000 [ 53.305467][ T4032] lo speed is unknown, defaulting to 1000 [ 53.318125][ T4032] lo speed is unknown, defaulting to 1000 [ 53.333303][ T4032] lo speed is unknown, defaulting to 1000 [ 53.349122][ T4032] lo speed is unknown, defaulting to 1000 [ 53.424250][ T4048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4048 comm=syz.1.141 [ 53.456852][ T4050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 53.530899][ T4054] loop2: detected capacity change from 0 to 512 [ 53.572738][ T4054] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.140: bg 0: block 393: padding at end of block bitmap is not set [ 53.640708][ T4060] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 53.649003][ T4060] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 53.669779][ T4054] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 53.704015][ T3426] IPVS: starting estimator thread 0... [ 53.731489][ T4054] EXT4-fs (loop2): 2 truncates cleaned up [ 53.741361][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.744263][ T4062] loop1: detected capacity change from 0 to 512 [ 53.769678][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.807542][ T4062] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 53.817926][ T4062] EXT4-fs (loop1): bad block size 8192 [ 53.831696][ T4061] IPVS: using max 1776 ests per chain, 88800 per kthread [ 53.909599][ T4068] loop3: detected capacity change from 0 to 512 [ 53.948227][ T4068] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 53.994153][ T4068] loop3: detected capacity change from 0 to 512 [ 54.037268][ T4068] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 54.055545][ T4068] EXT4-fs (loop3): mount failed [ 54.165360][ T3425] usb 3-1: enqueue for inactive port 0 [ 54.170934][ T3425] usb 3-1: enqueue for inactive port 0 [ 54.191103][ T4068] loop3: detected capacity change from 0 to 512 [ 54.220082][ T4068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.255258][ T4068] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.258474][ T3425] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 54.296668][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.448083][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.500496][ T4086] loop2: detected capacity change from 0 to 1024 [ 54.541775][ T4086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.624698][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.758353][ T4103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.767161][ T4103] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.797302][ T4103] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.155: Allocating blocks 41-42 which overlap fs metadata [ 54.811423][ T4103] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.155: Allocating blocks 41-42 which overlap fs metadata [ 54.825658][ T4103] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.155: Failed to acquire dquot type 1 [ 54.837143][ T4103] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 54.851713][ T4103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.155: corrupted inode contents [ 54.863963][ T4103] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.155: mark_inode_dirty error [ 54.876342][ T4103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.155: corrupted inode contents [ 54.888682][ T4103] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.155: mark_inode_dirty error [ 54.900517][ T4103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.155: corrupted inode contents [ 54.912797][ T4103] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 54.923006][ T4103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.155: corrupted inode contents [ 54.935529][ T4103] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.155: mark_inode_dirty error [ 54.947022][ T4103] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 54.956516][ T4103] EXT4-fs (loop4): 1 truncate cleaned up [ 54.962812][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.977037][ T4103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.999019][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 54.999117][ T29] audit: type=1400 audit(1768278632.355:3135): avc: denied { remount } for pid=4102 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.027317][ T4103] syz.4.155 (4103) used greatest stack depth: 10120 bytes left [ 55.041059][ T4095] netlink: 14 bytes leftover after parsing attributes in process `syz.0.153'. [ 55.111200][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 55.154604][ T29] audit: type=1400 audit(1768278632.505:3136): avc: denied { create } for pid=4108 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.176336][ T29] audit: type=1400 audit(1768278632.535:3137): avc: denied { write } for pid=4108 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.255926][ T29] audit: type=1400 audit(1768278632.555:3138): avc: denied { ioctl } for pid=4108 comm="syz.4.157" path="socket:[6850]" dev="sockfs" ino=6850 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.280672][ T29] audit: type=1400 audit(1768278632.555:3139): avc: denied { read } for pid=4108 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.307849][ T4115] process 'syz.4.159' launched '/dev/fd/7' with NULL argv: empty string added [ 55.319136][ T29] audit: type=1400 audit(1768278632.665:3140): avc: denied { execute } for pid=4114 comm="syz.4.159" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.340099][ T29] audit: type=1400 audit(1768278632.675:3141): avc: denied { execute_no_trans } for pid=4114 comm="syz.4.159" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.381554][ T29] audit: type=1400 audit(1768278632.735:3142): avc: denied { mount } for pid=4112 comm="syz.3.158" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.404988][ T29] audit: type=1326 audit(1768278632.735:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 55.428484][ T29] audit: type=1326 audit(1768278632.735:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 55.599311][ T4123] lo speed is unknown, defaulting to 1000 [ 55.637941][ T4123] lo speed is unknown, defaulting to 1000 [ 55.685550][ T4131] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 55.776237][ T4133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.800348][ T4133] block device autoloading is deprecated and will be removed. [ 56.148144][ T4140] set_capacity_and_notify: 2 callbacks suppressed [ 56.148161][ T4140] loop2: detected capacity change from 0 to 1024 [ 56.154996][ T4095] syz.0.153 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 56.175193][ T4095] CPU: 0 UID: 0 PID: 4095 Comm: syz.0.153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.175288][ T4095] Tainted: [W]=WARN [ 56.175297][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.175314][ T4095] Call Trace: [ 56.175322][ T4095] [ 56.175330][ T4095] __dump_stack+0x1d/0x30 [ 56.175408][ T4095] dump_stack_lvl+0x95/0xd0 [ 56.175433][ T4095] dump_stack+0x15/0x1b [ 56.175525][ T4095] dump_header+0x81/0x240 [ 56.175546][ T4095] oom_kill_process+0x295/0x350 [ 56.175645][ T4095] out_of_memory+0x97b/0xb80 [ 56.175678][ T4095] try_charge_memcg+0x610/0xa10 [ 56.175790][ T4095] obj_cgroup_charge_pages+0xa6/0x150 [ 56.175829][ T4095] __memcg_kmem_charge_page+0x9f/0x170 [ 56.175870][ T4095] __alloc_frozen_pages_noprof+0x18f/0x360 [ 56.175945][ T4095] alloc_pages_mpol+0xb3/0x260 [ 56.175987][ T4095] alloc_pages_noprof+0x90/0x130 [ 56.176103][ T4095] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 56.176203][ T4095] __kvmalloc_node_noprof+0x492/0x6b0 [ 56.176246][ T4095] ? ip_set_alloc+0x24/0x30 [ 56.176365][ T4095] ? ip_set_alloc+0x24/0x30 [ 56.176468][ T4095] ip_set_alloc+0x24/0x30 [ 56.176503][ T4095] hash_netiface_create+0x282/0x740 [ 56.176559][ T4095] ? __pfx_hash_netiface_create+0x10/0x10 [ 56.176669][ T4095] ip_set_create+0x3cc/0x970 [ 56.176698][ T4095] ? __nla_parse+0x40/0x60 [ 56.176733][ T4095] nfnetlink_rcv_msg+0x4c6/0x590 [ 56.176762][ T4095] ? refill_stock+0x32f/0x390 [ 56.176912][ T4095] netlink_rcv_skb+0x123/0x220 [ 56.176984][ T4095] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.177027][ T4095] nfnetlink_rcv+0x167/0x16c0 [ 56.177061][ T4095] ? kmem_cache_free+0xe3/0x3a0 [ 56.177167][ T4095] ? __kfree_skb+0x109/0x150 [ 56.177205][ T4095] ? nlmon_xmit+0x4f/0x60 [ 56.177264][ T4095] ? consume_skb+0x49/0x150 [ 56.177290][ T4095] ? nlmon_xmit+0x4f/0x60 [ 56.177316][ T4095] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 56.177359][ T4095] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 56.177422][ T4095] ? __dev_queue_xmit+0x148/0x1ee0 [ 56.177464][ T4095] ? ref_tracker_free+0x37d/0x3e0 [ 56.177539][ T4095] ? __netlink_deliver_tap+0x4dc/0x500 [ 56.177636][ T4095] netlink_unicast+0x5c0/0x690 [ 56.177671][ T4095] netlink_sendmsg+0x58b/0x6b0 [ 56.177769][ T4095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.177808][ T4095] __sock_sendmsg+0x145/0x180 [ 56.177829][ T4095] ____sys_sendmsg+0x31e/0x4a0 [ 56.177885][ T4095] ___sys_sendmsg+0x17b/0x1d0 [ 56.177946][ T4095] __x64_sys_sendmsg+0xd4/0x160 [ 56.177986][ T4095] x64_sys_call+0x17ba/0x3000 [ 56.178012][ T4095] do_syscall_64+0xca/0x2b0 [ 56.178080][ T4095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.178108][ T4095] RIP: 0033:0x7fa13f10f749 [ 56.178171][ T4095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.178196][ T4095] RSP: 002b:00007fa13db77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.178218][ T4095] RAX: ffffffffffffffda RBX: 00007fa13f365fa0 RCX: 00007fa13f10f749 [ 56.178230][ T4095] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 56.178243][ T4095] RBP: 00007fa13f193f91 R08: 0000000000000000 R09: 0000000000000000 [ 56.178255][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.178267][ T4095] R13: 00007fa13f366038 R14: 00007fa13f365fa0 R15: 00007ffe74a15de8 [ 56.178321][ T4095] [ 56.178330][ T4095] memory: usage 307200kB, limit 307200kB, failcnt 291 [ 56.251258][ T4140] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.253150][ T4095] memory+swap: usage 315580kB, limit 9007199254740988kB, failcnt 0 [ 56.537152][ T4095] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 56.544469][ T4095] Memory cgroup stats for /syz0: [ 56.548158][ T4140] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.548545][ T4095] cache 0 [ 56.553455][ T4140] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.561197][ T4095] rss 4096 [ 56.561208][ T4095] shmem 0 [ 56.561216][ T4095] mapped_file 0 [ 56.580050][ T4095] dirty 0 [ 56.583075][ T4095] writeback 4096 [ 56.586677][ T4095] workingset_refault_anon 43 [ 56.591332][ T4095] workingset_refault_file 841 [ 56.596102][ T4095] swap 8581120 [ 56.599487][ T4095] swapcached 4096 [ 56.603143][ T4095] pgpgin 27553 [ 56.606616][ T4095] pgpgout 27551 [ 56.608455][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 56.610093][ T4095] pgfault 29848 [ 56.610105][ T4095] pgmajfault 28 [ 56.625916][ T4095] inactive_anon 4096 [ 56.629896][ T4095] active_anon 0 [ 56.633379][ T4095] inactive_file 0 [ 56.637124][ T4095] active_file 0 [ 56.638974][ T4140] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 56.640612][ T4095] unevictable 4096 [ 56.640625][ T4095] hierarchical_memory_limit 314572800 [ 56.660302][ T4095] hierarchical_memsw_limit 9223372036854771712 [ 56.666505][ T4095] total_cache 0 [ 56.670064][ T4095] total_rss 4096 [ 56.673644][ T4095] total_shmem 0 [ 56.677181][ T4095] total_mapped_file 0 [ 56.681221][ T4095] total_dirty 0 [ 56.684721][ T4095] total_writeback 4096 [ 56.686362][ T4140] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 56.688960][ T4095] total_workingset_refault_anon 43 [ 56.704429][ T4095] total_workingset_refault_file 841 [ 56.709765][ T4095] total_swap 8581120 [ 56.713699][ T4095] total_swapcached 4096 [ 56.717913][ T4095] total_pgpgin 27553 [ 56.721826][ T4095] total_pgpgout 27551 [ 56.725871][ T4095] total_pgfault 29848 [ 56.729866][ T4095] total_pgmajfault 28 [ 56.733859][ T4095] total_inactive_anon 4096 [ 56.735523][ T4140] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm ÿ: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.738371][ T4095] total_active_anon 0 [ 56.754960][ T4095] total_inactive_file 0 [ 56.759191][ T4095] total_active_file 0 [ 56.763186][ T4095] total_unevictable 4096 [ 56.767482][ T4095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.153,pid=4094,uid=0 [ 56.782143][ T4095] Memory cgroup out of memory: Killed process 4094 (syz.0.153) total-vm:96016kB, anon-rss:1100kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 56.791310][ T4140] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm ÿ: Failed to acquire dquot type 0 [ 56.829094][ T4107] syz.0.153 (4107) used greatest stack depth: 9800 bytes left [ 56.857447][ T4140] EXT4-fs (loop2): 1 orphan inode deleted [ 56.863877][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.940787][ T4140] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm ÿ: iget: bad extended attribute block 6 [ 56.956346][ T4095] syz.0.153 (4095) used greatest stack depth: 7408 bytes left [ 56.989632][ T4139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.092579][ T4158] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 57.100957][ T4158] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 57.256214][ T4163] netlink: 'syz.4.172': attribute type 10 has an invalid length. [ 57.362180][ T4167] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 57.427278][ T4171] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 57.456031][ T4163] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 57.473803][ T4165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.486768][ T4168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.499108][ T4168] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 57.513175][ T4167] team0: Failed to send options change via netlink (err -105) [ 57.520875][ T4167] team0: Port device dummy0 added [ 57.527534][ T4171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.569518][ T4171] team0: Failed to send options change via netlink (err -105) [ 57.577662][ T4171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.587015][ T4171] team0: Port device dummy0 removed [ 57.592935][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 57.598793][ T4171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.611867][ T4170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 57.755945][ T4182] lo speed is unknown, defaulting to 1000 [ 57.762234][ T4182] lo speed is unknown, defaulting to 1000 [ 58.498499][ T4187] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 58.539607][ T4194] lo speed is unknown, defaulting to 1000 [ 58.549015][ T4194] lo speed is unknown, defaulting to 1000 [ 58.564622][ T4189] loop1: detected capacity change from 0 to 1024 [ 58.616961][ T4189] loop1: detected capacity change from 0 to 1024 [ 58.648975][ T4202] program syz.0.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.659234][ T4189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.807118][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.885383][ T4208] loop1: detected capacity change from 0 to 1024 [ 58.908179][ T4208] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.951463][ T4208] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.970267][ T4208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.985947][ T4208] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.180: Failed to acquire dquot type 0 [ 59.015594][ T4208] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.180: Failed to acquire dquot type 0 [ 59.048587][ T4208] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.180: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.060104][ T4215] lo speed is unknown, defaulting to 1000 [ 59.075562][ T4208] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.180: Failed to acquire dquot type 0 [ 59.093656][ T4215] lo speed is unknown, defaulting to 1000 [ 59.105195][ T4208] EXT4-fs (loop1): 1 orphan inode deleted [ 59.111561][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.156787][ T4208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.170742][ T4220] loop3: detected capacity change from 0 to 1024 [ 59.195226][ T4220] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.183: Failed to acquire dquot type 0 [ 59.212781][ T4220] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.227795][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.183: corrupted inode contents [ 59.240005][ T4220] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.183: mark_inode_dirty error [ 59.265869][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.183: corrupted inode contents [ 59.295349][ T4220] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.183: mark_inode_dirty error [ 59.493413][ T4230] lo speed is unknown, defaulting to 1000 [ 59.499948][ T4230] lo speed is unknown, defaulting to 1000 [ 59.778899][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.183: corrupted inode contents [ 60.085845][ T4220] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 60.316238][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.183: corrupted inode contents [ 60.460270][ T4220] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.183: mark_inode_dirty error [ 60.472916][ T4220] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 60.482284][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 60.488475][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.534314][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 60.534333][ T29] audit: type=1400 audit(1768278637.885:3941): avc: denied { remount } for pid=4219 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.567806][ T4220] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.610059][ T29] audit: type=1326 audit(1768278637.935:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.633498][ T29] audit: type=1326 audit(1768278637.945:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.656986][ T29] audit: type=1326 audit(1768278637.945:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.680358][ T29] audit: type=1326 audit(1768278637.945:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.704027][ T29] audit: type=1326 audit(1768278637.945:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.727461][ T29] audit: type=1326 audit(1768278637.945:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.750886][ T29] audit: type=1326 audit(1768278637.945:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.774361][ T29] audit: type=1326 audit(1768278637.945:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.797939][ T29] audit: type=1326 audit(1768278637.945:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 60.904784][ T4250] bridge_slave_0: left allmulticast mode [ 60.910681][ T4250] bridge_slave_0: left promiscuous mode [ 60.916564][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.924817][ T4252] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 60.932714][ T4252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.191'. [ 60.969283][ T4250] bridge_slave_1: left allmulticast mode [ 60.974993][ T4250] bridge_slave_1: left promiscuous mode [ 60.980794][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.001025][ T4250] bond0: (slave bond_slave_0): Releasing backup interface [ 61.019385][ T4250] bond0: (slave bond_slave_1): Releasing backup interface [ 61.040690][ T4250] team0: Port device team_slave_0 removed [ 61.047820][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.055360][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.080714][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.088223][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.098036][ T4250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.116564][ T4252] batman_adv: batadv0: Adding interface: veth1_vlan [ 61.123223][ T4252] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.179188][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.215384][ T4252] batman_adv: batadv0: Interface activated: veth1_vlan [ 61.226395][ T4256] siw: device registration error -23 [ 61.266799][ T4260] netlink: 'syz.4.203': attribute type 10 has an invalid length. [ 61.280391][ T4260] syz_tun: entered promiscuous mode [ 61.286556][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.294147][ T4260] team0: Device bond0 failed to register rx_handler [ 61.299285][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 61.301959][ T4260] syz_tun: left promiscuous mode [ 61.324090][ T4264] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 61.512950][ T4272] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.578569][ T4273] lo speed is unknown, defaulting to 1000 [ 61.585022][ T4273] lo speed is unknown, defaulting to 1000 [ 61.804186][ T4260] bond0: (slave syz_tun): Releasing backup interface [ 61.815827][ T4260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.236090][ T4281] loop4: detected capacity change from 0 to 512 [ 62.274913][ T4281] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.284578][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 62.304299][ T4284] capability: warning: `syz.2.199' uses deprecated v2 capabilities in a way that may be insecure [ 62.381111][ T4286] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 62.406335][ T4286] bond1 (unregistering): Released all slaves [ 62.515205][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 62.534609][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.542167][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.565685][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.573183][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.709005][ T4304] lo speed is unknown, defaulting to 1000 [ 62.715573][ T4304] lo speed is unknown, defaulting to 1000 [ 63.054745][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 63.284091][ T4313] lo speed is unknown, defaulting to 1000 [ 63.338653][ T4313] lo speed is unknown, defaulting to 1000 [ 63.759150][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 63.803535][ T4322] siw: device registration error -23 [ 64.129799][ T4333] lo speed is unknown, defaulting to 1000 [ 64.136374][ T4333] lo speed is unknown, defaulting to 1000 [ 64.857870][ T4337] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 64.876712][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 64.940423][ T4339] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.543867][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 65.543882][ T29] audit: type=1326 audit(1768278642.895:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.591940][ T29] audit: type=1326 audit(1768278642.925:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.615457][ T29] audit: type=1326 audit(1768278642.935:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.638813][ T29] audit: type=1326 audit(1768278642.935:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.662209][ T29] audit: type=1326 audit(1768278642.935:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.685793][ T29] audit: type=1326 audit(1768278642.935:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.709635][ T29] audit: type=1326 audit(1768278642.935:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.733089][ T29] audit: type=1326 audit(1768278642.935:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.756483][ T29] audit: type=1326 audit(1768278642.935:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.779982][ T29] audit: type=1326 audit(1768278642.935:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb578d62005 code=0x7ffc0000 [ 65.908996][ T4363] netlink: 204 bytes leftover after parsing attributes in process `syz.0.223'. [ 65.930334][ T4365] lo speed is unknown, defaulting to 1000 [ 65.936544][ T4365] lo speed is unknown, defaulting to 1000 [ 66.178643][ T4369] lo speed is unknown, defaulting to 1000 [ 66.202723][ T4369] lo speed is unknown, defaulting to 1000 [ 66.631634][ T4380] lo speed is unknown, defaulting to 1000 [ 66.637801][ T4380] lo speed is unknown, defaulting to 1000 [ 67.370578][ T4390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.428520][ T4390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.458381][ T4392] lo speed is unknown, defaulting to 1000 [ 67.464849][ T4392] lo speed is unknown, defaulting to 1000 [ 67.973698][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 68.212796][ T4401] lo speed is unknown, defaulting to 1000 [ 68.223362][ T4401] lo speed is unknown, defaulting to 1000 [ 68.483497][ T4405] loop4: detected capacity change from 0 to 1024 [ 68.491318][ T4405] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.502349][ T4405] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 68.513380][ T4405] EXT4-fs (loop4): invalid journal inode [ 68.538994][ T4405] EXT4-fs (loop4): can't get journal size [ 68.555420][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.571931][ T4405] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.236: path /51/file0: bad entry in directory: inode out of bounds - offset=0, inode=511, rec_len=1024, size=1024 fake=0 [ 68.606482][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.199911][ T4425] lo speed is unknown, defaulting to 1000 [ 69.206414][ T4425] lo speed is unknown, defaulting to 1000 [ 69.511688][ T4429] netlink: 9 bytes leftover after parsing attributes in process `syz.1.243'. [ 69.531610][ T4429] netlink: 9 bytes leftover after parsing attributes in process `syz.1.243'. [ 69.548159][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 69.557142][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 70.451995][ T4441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.557109][ T4441] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 70.564935][ T4441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.247'. [ 70.597333][ T4441] veth1_vlan: left promiscuous mode [ 70.605181][ T4431] Set syz1 is full, maxelem 65536 reached [ 70.636705][ T4441] batman_adv: batadv0: Adding interface: veth1_vlan [ 70.643380][ T4441] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.727055][ T4441] batman_adv: batadv0: Interface activated: veth1_vlan [ 70.792352][ T4449] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 70.816048][ T4446] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 70.830151][ T4449] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 70.845546][ T4446] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 70.858680][ T4446] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.891698][ T4450] lo speed is unknown, defaulting to 1000 [ 70.898247][ T4450] lo speed is unknown, defaulting to 1000 [ 71.045863][ T4453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.267401][ T29] kauditd_printk_skb: 864 callbacks suppressed [ 71.267417][ T29] audit: type=1326 audit(1768278648.625:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 71.299877][ T29] audit: type=1326 audit(1768278648.655:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 71.367590][ T29] audit: type=1326 audit(1768278648.725:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 71.458900][ T29] audit: type=1326 audit(1768278648.745:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 71.482291][ T29] audit: type=1326 audit(1768278648.745:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 71.505691][ T29] audit: type=1326 audit(1768278648.785:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 71.529198][ T29] audit: type=1326 audit(1768278648.785:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 71.552567][ T29] audit: type=1326 audit(1768278648.785:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb578d2f783 code=0x7ffc0000 [ 71.575742][ T29] audit: type=1326 audit(1768278648.785:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb578d265e7 code=0x7ffc0000 [ 71.599090][ T29] audit: type=1326 audit(1768278648.785:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb578ccb829 code=0x7ffc0000 [ 72.083179][ T4476] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 72.142557][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.171621][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.456507][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 72.472445][ T4486] lo speed is unknown, defaulting to 1000 [ 72.479123][ T4486] lo speed is unknown, defaulting to 1000 [ 72.961722][ T4492] siw: device registration error -23 [ 72.967872][ T4496] loop4: detected capacity change from 0 to 1024 [ 72.985203][ T4496] EXT4-fs: Ignoring removed orlov option [ 72.994360][ T4496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.691382][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.927420][ T4509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 74.091561][ T4508] Cannot find add_set index 0 as target [ 74.206893][ T4519] lo speed is unknown, defaulting to 1000 [ 74.213380][ T4519] lo speed is unknown, defaulting to 1000 [ 75.375143][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.438887][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.491192][ T4530] lo speed is unknown, defaulting to 1000 [ 75.530128][ T4530] lo speed is unknown, defaulting to 1000 [ 75.537533][ T4534] netlink: 'syz.4.270': attribute type 13 has an invalid length. [ 75.551570][ T4534] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 75.657577][ T4536] lo speed is unknown, defaulting to 1000 [ 75.664243][ T4536] lo speed is unknown, defaulting to 1000 [ 76.103193][ T4547] netlink: 'syz.1.272': attribute type 10 has an invalid length. [ 76.117483][ T4547] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.139836][ T4547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.170605][ T4547] bond_slave_0: entered promiscuous mode [ 76.176369][ T4547] bond_slave_1: entered promiscuous mode [ 76.182095][ T4547] dummy0: entered promiscuous mode [ 76.187278][ T4547] syz_tun: entered promiscuous mode [ 76.195513][ T4547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.203709][ T4547] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 76.213059][ T4547] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 76.222680][ T4547] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 76.307642][ T29] kauditd_printk_skb: 1119 callbacks suppressed [ 76.307662][ T29] audit: type=1326 audit(1768278653.645:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.337333][ T29] audit: type=1326 audit(1768278653.655:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.362977][ T29] audit: type=1326 audit(1768278653.665:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.393103][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.402124][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.513423][ T29] audit: type=1326 audit(1768278653.695:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.536831][ T29] audit: type=1326 audit(1768278653.715:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.560195][ T29] audit: type=1326 audit(1768278653.775:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.583538][ T29] audit: type=1326 audit(1768278653.785:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.607023][ T29] audit: type=1326 audit(1768278653.795:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.630294][ T29] audit: type=1326 audit(1768278653.805:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 76.653643][ T29] audit: type=1326 audit(1768278653.805:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 77.032987][ T4563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.042148][ T4563] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.053030][ T4563] 0ªX¹¦À: left allmulticast mode [ 77.058230][ T4563] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 77.231805][ T4566] siw: device registration error -23 [ 77.364425][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 77.914514][ T4580] lo speed is unknown, defaulting to 1000 [ 77.922287][ T4580] lo speed is unknown, defaulting to 1000 [ 78.739402][ T4579] lo speed is unknown, defaulting to 1000 [ 78.945614][ T4579] lo speed is unknown, defaulting to 1000 [ 78.962729][ T4583] netlink: 'syz.1.285': attribute type 13 has an invalid length. [ 78.981702][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 78.992961][ T4585] 9p: Bad value for 'wfdno' [ 79.088078][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 79.128626][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.135900][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.146954][ T4583] bond_slave_0: left promiscuous mode [ 79.152407][ T4583] bond_slave_1: left promiscuous mode [ 79.157938][ T4583] dummy0: left promiscuous mode [ 79.257854][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.267646][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 79.269830][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.416096][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.445581][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.454724][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.467260][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.689407][ T4610] lo speed is unknown, defaulting to 1000 [ 79.703155][ T4610] lo speed is unknown, defaulting to 1000 [ 79.882893][ T4615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.929083][ T4615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.960359][ T4616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.975938][ T3483] lo speed is unknown, defaulting to 1000 [ 79.986482][ T4615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.034729][ T4613] netlink: 14 bytes leftover after parsing attributes in process `syz.1.294'. [ 80.084725][ T4615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.131153][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 80.141141][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.172375][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.203483][ T2610] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.227365][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.245504][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.826532][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 80.840213][ T4631] 9p: Bad value for 'wfdno' [ 80.936458][ T4628] lo speed is unknown, defaulting to 1000 [ 80.942558][ T4628] lo speed is unknown, defaulting to 1000 [ 81.035782][ T10] hid_parser_main: 19 callbacks suppressed [ 81.035811][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.049625][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.057440][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.066119][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.073977][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.081868][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.089755][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x1 [ 81.097616][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.105413][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.113181][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 81.305659][ T10] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 81.437767][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 81.437819][ T29] audit: type=1400 audit(1768278658.795:6888): avc: denied { read } for pid=4645 comm="syz.4.304" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.461784][ T4613] syz.1.294 (4613) used greatest stack depth: 7256 bytes left [ 81.468629][ T4643] fido_id[4643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.954328][ T29] audit: type=1400 audit(1768278658.795:6889): avc: denied { open } for pid=4645 comm="syz.4.304" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.977784][ T29] audit: type=1400 audit(1768278658.795:6890): avc: denied { ioctl } for pid=4645 comm="syz.4.304" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.002810][ T29] audit: type=1326 audit(1768278658.805:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.026212][ T29] audit: type=1326 audit(1768278658.805:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.049767][ T29] audit: type=1326 audit(1768278658.805:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.073171][ T29] audit: type=1326 audit(1768278658.805:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.096794][ T29] audit: type=1326 audit(1768278658.805:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.120172][ T29] audit: type=1326 audit(1768278658.805:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.143640][ T29] audit: type=1326 audit(1768278658.805:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 82.222321][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 82.234595][ T4636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4636 comm=syz.0.301 [ 82.670596][ T4673] lo speed is unknown, defaulting to 1000 [ 82.677201][ T4673] lo speed is unknown, defaulting to 1000 [ 82.984053][ T4683] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 83.120730][ T4684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.151217][ T4683] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.178117][ T4686] bond_slave_0: entered promiscuous mode [ 83.183916][ T4686] bond_slave_1: entered promiscuous mode [ 83.189691][ T4686] dummy0: entered promiscuous mode [ 83.194841][ T4686] syz_tun: entered promiscuous mode [ 83.254495][ T4686] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 83.271039][ T4686] bond1: (slave macvlan0): speed changed to 0 on port 1 [ 83.288685][ T4686] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 83.890524][ T4702] lo speed is unknown, defaulting to 1000 [ 83.905714][ T4702] lo speed is unknown, defaulting to 1000 [ 83.923360][ T4703] netlink: 'syz.2.318': attribute type 13 has an invalid length. [ 84.003442][ T4705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 84.231388][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.238743][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.264453][ T4703] bond_slave_0: left promiscuous mode [ 84.269990][ T4703] bond_slave_1: left promiscuous mode [ 84.275433][ T4703] dummy0: left promiscuous mode [ 84.432452][ T3626] lo speed is unknown, defaulting to 1000 [ 84.438429][ T3626] syz1: Port: 1 Link DOWN [ 84.443609][ T2610] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.471349][ T2610] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.481293][ T2610] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.492918][ T2610] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.686954][ T4714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 84.699705][ T4714] 9p: Bad value for 'wfdno' [ 85.127472][ T4733] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 85.433375][ T4739] lo speed is unknown, defaulting to 1000 [ 85.439890][ T4739] lo speed is unknown, defaulting to 1000 [ 85.627323][ T4745] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 85.646918][ T4745] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.696051][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.739705][ T4749] syz_tun: entered promiscuous mode [ 85.745686][ T4749] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.754663][ T4749] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 86.072220][ T4747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4747 comm=syz.1.332 [ 86.317885][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.335222][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.364086][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.387891][ T4761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.403423][ T3782] lo speed is unknown, defaulting to 1000 [ 86.409216][ T3782] syz2: Port: 1 Link ACTIVE [ 87.049576][ T29] kauditd_printk_skb: 1270 callbacks suppressed [ 87.049595][ T29] audit: type=1326 audit(1768278664.405:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.082150][ T29] audit: type=1326 audit(1768278664.405:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.088137][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 87.105496][ T29] audit: type=1326 audit(1768278664.405:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.137883][ T29] audit: type=1326 audit(1768278664.405:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.139746][ T4773] 9p: Bad value for 'wfdno' [ 87.161727][ T29] audit: type=1326 audit(1768278664.405:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.189652][ T29] audit: type=1326 audit(1768278664.405:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.213115][ T29] audit: type=1326 audit(1768278664.405:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.236551][ T29] audit: type=1326 audit(1768278664.405:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.259908][ T29] audit: type=1326 audit(1768278664.405:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.283365][ T29] audit: type=1326 audit(1768278664.405:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 87.638654][ T4791] lo speed is unknown, defaulting to 1000 [ 87.645341][ T4791] lo speed is unknown, defaulting to 1000 [ 87.732060][ T4793] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 88.386471][ T4808] netlink: 156 bytes leftover after parsing attributes in process `syz.2.349'. [ 88.584510][ T4817] lo speed is unknown, defaulting to 1000 [ 88.591397][ T4817] lo speed is unknown, defaulting to 1000 [ 89.055635][ T4821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4821 comm=syz.1.354 [ 89.183101][ T4813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4813 comm=syz.3.352 [ 89.323107][ T4832] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 89.329914][ T4832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.337741][ T4832] vhci_hcd vhci_hcd.0: Device attached [ 89.358759][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 89.367964][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 89.525167][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 89.605681][ T23] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 90.100894][ T4849] lo speed is unknown, defaulting to 1000 [ 90.107387][ T4849] lo speed is unknown, defaulting to 1000 [ 90.621006][ T4835] vhci_hcd: connection reset by peer [ 90.635944][ T803] vhci_hcd vhci_hcd.4: stop threads [ 90.641218][ T803] vhci_hcd vhci_hcd.4: release socket [ 90.646766][ T803] vhci_hcd vhci_hcd.4: disconnect device [ 90.860285][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 90.985669][ T4861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 91.036548][ T4863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.366'. [ 91.061109][ T4863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.366'. [ 93.047709][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 93.107531][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 93.107546][ T29] audit: type=1326 audit(1768278670.465:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.120874][ T4878] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 93.151871][ T4878] bond1: option mode: unable to set because the bond device is up [ 93.216898][ T29] audit: type=1326 audit(1768278670.495:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.240319][ T29] audit: type=1326 audit(1768278670.495:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.263788][ T29] audit: type=1326 audit(1768278670.495:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.287239][ T29] audit: type=1326 audit(1768278670.495:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.310738][ T29] audit: type=1326 audit(1768278670.495:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.334102][ T29] audit: type=1326 audit(1768278670.495:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.357529][ T29] audit: type=1326 audit(1768278670.505:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.381019][ T29] audit: type=1326 audit(1768278670.505:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.446700][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 93.455662][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 93.842968][ T4883] Set syz1 is full, maxelem 65536 reached [ 93.850275][ T29] audit: type=1326 audit(1768278670.605:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f9baf749 code=0x7ffc0000 [ 93.893864][ T4878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.903115][ T4878] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 93.935159][ T411] bond1: (slave macvlan2): link status up again after 0 ms [ 93.944303][ T4888] syz_tun: left promiscuous mode [ 93.955444][ T2610] bond1: (slave macvlan2): link status up again after 0 ms [ 94.016369][ T411] bond1: (slave macvlan2): link status up again after 0 ms [ 94.023897][ T411] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.095224][ T1624] bond1: (slave macvlan2): link status up again after 0 ms [ 94.115176][ T2610] bond1: (slave macvlan2): link status up again after 0 ms [ 94.135290][ T2610] bond1: (slave macvlan2): link status up again after 0 ms [ 94.142861][ T4888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.161345][ T2610] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.328246][ T4899] lo speed is unknown, defaulting to 1000 [ 94.341018][ T4899] lo speed is unknown, defaulting to 1000 [ 94.715571][ T23] usb 9-1: enqueue for inactive port 0 [ 94.756830][ T23] usb 9-1: enqueue for inactive port 0 [ 94.875103][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 94.984776][ T4904] lo speed is unknown, defaulting to 1000 [ 94.990905][ T4904] lo speed is unknown, defaulting to 1000 [ 95.478506][ T4915] lo speed is unknown, defaulting to 1000 [ 95.484720][ T4915] lo speed is unknown, defaulting to 1000 [ 95.515562][ T4917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 95.571198][ T4915] netlink: '+}[@': attribute type 13 has an invalid length. [ 95.581303][ T4922] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.686684][ T4915] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 95.721768][ T4924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.737808][ T1624] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.747727][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 95.762961][ T1624] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.795259][ T1624] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.825576][ T1624] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.443908][ T4930] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 96.602770][ T4932] lo speed is unknown, defaulting to 1000 [ 96.619432][ T4932] lo speed is unknown, defaulting to 1000 [ 97.039240][ T4953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 97.045895][ T4953] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.053559][ T4953] vhci_hcd vhci_hcd.0: Device attached [ 97.245142][ T3626] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 97.366627][ T3626] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 97.395338][ T4948] netlink: 14 bytes leftover after parsing attributes in process `syz.2.393'. [ 97.479308][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 97.489030][ T4965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.905071][ T4954] vhci_hcd: connection reset by peer [ 97.935330][ T1624] vhci_hcd vhci_hcd.3: stop threads [ 97.940710][ T1624] vhci_hcd vhci_hcd.3: release socket [ 97.946217][ T1624] vhci_hcd vhci_hcd.3: disconnect device [ 98.122960][ T4974] netlink: 'syz.0.398': attribute type 21 has an invalid length. [ 98.159768][ T4974] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 98.167552][ T4974] netlink: 144 bytes leftover after parsing attributes in process `syz.0.398'. [ 98.364827][ T4974] netlink: 'syz.0.398': attribute type 49 has an invalid length. [ 98.608190][ T4979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4979 comm=syz.2.399 [ 98.703237][ T4980] lo speed is unknown, defaulting to 1000 [ 98.709426][ T4980] lo speed is unknown, defaulting to 1000 [ 98.829010][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 98.829036][ T29] audit: type=1326 audit(1768278676.185:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4278ff749 code=0x0 [ 98.862211][ T29] audit: type=1326 audit(1768278676.215:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.2.412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f277671f749 code=0x0 [ 98.904488][ T4983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4983 comm=syz.0.411 [ 98.935134][ T1624] net_ratelimit: 36 callbacks suppressed [ 98.935153][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 98.951800][ T29] audit: type=1326 audit(1768278676.305:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 98.977774][ T29] audit: type=1326 audit(1768278676.335:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.001273][ T29] audit: type=1326 audit(1768278676.335:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.024704][ T29] audit: type=1326 audit(1768278676.335:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.048186][ T29] audit: type=1326 audit(1768278676.335:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.071561][ T29] audit: type=1326 audit(1768278676.335:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.075634][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.094936][ T29] audit: type=1326 audit(1768278676.335:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.094964][ T29] audit: type=1326 audit(1768278676.335:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 99.155189][ T4992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'. [ 99.205117][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.322134][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.435351][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.540503][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 99.549551][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 99.555151][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.675522][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.785543][ T411] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.895097][ T1624] bond1: (slave macvlan2): failed to get link speed/duplex [ 99.988925][ T5002] Set syz1 is full, maxelem 65536 reached [ 100.081281][ T5008] lo speed is unknown, defaulting to 1000 [ 100.096695][ T5008] lo speed is unknown, defaulting to 1000 [ 100.666109][ T5030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 100.672678][ T5030] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.680500][ T5030] vhci_hcd vhci_hcd.0: Device attached [ 100.855133][ T3398] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 100.915721][ T3398] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 101.318610][ T5033] vhci_hcd: connection reset by peer [ 101.324224][ T411] vhci_hcd vhci_hcd.0: stop threads [ 101.329570][ T411] vhci_hcd vhci_hcd.0: release socket [ 101.335001][ T411] vhci_hcd vhci_hcd.0: disconnect device [ 101.771926][ T5064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5064 comm=syz.1.425 [ 101.988543][ T5078] lo speed is unknown, defaulting to 1000 [ 101.995446][ T5078] lo speed is unknown, defaulting to 1000 [ 102.395149][ T3626] usb 7-1: enqueue for inactive port 0 [ 102.400753][ T3626] usb 7-1: enqueue for inactive port 0 [ 102.485155][ T3626] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 103.117208][ T5110] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.187809][ T5108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5108 comm=syz.4.439 [ 103.224842][ T5115] netlink: 'syz.4.442': attribute type 21 has an invalid length. [ 103.233848][ T5115] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 103.241654][ T5115] netlink: 144 bytes leftover after parsing attributes in process `syz.4.442'. [ 103.331391][ T5117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.401116][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 104.044361][ T2610] net_ratelimit: 35 callbacks suppressed [ 104.044382][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.124881][ T5115] netlink: 'syz.4.442': attribute type 49 has an invalid length. [ 104.167502][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.291353][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.419081][ T411] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.454738][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 104.454805][ T29] audit: type=1326 audit(1768278681.686:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 104.485878][ T29] audit: type=1326 audit(1768278681.714:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 104.509391][ T29] audit: type=1326 audit(1768278681.714:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 104.566782][ T5139] lo speed is unknown, defaulting to 1000 [ 104.683663][ T2610] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.808760][ T411] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.926203][ T411] bond1: (slave macvlan2): failed to get link speed/duplex [ 104.983925][ T29] audit: type=1326 audit(1768278681.714:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 105.031671][ T29] audit: type=1326 audit(1768278682.191:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 105.055180][ T29] audit: type=1326 audit(1768278682.191:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 105.078834][ T29] audit: type=1326 audit(1768278682.191:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 105.107712][ T411] bond1: (slave macvlan2): failed to get link speed/duplex [ 105.154401][ T29] audit: type=1326 audit(1768278682.350:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 105.178907][ T29] audit: type=1326 audit(1768278682.368:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb578d2df90 code=0x7ffc0000 [ 105.202510][ T29] audit: type=1326 audit(1768278682.368:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 105.229059][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 105.238091][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 105.247773][ T1728] bond1: (slave macvlan2): failed to get link speed/duplex [ 105.364257][ T1728] bond1: (slave macvlan2): failed to get link speed/duplex [ 105.515105][ T3626] IPVS: starting estimator thread 0... [ 105.569854][ T5169] syz_tun: left promiscuous mode [ 105.591054][ T5169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.603400][ T5169] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.610980][ T5167] IPVS: using max 2256 ests per chain, 112800 per kthread [ 105.662649][ T5172] lo speed is unknown, defaulting to 1000 [ 105.727498][ T5178] netlink: 'syz.2.457': attribute type 21 has an invalid length. [ 105.743651][ T5178] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 105.751455][ T5178] netlink: 144 bytes leftover after parsing attributes in process `syz.2.457'. [ 106.068194][ T5178] netlink: 'syz.2.457': attribute type 49 has an invalid length. [ 106.230712][ T3398] usb 1-1: enqueue for inactive port 0 [ 106.236285][ T3398] usb 1-1: enqueue for inactive port 0 [ 106.268618][ T5196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5196 comm=syz.0.464 [ 106.315627][ T3398] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 106.469292][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 106.486704][ T3782] IPVS: starting estimator thread 0... [ 106.534524][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.543386][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.583044][ T5213] IPVS: using max 2256 ests per chain, 112800 per kthread [ 106.640556][ T5216] lo speed is unknown, defaulting to 1000 [ 107.177495][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 107.186555][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 107.782579][ T5233] syz_tun: entered promiscuous mode [ 107.812282][ T289] bond1: (slave macvlan2): link status definitely up, 10000 Mbps full duplex [ 107.821804][ T289] bond1: active interface up! [ 107.987643][ T5239] netlink: 'syz.3.476': attribute type 21 has an invalid length. [ 107.995680][ T5239] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 108.003350][ T5239] netlink: 144 bytes leftover after parsing attributes in process `syz.3.476'. [ 108.239775][ T5239] netlink: 'syz.3.476': attribute type 49 has an invalid length. [ 108.328552][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 108.602613][ T5262] lo speed is unknown, defaulting to 1000 [ 108.964817][ T5264] netlink: 'syz.1.484': attribute type 3 has an invalid length. [ 110.125265][ T5279] __nla_validate_parse: 2 callbacks suppressed [ 110.125282][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 110.135994][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 110.136049][ T29] audit: type=1326 audit(1768278687.009:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 110.140483][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 110.174637][ T29] audit: type=1326 audit(1768278687.027:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 110.404674][ T5285] netlink: 'syz.0.496': attribute type 3 has an invalid length. [ 110.510288][ T5290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5290 comm=syz.4.486 [ 110.584557][ T5281] net_ratelimit: 21 callbacks suppressed [ 110.584580][ T5281] Set syz1 is full, maxelem 65536 reached [ 110.675885][ T5291] lo speed is unknown, defaulting to 1000 [ 110.939499][ T29] audit: type=1326 audit(1768278687.757:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 110.996583][ T5295] lo speed is unknown, defaulting to 1000 [ 111.185871][ T29] audit: type=1326 audit(1768278687.776:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.209347][ T29] audit: type=1326 audit(1768278687.776:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.233289][ T29] audit: type=1326 audit(1768278687.776:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.256747][ T29] audit: type=1326 audit(1768278687.776:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.280536][ T29] audit: type=1326 audit(1768278687.776:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.304085][ T29] audit: type=1326 audit(1768278687.776:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.327535][ T29] audit: type=1326 audit(1768278687.776:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7fc00000 [ 111.647705][ T5311] lo speed is unknown, defaulting to 1000 [ 112.436931][ T5321] lo speed is unknown, defaulting to 1000 [ 113.700692][ T5350] lo speed is unknown, defaulting to 1000 [ 114.123790][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 114.132844][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 114.553140][ T5358] Set syz1 is full, maxelem 65536 reached [ 114.684047][ T5373] lo speed is unknown, defaulting to 1000 [ 114.987510][ T5399] lo speed is unknown, defaulting to 1000 [ 115.490920][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 115.490979][ T29] audit: type=1326 audit(1768278948.020:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb578d265e7 code=0x7ffc0000 [ 115.530610][ T29] audit: type=1326 audit(1768278948.048:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb578ccb829 code=0x7ffc0000 [ 115.554077][ T29] audit: type=1326 audit(1768278948.048:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb578d265e7 code=0x7ffc0000 [ 115.577846][ T29] audit: type=1326 audit(1768278948.048:12028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb578ccb829 code=0x7ffc0000 [ 115.601267][ T29] audit: type=1326 audit(1768278948.048:12029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 115.714344][ T29] audit: type=1326 audit(1768278948.105:12030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb578d265e7 code=0x7ffc0000 [ 115.737779][ T29] audit: type=1326 audit(1768278948.105:12031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb578ccb829 code=0x7ffc0000 [ 115.761310][ T29] audit: type=1326 audit(1768278948.105:12032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 115.784789][ T29] audit: type=1326 audit(1768278948.105:12033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb578d265e7 code=0x7ffc0000 [ 115.808245][ T29] audit: type=1326 audit(1768278948.105:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb578ccb829 code=0x7ffc0000 [ 116.092846][ T5421] lo speed is unknown, defaulting to 1000 [ 116.433662][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 116.452197][ T5438] netlink: 'syz.4.530': attribute type 7 has an invalid length. [ 116.512249][ T5440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.532'. [ 116.532184][ T5440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.532'. [ 116.681661][ T5450] pim6reg: entered allmulticast mode [ 116.699573][ T5450] pim6reg: left allmulticast mode [ 116.816412][ T5450] pimreg: entered allmulticast mode [ 116.841437][ T5449] pimreg: left allmulticast mode [ 116.946704][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 117.241341][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 117.362183][ T5466] lo speed is unknown, defaulting to 1000 [ 117.864015][ T5474] capability: warning: `syz.4.544' uses 32-bit capabilities (legacy support in use) [ 118.256774][ T5490] lo speed is unknown, defaulting to 1000 [ 118.853104][ T5499] can0: slcan on ttyS3. [ 118.929855][ T5499] can0 (unregistered): slcan off ttyS3. [ 119.142354][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 119.245118][ T5527] siw: device registration error -23 [ 119.253527][ T5516] batman_adv: batadv0: Removing interface: veth1_vlan [ 119.692509][ T5521] lo speed is unknown, defaulting to 1000 [ 119.868017][ T5560] lo speed is unknown, defaulting to 1000 [ 120.005697][ T5562] Cannot find add_set index 0 as target [ 120.895579][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 120.941559][ T29] kauditd_printk_skb: 1471 callbacks suppressed [ 120.941576][ T29] audit: type=1326 audit(119.719:13506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 120.970894][ T29] audit: type=1326 audit(119.728:13507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 120.993855][ T29] audit: type=1326 audit(119.728:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 121.022977][ T29] audit: type=1326 audit(119.785:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb578d2df90 code=0x7ffc0000 [ 121.046227][ T29] audit: type=1326 audit(119.803:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 121.070227][ T29] audit: type=1326 audit(119.803:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb578d2f783 code=0x7ffc0000 [ 121.093120][ T29] audit: type=1326 audit(119.803:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb578d2f807 code=0x7ffc0000 [ 121.118525][ T29] audit: type=1326 audit(119.803:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb578ce6bdd code=0x7ffc0000 [ 121.141722][ T29] audit: type=1326 audit(119.803:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb578d63e89 code=0x7ffc0000 [ 121.164605][ T29] audit: type=1326 audit(119.803:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5576 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb578ce6c47 code=0x7ffc0000 [ 121.225456][ T5584] lo speed is unknown, defaulting to 1000 [ 121.872396][ T5602] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 122.037639][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 122.365022][ T5611] lo speed is unknown, defaulting to 1000 [ 122.564013][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.582257][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.992729][ T5635] lo speed is unknown, defaulting to 1000 [ 123.738824][ T5647] netlink: 84 bytes leftover after parsing attributes in process `syz.3.585'. [ 123.805935][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 123.814872][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 123.995120][ T5656] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 124.070758][ T5657] lo speed is unknown, defaulting to 1000 [ 124.443648][ T5661] lo speed is unknown, defaulting to 1000 [ 124.804355][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 124.955094][ T5679] netlink: 'syz.4.598': attribute type 21 has an invalid length. [ 124.963004][ T5679] netlink: 100 bytes leftover after parsing attributes in process `syz.4.598'. [ 125.141128][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 126.354507][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 126.354522][ T29] audit: type=1326 audit(124.789:14123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 126.591375][ T5686] bridge0: port 3(gretap0) entered blocking state [ 126.598030][ T5686] bridge0: port 3(gretap0) entered disabled state [ 126.611146][ T5686] gretap0: entered allmulticast mode [ 126.617089][ T5686] gretap0: entered promiscuous mode [ 126.698546][ T5701] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 127.289397][ T5696] Set syz1 is full, maxelem 65536 reached [ 127.408922][ T29] audit: type=1326 audit(125.051:14124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.431783][ T29] audit: type=1326 audit(125.051:14125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.455040][ T29] audit: type=1326 audit(125.051:14126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.478485][ T29] audit: type=1326 audit(125.051:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.501357][ T29] audit: type=1326 audit(125.051:14128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.524204][ T29] audit: type=1326 audit(125.051:14129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.547031][ T29] audit: type=1326 audit(125.051:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.569954][ T29] audit: type=1326 audit(125.051:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.592818][ T29] audit: type=1326 audit(125.051:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb578d2f749 code=0x7ffc0000 [ 127.709024][ T5714] bond0: (slave syz_tun): Releasing backup interface [ 128.075398][ T5732] lo speed is unknown, defaulting to 1000 [ 128.855656][ T5738] syzkaller0: entered allmulticast mode [ 128.863257][ T5738] syzkaller0 (unregistering): left allmulticast mode [ 128.898055][ T5723] netlink: 144 bytes leftover after parsing attributes in process `syz.2.612'. [ 128.937446][ T5745] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.014916][ T5745] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 129.126763][ T5754] lo speed is unknown, defaulting to 1000 [ 129.444762][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 129.780474][ T5763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=5763 comm=syz.3.623 [ 129.823719][ T5763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5763 comm=syz.3.623 [ 129.909365][ T5771] syz_tun: refused to change device tx_queue_len [ 129.918532][ T5771] netlink: 'syz.4.625': attribute type 10 has an invalid length. [ 129.926441][ T5771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 130.008869][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 130.277035][ T5785] lo speed is unknown, defaulting to 1000 [ 130.758570][ T5796] lo speed is unknown, defaulting to 1000 [ 131.700755][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 132.097717][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 132.117532][ T5813] netlink: 'syz.3.636': attribute type 7 has an invalid length. [ 132.125626][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 132.153036][ T5817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=5817 comm=syz.1.638 [ 132.189963][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 132.189988][ T29] audit: type=1400 audit(130.252:14596): avc: denied { read } for pid=5810 comm="syz.4.637" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.192981][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.196258][ T29] audit: type=1400 audit(130.252:14597): avc: denied { open } for pid=5810 comm="syz.4.637" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.231015][ T5824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5824 comm=syz.1.638 [ 132.251414][ T29] audit: type=1400 audit(130.252:14598): avc: denied { read write } for pid=5810 comm="syz.4.637" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.278111][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.287080][ T29] audit: type=1400 audit(130.252:14599): avc: denied { open } for pid=5810 comm="syz.4.637" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.318193][ T29] audit: type=1400 audit(130.252:14600): avc: denied { ioctl } for pid=5810 comm="syz.4.637" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.438801][ T5821] lo speed is unknown, defaulting to 1000 [ 132.550620][ T29] audit: type=1400 audit(130.457:14601): avc: denied { ioctl } for pid=5810 comm="syz.4.637" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.575778][ T29] audit: type=1400 audit(130.467:14602): avc: denied { create } for pid=5820 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 132.594983][ T29] audit: type=1400 audit(130.476:14603): avc: denied { sys_admin } for pid=5820 comm="syz.3.640" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 132.654539][ T29] audit: type=1326 audit(130.682:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 132.677481][ T29] audit: type=1326 audit(130.682:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13f10f749 code=0x7ffc0000 [ 133.830339][ T5847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.872217][ T3620] Bluetooth: hci0: sending frame failed (-49) [ 134.878565][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 134.960921][ T5857] netlink: 204 bytes leftover after parsing attributes in process `syz.4.649'. [ 135.284766][ T5868] lo speed is unknown, defaulting to 1000 [ 135.464484][ T5873] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 135.628468][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 135.657626][ T5878] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 135.713374][ T5878] batman_adv: batadv0: Removing interface: veth1_vlan [ 135.727872][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 136.555709][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 136.798625][ T5897] lo speed is unknown, defaulting to 1000 [ 136.956787][ T5903] netlink: 204 bytes leftover after parsing attributes in process `syz.1.662'. [ 137.601640][ T5910] syzkaller0: entered allmulticast mode [ 137.611543][ T5910] syzkaller0 (unregistering): left allmulticast mode [ 137.648718][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 137.648734][ T29] audit: type=1400 audit(135.350:14933): avc: denied { name_bind } for pid=5914 comm="syz.3.667" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.675973][ T29] audit: type=1400 audit(135.350:14934): avc: denied { node_bind } for pid=5914 comm="syz.3.667" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 137.782511][ T5915] bond0: (slave syz_tun): Releasing backup interface [ 137.829191][ T29] audit: type=1400 audit(135.527:14935): avc: denied { read } for pid=5914 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.852114][ T29] audit: type=1326 audit(135.546:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.877331][ T29] audit: type=1326 audit(135.555:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.900511][ T29] audit: type=1326 audit(135.555:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.923547][ T29] audit: type=1326 audit(135.555:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.946567][ T29] audit: type=1326 audit(135.555:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.969584][ T29] audit: type=1326 audit(135.555:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 137.992859][ T29] audit: type=1326 audit(135.555:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4278ff749 code=0x7ffc0000 [ 138.049279][ T5930] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.075056][ T5926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.025415][ T5962] bridge0: port 1(gretap0) entered blocking state [ 139.032122][ T5962] bridge0: port 1(gretap0) entered disabled state [ 139.039168][ T5962] gretap0: entered allmulticast mode [ 139.045395][ T5962] gretap0: entered promiscuous mode [ 139.051345][ T5962] bridge0: port 1(gretap0) entered blocking state [ 139.057934][ T5962] bridge0: port 1(gretap0) entered forwarding state [ 139.069044][ T5962] netlink: '+}[@': attribute type 13 has an invalid length. [ 139.087700][ T5962] bridge0: port 1(gretap0) entered disabled state [ 139.459733][ T5975] lo speed is unknown, defaulting to 1000 [ 139.619904][ T5979] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.134111][ T5992] lo speed is unknown, defaulting to 1000 [ 142.998209][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 142.998259][ T29] audit: type=1400 audit(140.363:15627): avc: denied { ioctl } for pid=6031 comm="syz.0.695" path="socket:[16442]" dev="sockfs" ino=16442 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.216838][ T29] audit: type=1400 audit(140.391:15628): avc: denied { write } for pid=6031 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.302416][ T6037] lo speed is unknown, defaulting to 1000 [ 143.841808][ T29] audit: type=1400 audit(141.149:15629): avc: denied { getopt } for pid=6044 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.012919][ T29] audit: type=1326 audit(141.317:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.044700][ T29] audit: type=1326 audit(141.336:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.067616][ T29] audit: type=1326 audit(141.336:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.091981][ T29] audit: type=1326 audit(141.336:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.116581][ T29] audit: type=1326 audit(141.336:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.140418][ T29] audit: type=1326 audit(141.336:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.164060][ T29] audit: type=1326 audit(141.336:15636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 144.457305][ T6062] lo speed is unknown, defaulting to 1000 [ 144.959860][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 144.968884][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 144.978214][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.014813][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.023824][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.033357][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.168578][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.177848][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 145.187865][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 146.264356][ T6121] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 146.384628][ T6124] lo speed is unknown, defaulting to 1000 [ 147.493903][ T6136] Set syz1 is full, maxelem 65536 reached [ 147.644686][ T6151] wireguard0: entered promiscuous mode [ 147.650328][ T6151] wireguard0: entered allmulticast mode [ 148.473757][ T29] kauditd_printk_skb: 1263 callbacks suppressed [ 148.473772][ T29] audit: type=1400 audit(145.480:16900): avc: denied { bind } for pid=6171 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.510951][ T29] audit: type=1400 audit(145.517:16901): avc: denied { setopt } for pid=6171 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.809041][ T29] audit: type=1326 audit(145.789:16902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.2.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 148.906237][ T29] audit: type=1326 audit(145.826:16903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.2.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 148.929231][ T29] audit: type=1400 audit(145.835:16904): avc: denied { create } for pid=6180 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.948753][ T29] audit: type=1400 audit(145.835:16905): avc: denied { connect } for pid=6180 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.968750][ T29] audit: type=1400 audit(145.835:16906): avc: denied { read } for pid=6180 comm="syz.1.751" path="socket:[16021]" dev="sockfs" ino=16021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.994082][ T29] audit: type=1326 audit(145.835:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.2.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 149.017317][ T29] audit: type=1326 audit(145.835:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.2.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 149.046347][ T29] audit: type=1326 audit(145.835:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.2.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277671f749 code=0x7ffc0000 [ 149.476086][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'. [ 149.621593][ T6200] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 150.334312][ T6206] lo speed is unknown, defaulting to 1000 [ 150.982352][ T6230] lo speed is unknown, defaulting to 1000 [ 151.976357][ T6234] __nla_validate_parse: 1 callbacks suppressed [ 151.976377][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 152.267488][ T6236] tipc: Started in network mode [ 152.272447][ T6236] tipc: Node identity ac14140f, cluster identity 4711 [ 152.280227][ T6236] tipc: New replicast peer: 255.255.255.255 [ 152.286801][ T6236] tipc: Enabled bearer , priority 10 [ 152.294098][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 152.303240][ T6236] tipc: Disabling bearer [ 153.115281][ T6263] lo speed is unknown, defaulting to 1000 [ 153.391480][ T6272] lo speed is unknown, defaulting to 1000 [ 153.609602][ T6283] IPVS: set_ctl: invalid protocol: 10 255.255.255.255:20003 [ 153.639876][ T6284] bridge0: port 3(batadv1) entered blocking state [ 153.646496][ T6284] bridge0: port 3(batadv1) entered disabled state [ 153.677321][ T6284] batadv1: entered allmulticast mode [ 153.683418][ T6284] batadv1: entered promiscuous mode [ 153.803669][ T6283] ================================================================== [ 153.811925][ T6283] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 153.820324][ T6283] [ 153.822694][ T6283] write to 0xffff88811bf0de04 of 4 bytes by task 6288 on cpu 1: [ 153.830992][ T6283] inode_update_timestamps+0x147/0x270 [ 153.836981][ T6283] file_update_time_flags+0x26c/0x310 [ 153.843367][ T6283] file_update_time+0x17/0x20 [ 153.848381][ T6283] shmem_file_write_iter+0x9c/0xf0 [ 153.853992][ T6283] iter_file_splice_write+0x66b/0xa20 [ 153.860035][ T6283] direct_splice_actor+0x156/0x2a0 [ 153.865460][ T6283] splice_direct_to_actor+0x312/0x680 [ 153.870913][ T6283] do_splice_direct+0xda/0x150 [ 153.875747][ T6283] do_sendfile+0x380/0x650 [ 153.880240][ T6283] __x64_sys_sendfile64+0x105/0x150 [ 153.885581][ T6283] x64_sys_call+0x2db1/0x3000 [ 153.890580][ T6283] do_syscall_64+0xca/0x2b0 [ 153.895251][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.901200][ T6283] [ 153.903565][ T6283] read to 0xffff88811bf0de04 of 4 bytes by task 6283 on cpu 0: [ 153.911233][ T6283] atime_needs_update+0x2a8/0x3e0 [ 153.916388][ T6283] touch_atime+0x4a/0x340 [ 153.920880][ T6283] shmem_file_splice_read+0x5b1/0x600 [ 153.926389][ T6283] splice_direct_to_actor+0x26f/0x680 [ 153.931822][ T6283] do_splice_direct+0xda/0x150 [ 153.936913][ T6283] do_sendfile+0x380/0x650 [ 153.941816][ T6283] __x64_sys_sendfile64+0x105/0x150 [ 153.947237][ T6283] x64_sys_call+0x2db1/0x3000 [ 153.952041][ T6283] do_syscall_64+0xca/0x2b0 [ 153.956816][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.962760][ T6283] [ 153.965120][ T6283] value changed: 0x1bc95d5e -> 0x1c58186f [ 153.971962][ T6283] [ 153.974595][ T6283] Reported by Kernel Concurrency Sanitizer on: [ 153.981508][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.4.772 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.995989][ T6283] Tainted: [W]=WARN [ 153.999816][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.010161][ T6283] ================================================================== [ 154.176589][ T1712] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 154.186098][ T1712] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled