last executing test programs: 1m8.185242381s ago: executing program 4 (id=3066): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000740)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x5000, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_u}, {@mmap}, {@cache_loose}, {@ignoreqv}], [{@fsmagic={'fsmagic', 0x3d, 0x589}}, {@obj_role}]}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000004800010026bd7000d8e20a041664aff081fff6df250a008000", @ANYRES32=0x0, @ANYBLOB="05000000080002000200000014000100ff010000000000000000000000000001"], 0x38}}, 0x44080) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 1m8.106378024s ago: executing program 4 (id=3069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@bridge_newvlan={0x30, 0x70, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004001}, 0x5000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x0, [0x8, 0x7, 0x5]}, &(0x7f0000000480)=0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0xe, 0x8, 0xae, 0x0, 0x1, 0x20727ff, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x10, 0x5}, 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xff81, &(0x7f0000000100)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0x3e}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}, {&(0x7f00000001c0)="1663b331c3bf9534525784f9f4558909c5b1a19e7f7dd74f5576d99b7166c13465e7f5e4c47883e70aee845e1083df1768a76e40614062ed926c98b5347ed16d15f52193792db0cd93435ce1889dbe873555d16e308b1bfa4300386836d401f2a2dad5e2fba8b1977071ce9daeeba03df660c0c34a0d8c67000400008904a31f7cda422d62b091465305c421d2", 0x1e}], 0x3}, 0x400c010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x80000, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x1ff, 0x5, 0x7, 0x3}, {0x2, 0x5, 0x7, 0x80000001}, {0xff1c, 0xd, 0x8f, 0x800}, {0x81, 0x1, 0x8, 0x7}, {0x2, 0xbc, 0x2, 0x8}, {0x9, 0x5, 0xb, 0x1}, {0x0, 0xfa, 0x2, 0x10001}, {0x1, 0x1f, 0x81, 0x3}]}) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 1m7.986576769s ago: executing program 4 (id=3071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_io_uring_setup(0x472b, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0x3) 1m3.666357736s ago: executing program 4 (id=3081): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x50, 0x10000, 0x0, 0x5, 0x8, 0x20205, 0x1, 0x0, 0x8023, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x6, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xd0, &(0x7f0000000e80)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x7, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000009c0)='dns_resolver\x00', &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x3, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x101]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffff00, 0xff000000, 0x2, 0x9, {@mac=@multicast, {[0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x101, 0xfffd, 0xfffa, 0x7, 0x201, 0x2, 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x300}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 1m3.295048743s ago: executing program 4 (id=3137): memfd_secret(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) 1m0.740471363s ago: executing program 4 (id=3157): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) io_cancel(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r8], 0x24}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000040)={[0xdecc]}, 0x8, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="a7bc7fca6a9a4c1ecd7b6945aa1e9b93b94d4b007b3efa0455e9f333a49bc5a4bd10275e7cad0e12f1369296626ee4efa51ab450775f7c04731572e882907985ac6ba26e32c191975eb1795eb7204d2993a5bdc9f38cb117e7540c22f1ec88614f6e5752e4a041216ab43c0c0f6bb1355654a9b6a0a128387c08f546478003872255a3fb63845c56a2781e049c9544f14cfaf248ef31a3dec532b21836fd1fed3887b75a0ef1731a96d2762533e1f0d978d045f3a3b6d1a640f4de38ef543fe7556d870291"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x1, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x59, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0xa360000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x493d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18f1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) 1m0.715756154s ago: executing program 32 (id=3157): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) io_cancel(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r8], 0x24}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000040)={[0xdecc]}, 0x8, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="a7bc7fca6a9a4c1ecd7b6945aa1e9b93b94d4b007b3efa0455e9f333a49bc5a4bd10275e7cad0e12f1369296626ee4efa51ab450775f7c04731572e882907985ac6ba26e32c191975eb1795eb7204d2993a5bdc9f38cb117e7540c22f1ec88614f6e5752e4a041216ab43c0c0f6bb1355654a9b6a0a128387c08f546478003872255a3fb63845c56a2781e049c9544f14cfaf248ef31a3dec532b21836fd1fed3887b75a0ef1731a96d2762533e1f0d978d045f3a3b6d1a640f4de38ef543fe7556d870291"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x1, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x59, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0xa360000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x493d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18f1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) 3.394905283s ago: executing program 3 (id=4241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 3.377409914s ago: executing program 3 (id=4242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(r5) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x29, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) getpriority(0x1, 0x0) 1.439357397s ago: executing program 1 (id=4259): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r0, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.260280175s ago: executing program 3 (id=4266): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x3ff}, 0x18) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804060000e3ff0000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020e000000b70300000000000085000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) nanosleep(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = io_uring_setup(0x1020, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x8000, 0x2, 0x377}, 0x1) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) 1.189056578s ago: executing program 0 (id=4268): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1.181464828s ago: executing program 3 (id=4269): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40851}, 0x20024090) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000080000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) 1.169719999s ago: executing program 0 (id=4270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x1) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.14993228s ago: executing program 0 (id=4272): r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r4 = dup3(r0, r3, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x24004041) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r4}, 0x18) r5 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r5, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095", @ANYRES64=r2, @ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r6, 0x0, 0x3}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x850) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3, 0xfff7}}}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.081637173s ago: executing program 5 (id=4273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x20009, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0xffffffffffffffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x65, 0xf}, 0xb, 0x1ff, 0xb0f0, 0x2, 0x0, 0x0, 0x4}) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) setregid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000708c1eee5c74ce1a3da5a924468fb2c404b2103bd4af9e30346518ff0dde8bc28decfde59f6a5fc7c42da3e2390ca8dff171b9f165b209337f679392c5f733780a64e27bb93ae5fe69f6b321c1b510483d7066d09de1d2f5fa0a1a7612642060d8be0b4154d0688bc01c93ac29ed1b47d6d56e9398e6218144d554c80e3c5f8a4c0f54f40c6a084b2d054020b6be9b06297ee6b5af5161513f900a8e865ec932377dcbcaf0b74d8fcb85e11fcf6c04cdb0744a398e4657acc36e6044a4f7bcce05283bb72e268e2d1e68682acb4d4e3e33f829b3069648a00b00e0cdf42293f95960afbf7836dd6fc5f5dd1dd09366b751bc41c1400e1ba45ab6f3db244f7f486c906b4a4f65ebd19ecb833a34553f2b7259b7743a222ad4bbe672017552721ef3807769a3a2ac35f7781daf240b9f92bba6ff714f55e7b21dd392556bec8965e2cce2b99a8ff07d351f8e0e8a25e490d075f09d13092d929839905fc05eed4429d8d5325e01f30673c315f01dcb63cc7f7cb3fa459d2c46b9a1f12c9f64b1ed391ce5cef00ca4acc12c916e04eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 875.408552ms ago: executing program 0 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) 875.247602ms ago: executing program 0 (id=4275): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x6fa2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 871.714792ms ago: executing program 0 (id=4276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(r5) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x29, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) getpriority(0x1, 0x0) 834.885144ms ago: executing program 5 (id=4277): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x2810cc6, &(0x7f0000000380), 0x9e, 0x52e, &(0x7f0000000e00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x80000) 547.372966ms ago: executing program 5 (id=4279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff01000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000ee0700010001000000080001000100000008000100020000000400030018000180140002006c6f"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 547.044546ms ago: executing program 1 (id=4280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 495.988218ms ago: executing program 1 (id=4281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getcwd(&(0x7f0000000140)=""/237, 0xed) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) syz_io_uring_setup(0x4175, &(0x7f0000000240)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000000600)=""/207) io_submit(r8, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000003c0)) 386.899153ms ago: executing program 5 (id=4283): syz_open_dev$usbfs(&(0x7f00000000c0), 0x4000000000203, 0x10002) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 358.551464ms ago: executing program 2 (id=4284): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 330.234535ms ago: executing program 2 (id=4285): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x28, '\x00', r2, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pread64(r6, 0x0, 0x0, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"7ca769aba8f0c23d996aac4f02bf5951", 0x0, 0x0, {0xffffffff, 0x1}, {0x2, 0x8}, 0x5, [0x9994, 0xf44b1cd, 0xff, 0x2, 0x0, 0x1ff, 0x1000, 0xf0, 0xfffffffffffffffc, 0x4, 0x7cb, 0x1, 0x7, 0xef, 0x4, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000540)={{}, r7, 0x0, @inherit={0x78, &(0x7f00000002c0)={0x1, 0x6, 0x2, 0x9, {0x2, 0x7, 0x0, 0x8, 0x4}, [0x8, 0x1, 0x7, 0x80, 0x0, 0xf0]}}, @subvolid=0xf20}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x400003, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @xdp}, 0x94) r8 = syz_io_uring_setup(0x8dd, &(0x7f0000000100)={0x0, 0x1bd, 0x400, 0x1, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x613, 0xba01, 0x9, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x290) 282.879338ms ago: executing program 5 (id=4286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) 270.271998ms ago: executing program 1 (id=4287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) 264.632408ms ago: executing program 5 (id=4288): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r0, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f0000000040)='.\x00', 0x35e) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80800) ppoll(&(0x7f00000004c0)=[{r2, 0x1007}, {r2, 0x4004}], 0x2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) setuid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="98000000010a01010000000000000000020000050c00044000000000000000030900010073797a30000000000c0004400000000000000002450006005d4828fa783e44c1950160b2f40259f4d35ab4c362bc19c910ba2d9202584f35a1ddb53a27e45ade62871a2662aa40bcca7cb2a84dd9f707440c64dee2bf8e16450000000900010073797a31000000000900010073797a3000000000cf2a479893206e8a5503190ede745d7506b207274bf1deccabf437213a90e954585842c6f07523204e2d4ac5668092cd75d488c23b43cd77a3b6856d867055c50b9b7a5e735ce677e2a0e6dcb03609109f4995b644d3a8eebf2e24ab33ff26e8522e90d316ecca22e9cfa85fcd0cb6b700fc3e9c3e80ffc8005588b1d2e5c1144355d85318b65c5afa4cd23c72ffffff7fe274a05246ba94354102bde03deb9048ca5834a7def715af8e7ed9026bc17faa6897ea4b27df3f0b3f90289fa614c1a7918453d5345ad92048679fb9136dafab36626899b0c5130c37"], 0x98}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, [0x0, 0x4]}}) listen(r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0x0, 0xee00) listen(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1a5}], 0x1) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 206.368721ms ago: executing program 2 (id=4289): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0xfe, 0x2, 0x8000, 0x4, @private0, @local, 0x10, 0x30, 0x1, 0x1}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x18200, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) 192.318301ms ago: executing program 3 (id=4290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0x1ff, 0x3, 0x0, 0x2}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000009c0)=0xe8) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x19, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 160.581822ms ago: executing program 1 (id=4291): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) 160.162142ms ago: executing program 2 (id=4292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x1) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 148.276953ms ago: executing program 1 (id=4293): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000003, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 103.752815ms ago: executing program 2 (id=4294): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x4040, 0x11c) r0 = io_uring_setup(0x6e9e, &(0x7f0000003180)={0x0, 0x1e3d, 0x1000, 0x0, 0xc3}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="ba563e5540b096dc1a4581deee2fbd481b3b01e22cba1d86147995f234b0e5228746a59a81a79e98d0548d9cd66a9b2953c051394134d2ca123b3e2e1327b955e488857120d64d9cb010275c2ffc5ee1a4a51b8cd4f8042ce161d4960afc03babcf60e5b753dd584f83be5a3be7b7b60322661409947b249774353113b74716186e551f6524fd36d797b40d4a6be1cbf0e48d46c34d17e6cbfae5586bf5e85c7f2c1b50493103a74318b909d894be76a114acd79ea5289b0b6e15ec3b532e673db76", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, 0xfffffffffffffffe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) signalfd(r1, &(0x7f0000000180)={[0x3]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='mm_page_free\x00', r7}, 0x18) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r8 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x8000002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 55.536097ms ago: executing program 3 (id=4295): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = accept$unix(r1, &(0x7f0000001900), &(0x7f00000004c0)=0x6e) sendmmsg$unix(r8, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="a243050288a8b41ad4061df2ba789cf6dff3938abcd76691e2057e3d7ca354d7312270a57d1b5d9e7a4a747d279c2e87797d3ae45b724a7cb9873fab54f9d14498a03c3e791edbe0b3338bf8f3b0fef2bd1fa67976d13ba73f85471697a0d3f552d9d4a96f2fce3337f2fdceb25885826da04b49064a9eb6e3fbc6a21bfcdd3feb7777d1e0f3fa277e151eeb178ab42a3734498f3be269b1b67b0a60bde540ada94a8e467922511f7eaefa70e565ac8e60fdd4d0e91195c5eaef237bce98bc4ecf30b53d79b21272", 0xc8}, {&(0x7f0000000340)="7024c60d0a9adedfefdc19a85b3b7ee0fbbc7a287b72b0f2be31a7c405063726fbadbec7d95c63a4dc49f8653fc4c83b8dbc7dd4088d7d104fbb04c83c603ebf6749d7299473730eb94e5cb8caab0f41a377f29bdc2918d808f44fd4b4de73d2d5f6c3706c79bee5e5bd4e0c927e0f91b70d20704c0e504526b490cf355977587df55364ae73a6c689d00510a99fb68d66f0199e6ccc628239fbd7b7f6cb25717bb6e90d98d412acb1273404db18b6e742b4d8d5ef3f90062d0c61ac446cab080eb05827c52181ac24", 0xc9}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000480)="fd767bc47d92475e3196c5aa95d6e932dd9cafcc358c46d0af17a32bf5debe2baba2c4fa6bb203a67795a76482de6efd1c6944d51ba03bf2cacc908aa2", 0x3d}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000580)="e8b6c7099554f7696ebf7da862bece0376efb380a4806b66c4b73593c83b18c36097c13ca1cf9823e1963b3033dcf409c20b172e6c800bf14417735f6673cd63d7457de30f51ad919fdafabe93af7f017d7226d32ec77a89aa82a67a9e2c233b6d983fb8bf98171e115ee1710173017bccf31653ddb3cb57e37ae30698229161513568546453a943689d9c2ddc7eb9c012d4dd4b0f3ecc22309bbaca78ad5fa3b55da1edcae4a1695a751b3fc1ec226f48ba12af86164e8c3b8d77fb2b76b5b5f6a4febb8dc53ef331b7f3", 0xcb}, {&(0x7f0000001700)="66742089d0b1d7df508ce21e", 0xc}, {&(0x7f0000001740)="038525b1cfcbc2132ec754c29b1afce7fb2fdf3f3ac7c4fb9d079ba37d20d659385f131c6a126de8cebf5bc00797dfe006a7fa79fccd4e393a39c76330df3394fbb533795af621fcbd6245cde1aa57b0a6008ffcb7cfa0a63583cce29ba933bd449641239c1da7259a5b6f5c2f922fb017694721f8bebbcfa039747cd30ebd9e7a5c1b18cf06ef420cf6ee02fdfa32813236fc293e8bd72abf03cba4f8b76e81b8cfa1d0784a960b244bc3251b5bf54d", 0xb0}], 0x5, 0x0, 0x0, 0x4}}], 0x2, 0x4841) r9 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=4296): syz_open_dev$usbfs(&(0x7f00000000c0), 0x4000000000203, 0x10002) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4297): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x24, &(0x7f0000000080)=@generic={0x8, 0x2, 0x1c, "b185b24f", "6281d95143d7170d84e682fc12ef8ce59353687ebd684b1a87941b36"}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "84a861a5", {0x1, 0x6d, 0x8, 0x1, 0x1}}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x1, 0x3f, {0x3f, 0xa, "bc9b42c625425d96abd8cd3c1aefe8edfa967c674a4359cba7db9efec552d0cfec1f9c094b888b847ab0569eab67a634c20bac353bddd719c9133a00fc"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xb, 0xc5, "90c5bbc9f0854034f6efe048a13ce6592c6db0630cd48da73af468f72465fea91b3d679289918ea61b95cee0aa21548f04126cac33d6895ffbf1658cc9efc02ab052c84846f56076cf6396ddeed03b23147ec6b5ffffdbaee335c836e88bb844500316546fef6dec2d123f74a948a42f66d2d2cf361a3e6fb576ea4cd5981afc1ceda8de04d9005cf2243a3592d02af306248fa657b0b595b30887ad177e92dbf08e4a60e21637616e0fb088f112224c4b304304a793c3d64d6a2770829de45447047301e1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x77, 0xdf, 0x7, 0x2, 0x5, 0x7, 0xa32, 0x3, 0x1, 0x3, 0x7, 0x55e0}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x22, 0x6, "1106515fb2abeb5e9951471547efb433c9b3ceaedb2fea30f8eb498b867b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0xf8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0xdc, 0xc, "b03580eab54fa76601c355d085b4c0288bb489a2b9e9b161c6499d9fe52f08be94c8bd14bd5185385493fc9d8e085a112c7a46d3605ab35516f14cd3056dbf1c68ad19233778ee4086c12d8cf0d12ac907670ade69899bfbaa3c2c2d1953e26fedb6b07e33728f81fbdfda38a25078f40cd9ef27d1bfd61f81eb90633f31d435dbadaf7dcd87967b21d74051d573c84dbccb6ccb809d587d3c287ac8cd427fe0e347ff3a22e52b53e472e08d53f6f9e4a01d913af68d8dcd5a70a48640afb606709c55b22fabede7cbf6af6f347958d4891f08f632a753e8"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x114, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xbf, 0xc, "aa4960012704e380923e78a124d8d4963ab4c0043998be6befd13c1a0a9aa0b53a9ff72b80f5cf5432fbcddc83face705e3f75509c2fbcbdac2f4b6f130d3a7ce472981cc49f3d5e6c0abe6b79c8511b9729db7f9d1b136616a0198d852dba777a36f9a64f25bf2fbc64a2a4472a0b7ba6f80cb8e326594e41427403d63395d74113ec34c814052f844315fca1e83ef7f6198aa55b617d91d749c7b9ba665bd71754cdce3f662e40b543812a0d8c9f3cab711debe80d7b18fbd862"}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32f5b9db}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x178ae1f}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x65, &(0x7f0000000900)=@generic={0x1, 0x0, 0x5d, "d81021c0", "39cb062dd2f304e5e780afba8642847ebd9aa0d0373f6004462eefb4a07ef6da10de3bee1a5a4e2d058c2795f0cbce9e46f406487b15cd2c53b2ae12d45b7247d5dceada844405de9d017befcc2148b86a98427b63be8eb658185be7b7"}) (async, rerun: 32) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/29, 0x1d}], 0x1) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1274, &(0x7f0000000a80)={[{0x71, 0x4e00, "4930c28c603fed9a30c4dc492d0344373ea8240fb61f2bcadd4839f7d5a3f3edbaff4c176ba76166f47b1b3c0f321a87478649d3802fe7cb7e74305a95e088b99cc4ee27c7abc4cd549271fdccda4d8978644ab734b8150c82d13b316f5517534c08c0b6bb7433e34e066c7389261c7430"}, {0x41, 0x4e00, "398c4ab887dc3043a07a496f39fc3fbd0dc3a0e2a746607931a05ffbe5b32d92a93ded560473db868a10c1d5e7c059611d345f207d631d3081c2ddce3b822594e3"}, {0x76, 0x4e00, "784a5e78b7b66b4aa8c79d7ab7d3c466b333a13efe6b397518d0bc9a60aee6ab4e86fc8ecb1a5594c4cd04a23cad775021b4f3a5cec713889f852454cc3fd028ea4386b377351cad401a607186afc87fb214c6772588112251a471026038eaaf4fc7b6078fa1ae1bd6f7b9a8a5535dba59fdd45689dd"}, {0x21, 0x4e00, "008669b6c307b90d860cc8266e9f3d71f50dbbba8dc237165b666890689d48b266"}, {0x1000, 0x4e00, "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"}, {0xc6, 0x4e00, "f3d6215991711556f4a3ec8cfadbfcce863b3cc10e091feb332675983ff029fee753d263012096bf91df8ebb5bd050fc2c2dae6268355b4ce8a004bb43b91ea5c774009c0aefe88e98d32c6a71ca767076fa178bf6f2ed6cb275863b541478c5f5d6b1f5b7a1a9774d358d950e6a094f131af4623872df986e9f085465841d78aca9d485be0e4d2d0612bd122023464b4675fe2cf86986c6469cfd2c60e30b44b7f4b4e385c2b2594e70a01391ce724a03c776eab50829e5680244bd140d19fe432e416d297d"}, {}, {0x35, 0x4e00, "d1e9ce79db0b312d39be9af6307a9b3026ecb0b4d5d8172998a2a2c6ced525db7768f1986a43aea5894e0ad04ddc9f5940cf0f1d20"}]}) (async, rerun: 32) r3 = syz_usb_connect$uac1(0x4, 0xdd, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xef, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x3, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x9}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x5, "3db225"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x0, 0x5, 0x4, 0x0, 0x70, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x1, 0x9, "f983747e"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x9, 0x0, "228d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xf801, 0xfffb, 0x80, "8f2583"}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x4, 0x7, 0x47, {0x7, 0x25, 0x1, 0x82, 0x70, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xa, 0xf9, "97fefc7e8a24"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x2, 0xff, 0x7b}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0xff, 0x4, "dc"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb0, 0x2, 0x9, 0x93, '\t8:'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1e}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe, 0x8, 0x2, {0x7, 0x25, 0x1, 0x80, 0x8, 0x1}}}}}}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x200, 0xfb, 0x5, 0x9, 0xff, 0x5}, 0x8, &(0x7f0000001e40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0xdc, &(0x7f0000001e80)=@string={0xdc, 0x3, "041c7561033c7f71271ef5bce614cd23f9e0b10c0b21e18d4c1782e3b9cf02947b424d666f1b014f82cc6790dd453370881b80625f2235310e55a120e3079a96aae7c1d2453aeb57fb4c5004f45ec07b53d238592cc14d5dbced97d7b230008a58229b3190fc82c720ec6885f3cd39b32d4a48fd0568098ccf5b5b6694ba1d353892d15a14b9957f193077fc35043186ebbeb489cd3246245999d3e4f4c49a4cfc400b597ff0ddb68d7d31e23e2ae88dc088de3d8b3d11c34b66d036570a4b7e3e391493c5b4df0238d01a2303d3a8e247e1a082beaa6e75513f"}}, {0x94, &(0x7f0000001f80)=@string={0x94, 0x3, "6d5b2fd592040702be9b8c22ca3d0b6ab4ee096b41f513b4a827394eb7fea1fddeba6d0e0a499a143d7e3751fa36113a1b6623fe9fe9e076da6baf3ae9d0c09586a2caa6238241910ba6b8e8eaa570e6cc44391d7a255fdfa8d896b012cf8491b6ca722ea4ea8e3ba94cc033255dcf732d1e9d6be1a9eb324391a10e5ddf130a0a73274d20461a96c718992aa83ae1dd257c"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0xc07}}, {0xed, &(0x7f0000002080)=@string={0xed, 0x3, "33a2a3fae51f0a56a26704152a28c8794b223b1f8e07934e315e9ae28cefe368933300af110f198b08b113288a0312464a88ec424cfeaa1b2a923bf107e9d85c792c895dafe216dd557fa22a710c713c4abbf401b0400cfd1827ad2fac5cadbf405137c375a6c84bb1300e33ee6a98fc15e61278feb3f4ac5588723e5f4e209c9a8ff2d94327134b2e4d9b66ffd5eba5233e24f48917e194feb4e2cdbe55403e2c4be674302c98261aa2a397feb4c2b548ce34e007092692bde7e26cdc5a7ed553f406b7f290353939ac64ad75d2b50a2e2fe6d2d9c309bbe9c88139b26273e97bb876323a12cce5e56aa3"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x35}}]}) (rerun: 32) syz_usb_control_io$uac1(r3, &(0x7f0000002300)={0x14, &(0x7f0000002280)={0x0, 0xf, 0x17, {0x17, 0xf, "d898126bcc48ab80e6b8e60650dad9881cb6952edc"}}, &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000002600)={0x44, &(0x7f0000002340)={0x40, 0x8, 0xf8, "4a124564e72f3a17ac595bde6f6ecc29b3e0b6a7f7df1b465f0b7286cd7306f668f12c94819b21b6ada6c75f2458e2c472d822812930967df85567cdc14e8cc1b0320fb9090d739c333fffbc91305fc6831cb36121659f883f11e6cdd00c42af6fbd632d9daba648deb71a9dd9794411d52e2d56d0ae56d08818f5d6b514316bb52963b6990d2d957c826e8fa7988a3f08e21023348649ede1d49dfc2dd057080ce954e0e40ca3d02746b98aad998423961e9930d9fcac5bbfd653a49a678ada7a83f8ab775b9cbd73a3ddfc1ac17f48d528abbe3803e8e34eaee2a6e9aed185c631855aba510fa422245946902a181fad045552e8f9c50b"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000024c0)={0x20, 0x81, 0x2, "146e"}, &(0x7f0000002500)={0x20, 0x82, 0x2, "bba2"}, &(0x7f0000002540)={0x20, 0x83, 0x1, "f9"}, &(0x7f0000002580)={0x20, 0x84, 0x4, "b7d018f4"}, &(0x7f00000025c0)={0x20, 0x85, 0x3, "aec6d5"}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000002680)=@ready={0x0, 0x0, 0x8, "32877f34", {0x1, 0x8001, 0x3a7a, 0x0, 0x23}}) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000026c0)={{{@in=@private, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f00000027c0)=0xe8) (async) syz_usb_ep_read(r2, 0x0, 0x9b, &(0x7f0000002800)=""/155) (async, rerun: 32) r5 = syz_open_dev$evdev(&(0x7f00000028c0), 0x1, 0x301080) (rerun: 32) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000002900)=""/4096) (async) syz_usb_connect$cdc_ecm(0x5, 0x8a, &(0x7f0000003900)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x2, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x38, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "f014734f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x5, 0x6, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x2f84, 0x21}, @mbim={0xc, 0x24, 0x1b, 0x10, 0x9, 0x3, 0x46, 0x0, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x6, 0x40, 0x8, 0x80, 0xb}, @ncm={0x6, 0x24, 0x1a, 0xd, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x6f62, 0x1, 0x6, 0x1, 0xf3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x49, 0x8d}}}}}]}}]}}, &(0x7f0000003a40)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x201, 0x5, 0x6, 0x23, 0x20, 0x5}, 0x12, &(0x7f0000003a00)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x0, 0xff, 0x5}]}}) (async, rerun: 32) r6 = creat(&(0x7f0000003b40)='./file0\x00', 0xa0) (rerun: 32) perf_event_open(&(0x7f0000003ac0)={0x2, 0x80, 0x9, 0x3, 0x2, 0xf9, 0x0, 0x4, 0x5000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000003a80), 0x1}, 0x1000, 0x7, 0x3ff, 0x7, 0x8, 0xfff, 0xe, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r6, 0x2) shutdown(r4, 0x1) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc4, &(0x7f0000003b80)={[{0xbd, 0x4e00, "3f9cc56314c1a15d59304b4d4ef019574929deb1e13b0151ded05e3356db5233ef6d631a395cc94f4fd43f152d18f6118ac2b720c966fa063bf38b369686cd5489b1bff80f4f283716232fd8e8944184eebff2476d7af606601fc9f04f8e711ed04e78c79bb59419f7daaf75c2ff4fac7564f9130bd47014b04e721034d32f84f7e6360197b121fac67bdcaedc4e08adafc85dba2f76b9584842c433bcd7697b577de1d70aa5dd9cba156d43a5294a6fc6eb0277c26db80edfa85c69f9"}]}) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x110, &(0x7f0000003c80)={[{0xba, 0x4e00, "223cbdcbe5a7dab852167731bf2d90dfd70f59fb9f37662123992434a4c13a1b5fc62bda879c870fb9de660203576d460bbe36f0d3f1c7a608177cb55350a228c29b64554cec7cfc681e55efcf2730579fbc719f3be94f4c3b58334edc9a17c5d0a894dd901553d17486bb4a08e93a3d8ea0140e82d4c78b01a0f53a4f54539dcb55e4a51cfa566ad20172740818bc5cddb43ab7e3403e5f02383c5adce8661f007e078c0eeb0aebda88fd066f819ea35254eb130dce4df6bf6d"}, {0x4, 0x4e00, "f64f31fd"}, {0x41, 0x4e00, "a9500646a7d4eec361c6330b0109c3e99fd4bf52cad0515cc4fe0c8bb00ac8a4b8d293ac33cbb25df07d1a20dce142e10ac979ba68b3ecb2eb27973fa09a78f270"}]}) r7 = syz_usb_connect$uac1(0x5, 0x105, &(0x7f0000003dc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x5, 0x0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}, [@feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x6, 0x9, 0x4, 0x0], 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x1a, "f680a8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc, 0x3, 0x4, "d58623"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x10, 0x10, "", "903e"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x2, 0x8, "12348778b02d14"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xd4c, 0x8, 0x7, "556fdeea12"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x5, 0x9, "4d9afccedb16"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x62, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x10, 0x9, {0x7, 0x25, 0x1, 0x81, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x81, "9546c31b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0x7f, 0x1, "a47a", '='}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x98, "e971"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x95, 0x2, "", "f527"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x8, 0x1, {0x7, 0x25, 0x1, 0x80, 0x10, 0x3}}}}}}}]}}, &(0x7f0000004300)={0xa, &(0x7f0000003f00)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x240, &(0x7f0000003f40)={0x5, 0xf, 0x240, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xb9, 0x6, 0x2e, 0xff00, 0x0, [0xb9c73dc9c2199bd4, 0x0, 0xff3f, 0x180c0, 0xff0030, 0xc0]}, @generic={0xa9, 0x10, 0x0, "9c14106a7f7416560af7987d0f7429b780d14c6391aeff9fc7887c5151cfb123bc78134d053b7dca8fb3cc7ca7119232e27e49b0cb4274d1790fd42db56bc2aa1d5c45bc4e1d6a9e4fed5e11ad7c4e091ba80cb144f81361ff915e6407e4c688321c9612d5171c6186043d8881eb655f8d6d4d4d8b517a86edded53e53ccfff650f7b3bbfa376a83442c1c4af6847fca31cf1ed4dc6b11d71fa1de7cbad74eca6a2f05699620"}, @generic={0x9a, 0x10, 0x2, "8eead6e84e975db676769de335da976814ef7366de0d8428da14913e9ef159bbbbd6d97d1dea625fa9b065a2fe463a6898bd7d3e0805d12dc4513787a0dc23996afe374e23fc4d1186d18391f58354eafd337211957249ed667fc4f6c650775ce9101205d71c1822949b509dd8b255aef0f97b7610902688cc4abeb6918217a160ab8242a4b30661f68bc9e1f0058243094590316e9dee"}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x2, 0xf0f, 0xff, [0xff0000, 0xc000]}, @generic={0xc0, 0x10, 0x4, "5e4b3f2fcb6789c61cd3318882aa370e5ee8f1d53b3c9c3649033e465650e1d99ef4be47eafa494114e84438e2906eb6a23c83d249b166c46ed037c967df2bf8752e3b5d816b9d8a2b0ec8b151ef5b74837ac3446aba71183af05c7de6f608143c466bfbabb31f30a49bfaf565e5a0206a737d06499a12ca0388bbdf5b4740f137111f91fc7183c2ab4011bc01636f20404e6f746bb1e40786348555b38b46bb2decf4971610e5493d447b3816118212fffc08b43348855bc0bb64bd32"}]}, 0x2, [{0x48, &(0x7f0000004180)=@string={0x48, 0x3, "bc73a96384f1cb6cdf2457f269ad24cb7e6a5bf483b537142a392698e2edbb7166ab4563ac724ad845ecd46a8a69c3b0e82179075ff9062fdb93dbdb03d2818362de1240b1ba"}}, {0xf4, &(0x7f0000004200)=@string={0xf4, 0x3, "aac79878b42a8db40045765df4d13ff432a0077dcaad065b748a2afb48f67f8d5071f9ed8ae3edd1a8e98ba7a51ccd0bc014ad05c97753a033d0b6a44cefbb9c29f44c79450080b5e36f4a72c97fdac7a7a2e70e2f7eb12ec7afe78d633074dc4818c526e819b17cd3cb55fdac5f7248bfd014a58900944f751437e59307e84aca312f8e8894c895079955b99c42a925ac75ca4d2ec4764a89fcef82f9dff0402b8d0964a5904c9d487bb3e48f77ad14f5934f8b17d129cd066acf2638e355cfbb6a21d3a78f9d42452df479751f56dd57c904ff206eb9e4e920ea4a06ae701449399db90ad494fa47960185249f8736e54f"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000004480)={0x14, &(0x7f0000004340)={0x40, 0x22, 0xf4, {0xf4, 0x22, "8687e4586adc22a2c0e618f75c3bf80615a33de9d599dbc256b4ba3bc310f1f96f5f9b5f104d57f2cc0b1368466cd21926abbd2ca8259e68b388d4eb957f492b2b2ac0049d22b7e380d167a0b758f8abc585304c1d6d366646fa075c72dfb045f72053ec6a64e53091a177ca2d29f1641ba6609b761c0c6ae6f19755d92e87b7e20dd3dd00dcd8a6b5cad15029f62aa5bcc4f24901a52481c765f4fa1507e94dc7f208e005fb152a72555dd63633a145aa118cf85167ab577f8a6d13f996b3baff94d772681835d3aef4c2b117fc5c58e4c62199b4c9ef9fba86dc5841c6e9454e90e32496cd28717e8b0424a090f4cba6ff"}}, &(0x7f0000004440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000004700)={0x44, &(0x7f00000044c0)={0x40, 0x15, 0x5b, "f0937eace1db030eee075f3342fa8ebbeeceed0e9f0a6feac6e91cd2930e99de594f12d781ede0d4a5fdac6bd60be1c3bdbfa1ca12f7e8d3d0d595c90ecc3734071fa4988e1cafc79952caae8e09d3444fdc1bb86ee712674fd0ac"}, &(0x7f0000004540)={0x0, 0xa, 0x1}, &(0x7f0000004580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000045c0)={0x20, 0x81, 0x1, '\\'}, &(0x7f0000004600)={0x20, 0x82, 0x2, "c777"}, &(0x7f0000004640)={0x20, 0x83, 0x1, "10"}, &(0x7f0000004680)={0x20, 0x84, 0x3, "167b47"}, &(0x7f00000046c0)={0x20, 0x85, 0x3, "01c3b2"}}) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000004780)=@conn_svc_rsp={0x0, 0x0, 0xa, "fa44766f", {0x3, 0x2, 0x0, 0x6, 0x9, 0x5b, 0x2}}) (async) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000047c0)='caif0\x00') ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000004800)) kernel console output (not intermixed with test programs): ith an up link [ 234.559065][T11118] lo speed is unknown, defaulting to 1000 [ 234.631866][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.644239][T11052] team0: Port device team_slave_0 added [ 234.657253][ T1615] failed while handling packet from 1:16384 [ 234.667549][T11052] team0: Port device team_slave_1 added [ 234.768344][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.775559][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.802326][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.911777][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.919713][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.946687][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.196655][T11052] hsr_slave_0: entered promiscuous mode [ 235.228323][T11052] hsr_slave_1: entered promiscuous mode [ 235.258925][T11150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'. [ 235.377624][T11156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.398310][T11159] loop3: detected capacity change from 0 to 128 [ 235.608338][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2872'. [ 235.670973][T11052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.684644][T11173] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.689148][T11052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.693550][T11173] vhci_hcd: invalid port number 96 [ 235.704081][T11173] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 235.713887][T11052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.739806][T11052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.751659][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2875'. [ 235.795466][T11183] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 235.915890][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.938790][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.948794][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.955916][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.978900][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.986046][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.009459][T11199] ALSA: seq fatal error: cannot create timer (-19) [ 236.042288][T11206] netlink: 'syz.4.2884': attribute type 1 has an invalid length. [ 236.070574][T11210] loop3: detected capacity change from 0 to 512 [ 236.078235][T11210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.088594][T11206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.106007][T11052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.149635][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2887'. [ 236.160602][T11206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.168496][T11206] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.191117][T11210] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.195427][T11206] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 236.205765][T11210] EXT4-fs (loop3): 1 truncate cleaned up [ 236.218340][T11210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.344214][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.438163][T11226] loop2: detected capacity change from 0 to 128 [ 236.439156][T11052] veth0_vlan: entered promiscuous mode [ 236.455424][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.457575][T11052] veth1_vlan: entered promiscuous mode [ 236.489095][T11052] veth0_macvtap: entered promiscuous mode [ 236.497365][T11052] veth1_macvtap: entered promiscuous mode [ 236.511071][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.526565][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.539191][T10770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.549997][T10770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.569762][T10770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.582714][T10770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.665404][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 236.665451][ T29] audit: type=1400 audit(1765103002.291:8603): avc: denied { open } for pid=11244 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.691900][ T29] audit: type=1400 audit(1765103002.291:8604): avc: denied { kernel } for pid=11244 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.727778][ T29] audit: type=1400 audit(1765103002.341:8605): avc: denied { tracepoint } for pid=11244 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.800511][T11250] ALSA: seq fatal error: cannot create timer (-19) [ 237.140618][T10770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.152459][T11278] loop1: detected capacity change from 0 to 512 [ 237.160977][T11278] EXT4-fs: Ignoring removed oldalloc option [ 237.177092][T11278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.201711][T11259] lo speed is unknown, defaulting to 1000 [ 237.212345][T10770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.220260][T11278] ext4 filesystem being mounted at /569/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.233824][T11291] netlink: 'syz.2.2908': attribute type 1 has an invalid length. [ 237.270148][T11291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.329304][T10770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.353990][ T29] audit: type=1326 audit(1765103002.981:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 237.378348][ T29] audit: type=1326 audit(1765103002.981:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 237.432370][T10770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.452203][T11299] xt_CT: No such helper "pptp" [ 237.457523][T11276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.498032][T11291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.514838][T11291] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 237.541749][T11291] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 237.551060][ T29] audit: type=1326 audit(1765103003.101:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 237.575399][ T29] audit: type=1326 audit(1765103003.101:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 238.086499][T11310] ALSA: seq fatal error: cannot create timer (-19) [ 238.165326][T11313] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.176598][T10770] bond0 (unregistering): Released all slaves [ 238.191764][T11313] vhci_hcd: invalid port number 96 [ 238.197049][T11313] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 238.222447][T10770] bond1 (unregistering): Released all slaves [ 238.249790][T10770] bond2 (unregistering): Released all slaves [ 238.349408][T11259] chnl_net:caif_netlink_parms(): no params data found [ 238.401654][T10770] IPVS: stopping backup sync thread 9687 ... [ 238.451875][T10770] hsr0: left allmulticast mode [ 238.474266][T10770] veth1_macvtap: left promiscuous mode [ 238.486152][T10770] veth0_macvtap: left promiscuous mode [ 238.491931][T10770] veth1_vlan: left promiscuous mode [ 238.492496][ T29] audit: type=1326 audit(1765103004.111:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 238.520894][T10770] veth0_vlan: left promiscuous mode [ 238.573896][ T29] audit: type=1326 audit(1765103004.161:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 238.597577][ T29] audit: type=1326 audit(1765103004.161:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79186ef783 code=0x7ffc0000 [ 238.631785][T11335] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 238.751793][ T3488] lo speed is unknown, defaulting to 1000 [ 238.757643][ T3488] infiniband syz0: ib_query_port failed (-19) [ 238.774216][T11335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.794820][T11337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.804970][T11337] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 238.817734][T11337] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 238.882909][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.890709][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.898386][T11259] bridge_slave_0: entered allmulticast mode [ 238.905747][T11259] bridge_slave_0: entered promiscuous mode [ 238.914508][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.921726][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.929770][T11259] bridge_slave_1: entered allmulticast mode [ 238.936327][T11259] bridge_slave_1: entered promiscuous mode [ 238.958599][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.971367][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.995437][T11259] team0: Port device team_slave_0 added [ 239.002557][T11259] team0: Port device team_slave_1 added [ 239.035737][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.042803][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.069621][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.084264][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.091316][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.117940][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.165695][T11259] hsr_slave_0: entered promiscuous mode [ 239.183884][T11259] hsr_slave_1: entered promiscuous mode [ 239.189896][T11259] debugfs: 'hsr0' already exists in 'hsr' [ 239.195804][T11259] Cannot create hsr debugfs directory [ 239.456338][T11371] ALSA: seq fatal error: cannot create timer (-19) [ 239.511111][T11376] loop2: detected capacity change from 0 to 512 [ 239.521491][T11376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.667514][T11380] xt_CT: No such helper "pptp" [ 239.685593][T11259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.719681][T11259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.744721][T11259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.763619][T11259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.800640][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.807978][T11259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.815418][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.822499][T11259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.873071][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.881690][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.950923][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.988108][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.012146][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.019285][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.050115][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.057339][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.104596][T11259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.115371][T11259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.143413][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.365639][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.472710][T11259] veth0_vlan: entered promiscuous mode [ 240.489506][T11259] veth1_vlan: entered promiscuous mode [ 240.528101][T11259] veth0_macvtap: entered promiscuous mode [ 240.541977][T11259] veth1_macvtap: entered promiscuous mode [ 240.558050][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.568015][T11414] loop2: detected capacity change from 0 to 512 [ 240.577858][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.599809][ T1086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.609614][T11414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.625880][ T1086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.640715][T11414] EXT4-fs (loop2): 1 truncate cleaned up [ 240.678354][ T1086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.704858][T11414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.727116][ T1086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.769439][T11422] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 240.790013][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2897'. [ 240.801048][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.620606][T11457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2957'. [ 241.673351][ T29] kauditd_printk_skb: 1127 callbacks suppressed [ 241.673404][ T29] audit: type=1326 audit(1765103007.301:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.719699][ T29] audit: type=1326 audit(1765103007.301:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.743571][ T29] audit: type=1326 audit(1765103007.301:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.767236][ T29] audit: type=1326 audit(1765103007.301:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.790952][ T29] audit: type=1326 audit(1765103007.301:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.814561][ T29] audit: type=1326 audit(1765103007.301:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.838337][ T29] audit: type=1326 audit(1765103007.301:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.862596][ T29] audit: type=1326 audit(1765103007.301:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.886228][ T29] audit: type=1326 audit(1765103007.311:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 241.909792][ T29] audit: type=1326 audit(1765103007.311:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2f3dd2005 code=0x7ffc0000 [ 242.217223][T11482] xt_CT: No such helper "pptp" [ 242.309284][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2969'. [ 242.418631][T11490] xt_CT: No such helper "pptp" [ 242.509298][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 243.199828][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'. [ 243.596905][T11547] loop2: detected capacity change from 0 to 512 [ 243.620035][T11547] EXT4-fs: Ignoring removed oldalloc option [ 243.647843][T11547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.661817][T11547] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.733726][T11546] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.037758][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'. [ 244.142216][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2998'. [ 245.196735][T11622] pimreg: entered allmulticast mode [ 245.306204][T11625] xt_CT: No such helper "pptp" [ 246.703460][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3036'. [ 246.710836][ T29] kauditd_printk_skb: 1644 callbacks suppressed [ 246.710903][ T29] audit: type=1326 audit(1765103012.331:11394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11719 comm="syz.2.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3d9f749 code=0x7ffc0000 [ 246.794009][ T29] audit: type=1326 audit(1765103012.371:11395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11719 comm="syz.2.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f3d9f749 code=0x7ffc0000 [ 247.315420][T11737] chnl_net:caif_netlink_parms(): no params data found [ 247.352237][ T1615] bridge_slave_1: left allmulticast mode [ 247.357957][ T1615] bridge_slave_1: left promiscuous mode [ 247.363698][ T1615] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.394417][ T1615] bridge_slave_0: left allmulticast mode [ 247.400145][ T1615] bridge_slave_0: left promiscuous mode [ 247.406265][ T1615] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.766569][ T1615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.794882][ T1615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.806646][ T1615] bond0 (unregistering): Released all slaves [ 247.824388][ T1615] bond1 (unregistering): Released all slaves [ 247.840495][ T1615] bond2 (unregistering): Released all slaves [ 247.857637][ T1615] bond3 (unregistering): Released all slaves [ 247.886372][ T1615] bond4 (unregistering): Released all slaves [ 247.977657][ T1615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.993168][ T1615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.054704][ T29] audit: type=1326 audit(1765103013.681:11396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.080564][ T29] audit: type=1326 audit(1765103013.711:11397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.084443][ T1615] team0 (unregistering): Port device team_slave_1 removed [ 248.105027][ T29] audit: type=1326 audit(1765103013.711:11398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.135902][ T29] audit: type=1326 audit(1765103013.711:11399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.160279][ T29] audit: type=1326 audit(1765103013.711:11400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.184803][ T29] audit: type=1326 audit(1765103013.711:11401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.208554][ T29] audit: type=1326 audit(1765103013.711:11402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.232837][ T29] audit: type=1326 audit(1765103013.711:11403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff11558f749 code=0x7ffc0000 [ 248.265210][ T1615] team0 (unregistering): Port device team_slave_0 removed [ 248.349606][T11737] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.357096][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.380369][T11737] bridge_slave_0: entered allmulticast mode [ 248.387105][T11737] bridge_slave_0: entered promiscuous mode [ 248.394781][T11737] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.401919][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.409936][T11737] bridge_slave_1: entered allmulticast mode [ 248.416533][T11737] bridge_slave_1: entered promiscuous mode [ 248.441849][T11737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.454586][T11737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.480452][T11737] team0: Port device team_slave_0 added [ 248.512301][T11737] team0: Port device team_slave_1 added [ 248.541258][T11737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.548316][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.574290][T11737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.586567][T11737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.593694][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.619843][T11737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.637685][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'. [ 248.695351][T11850] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 248.712621][T11737] hsr_slave_0: entered promiscuous mode [ 248.718819][T11737] hsr_slave_1: entered promiscuous mode [ 248.725152][T11737] debugfs: 'hsr0' already exists in 'hsr' [ 248.730931][T11737] Cannot create hsr debugfs directory [ 248.741072][ T1615] IPVS: stop unused estimator thread 0... [ 248.746562][T11853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3048'. [ 249.071162][T11737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.105779][T11737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.132366][T11737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.174062][T11737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.205839][T11863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.232417][T11863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.239544][T11863] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 249.263754][T11863] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 249.291229][T11870] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 249.429534][T11737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.449799][T11881] tipc: Started in network mode [ 249.454799][T11881] tipc: Node identity ac14140f, cluster identity 4711 [ 249.467824][T11881] tipc: New replicast peer: 255.255.255.255 [ 249.474183][T11881] tipc: Enabled bearer , priority 10 [ 249.505456][T11737] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.512708][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 249.522374][T11881] tipc: Disabling bearer [ 249.554886][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.562004][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.583519][T11737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.594075][T11737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.610034][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.617196][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.658295][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 249.692909][T11737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.811785][T11737] veth0_vlan: entered promiscuous mode [ 249.822585][T11737] veth1_vlan: entered promiscuous mode [ 249.870709][T11737] veth0_macvtap: entered promiscuous mode [ 249.890161][T11737] veth1_macvtap: entered promiscuous mode [ 249.903149][T11737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.920964][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3069'. [ 249.932667][T11737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.968851][ T1598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.982038][ T1598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.998557][ T1598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.010363][ T1598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.254072][T11945] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.262175][T11944] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3074'. [ 250.479981][T11959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3079'. [ 251.064451][T11990] ALSA: seq fatal error: cannot create timer (-19) [ 251.099156][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3090'. [ 251.198971][T11969] chnl_net:caif_netlink_parms(): no params data found [ 251.202966][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 251.240413][T12008] hsr_slave_1 (unregistering): left promiscuous mode [ 251.339136][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.347103][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.356231][T11969] bridge_slave_0: entered allmulticast mode [ 251.363239][T11969] bridge_slave_0: entered promiscuous mode [ 251.376139][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.383322][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.390623][T11969] bridge_slave_1: entered allmulticast mode [ 251.397499][T11969] bridge_slave_1: entered promiscuous mode [ 251.715403][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.743079][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 251.743098][ T29] audit: type=1326 audit(1765103017.361:11549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 251.773092][ T29] audit: type=1326 audit(1765103017.361:11550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 251.796786][ T29] audit: type=1326 audit(1765103017.361:11551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 251.843360][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.853640][ T945] bond0 (unregistering): (slave team0): Releasing backup interface [ 251.864424][ T945] bond0 (unregistering): Released all slaves [ 251.872427][T12047] xt_CT: No such helper "pptp" [ 251.897149][ T945] bond1 (unregistering): Released all slaves [ 251.913171][ T29] audit: type=1326 audit(1765103017.511:11552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 251.929122][ T945] bond2 (unregistering): Released all slaves [ 251.937008][ T29] audit: type=1326 audit(1765103017.511:11553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79186ef749 code=0x7ffc0000 [ 251.977509][ T945] bond3 (unregistering): Released all slaves [ 251.988993][ T945] bond4 (unregistering): Released all slaves [ 251.991909][ T29] audit: type=1326 audit(1765103017.591:11554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 251.999076][ T945] bond5 (unregistering): Released all slaves [ 252.018737][ T29] audit: type=1326 audit(1765103017.591:11555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 252.048402][ T29] audit: type=1326 audit(1765103017.591:11556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 252.125514][T12050] xt_CT: No such helper "pptp" [ 252.373243][ T29] audit: type=1326 audit(1765103017.731:11557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 252.396913][ T29] audit: type=1326 audit(1765103017.731:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 252.409542][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.464439][T12044] hsr_slave_1 (unregistering): left promiscuous mode [ 252.484455][ T945] tipc: Disabling bearer [ 252.489718][ T945] tipc: Left network mode [ 252.504245][ T945] IPVS: stopping master sync thread 6486 ... [ 252.509285][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.519607][ T945] IPVS: stopping backup sync thread 11015 ... [ 252.535567][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.553407][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.614763][ T945] team0 (unregistering): Port device team_slave_1 removed [ 252.632243][ T945] team0 (unregistering): Port device team_slave_0 removed [ 252.694123][T12057] __nla_validate_parse: 5 callbacks suppressed [ 252.694143][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 252.746866][T11969] team0: Port device team_slave_0 added [ 252.764270][T11969] team0: Port device team_slave_1 added [ 252.792875][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 252.803957][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.811093][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.837056][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.873530][T12063] loop2: detected capacity change from 0 to 512 [ 252.891247][T12063] EXT4-fs: Ignoring removed oldalloc option [ 252.910529][T12063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.914364][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.930015][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.933532][T12063] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.956059][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.978633][T12069] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3114'. [ 253.003810][T12062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.022625][T11969] hsr_slave_0: entered promiscuous mode [ 253.028897][T11969] hsr_slave_1: entered promiscuous mode [ 253.036287][T11969] debugfs: 'hsr0' already exists in 'hsr' [ 253.042045][T11969] Cannot create hsr debugfs directory [ 253.058669][T12071] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 253.249615][T12078] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3117'. [ 253.374957][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 253.397655][T12081] hsr_slave_1 (unregistering): left promiscuous mode [ 253.450126][T11969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.460684][T11969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.471002][T11969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.480658][T11969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.492249][T12092] ALSA: seq fatal error: cannot create timer (-19) [ 253.531763][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.545553][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.557013][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.564185][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.586528][T11969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.596961][T11969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.610046][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.617504][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.679063][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.813660][T12114] xt_CT: No such helper "pptp" [ 253.925509][T12120] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 253.976915][T12120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.985438][T12127] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 253.992832][T12127] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 254.021988][T12128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.045904][T12128] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.060739][T12128] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 254.102948][T11969] veth0_vlan: entered promiscuous mode [ 254.112860][T11969] veth1_vlan: entered promiscuous mode [ 254.133636][T11969] veth0_macvtap: entered promiscuous mode [ 254.147390][T11969] veth1_macvtap: entered promiscuous mode [ 254.161625][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.181824][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.192744][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.229760][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.274508][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.288310][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.368844][T12139] loop4: detected capacity change from 0 to 512 [ 254.414802][T12139] EXT4-fs (loop4): orphan cleanup on readonly fs [ 254.446838][T12139] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3081: bad orphan inode 13 [ 254.457796][T12139] ext4_test_bit(bit=12, block=18) = 1 [ 254.463234][T12139] is_bad_inode(inode)=0 [ 254.467408][T12139] NEXT_ORPHAN(inode)=2130706432 [ 254.472273][T12139] max_ino=32 [ 254.475616][T12139] i_nlink=1 [ 254.484209][T12139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.600282][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 254.651579][T11969] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 254.667998][ T945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.696924][T11969] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 254.724820][ T945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.815350][ T945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.858002][T12145] chnl_net:caif_netlink_parms(): no params data found [ 254.898149][T12174] loop3: detected capacity change from 0 to 512 [ 254.914253][T12174] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 254.914482][ T945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.940389][T12174] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3140: bg 0: block 255: padding at end of block bitmap is not set [ 254.958286][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3142'. [ 254.983164][T12174] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 255.001728][T12174] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3140: invalid indirect mapped block 1 (level 1) [ 255.017066][T12174] EXT4-fs (loop3): 1 truncate cleaned up [ 255.023353][T12174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.085685][T12145] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.092848][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.101803][T12145] bridge_slave_0: entered allmulticast mode [ 255.110197][T12145] bridge_slave_0: entered promiscuous mode [ 255.122673][ T945] bridge_slave_1: left allmulticast mode [ 255.128609][ T945] bridge_slave_1: left promiscuous mode [ 255.134357][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.158977][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 255.169767][T11259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.180077][ T945] bridge_slave_0: left allmulticast mode [ 255.185916][ T945] bridge_slave_0: left promiscuous mode [ 255.191795][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.418775][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 255.427748][T12200] netlink: 'syz.3.3147': attribute type 20 has an invalid length. [ 255.435639][T12200] netlink: 'syz.3.3147': attribute type 21 has an invalid length. [ 255.583115][T12201] loop3: detected capacity change from 0 to 256 [ 255.590120][T12201] vfat: Deprecated parameter 'posix' [ 255.595510][T12201] FAT-fs: "posix" option is obsolete, not supported now [ 255.668330][T12201] FAT-fs (loop3): codepage cp775 not found [ 255.756599][ T945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.767678][ T945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.777887][ T945] bond0 (unregistering): Released all slaves [ 255.788763][ T945] bond1 (unregistering): Released all slaves [ 255.856692][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.864145][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.872055][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.879684][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.893630][ T945] veth1_macvtap: left promiscuous mode [ 255.899450][ T945] veth0_macvtap: left promiscuous mode [ 255.905132][ T945] veth1_vlan: left promiscuous mode [ 255.958258][ T945] pimreg (unregistering): left allmulticast mode [ 256.023424][ T945] team0 (unregistering): Port device team_slave_1 removed [ 256.036737][ T945] team0 (unregistering): Port device team_slave_0 removed [ 256.326214][ T945] IPVS: stop unused estimator thread 0... [ 256.358648][T12145] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.365786][T12145] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.373973][T12145] bridge_slave_1: entered allmulticast mode [ 256.380612][T12145] bridge_slave_1: entered promiscuous mode [ 256.444356][T12145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.481196][T12145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.501242][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 256.544238][T12145] team0: Port device team_slave_0 added [ 256.553185][T12209] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 256.572019][T12145] team0: Port device team_slave_1 added [ 256.608178][T12145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.615250][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.641348][T12145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.728085][T12145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.735290][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.761238][T12145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.875962][T12145] hsr_slave_0: entered promiscuous mode [ 256.882311][T12145] hsr_slave_1: entered promiscuous mode [ 256.920736][T12145] debugfs: 'hsr0' already exists in 'hsr' [ 256.926561][T12145] Cannot create hsr debugfs directory [ 256.953946][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 256.953965][ T29] audit: type=1326 audit(1765103022.581:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 256.994436][T12225] netlink: zone id is out of range [ 256.999747][T12225] netlink: zone id is out of range [ 257.015080][T12225] netlink: zone id is out of range [ 257.020284][T12225] netlink: del zone limit has 8 unknown bytes [ 257.026690][ T29] audit: type=1326 audit(1765103022.581:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 257.050380][ T29] audit: type=1326 audit(1765103022.581:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 257.074222][ T29] audit: type=1326 audit(1765103022.611:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.097936][ T29] audit: type=1326 audit(1765103022.611:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.121555][ T29] audit: type=1326 audit(1765103022.611:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.145314][ T29] audit: type=1326 audit(1765103022.611:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.168931][ T29] audit: type=1326 audit(1765103022.611:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.192520][ T29] audit: type=1326 audit(1765103022.611:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.216318][ T29] audit: type=1326 audit(1765103022.611:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.3.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3407eff749 code=0x7ffc0000 [ 257.308326][T12227] xt_CT: No such helper "pptp" [ 257.335612][ T1598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.656889][T12232] chnl_net:caif_netlink_parms(): no params data found [ 257.743429][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.750591][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.760751][T12232] bridge_slave_0: entered allmulticast mode [ 257.767123][T12258] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 257.767386][T12232] bridge_slave_0: entered promiscuous mode [ 257.792705][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.799866][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.807467][T12232] bridge_slave_1: entered allmulticast mode [ 257.814107][T12232] bridge_slave_1: entered promiscuous mode [ 257.837323][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.850736][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.866152][T12145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.886919][T12145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.898173][T12232] team0: Port device team_slave_0 added [ 257.905233][T12232] team0: Port device team_slave_1 added [ 257.911124][T12145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.933721][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.940718][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.966805][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.977915][T12145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.987733][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.994770][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.020925][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.060766][T12232] hsr_slave_0: entered promiscuous mode [ 258.067297][T12232] hsr_slave_1: entered promiscuous mode [ 258.073269][T12232] debugfs: 'hsr0' already exists in 'hsr' [ 258.079267][T12232] Cannot create hsr debugfs directory [ 258.117643][T12145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.138464][T12279] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 258.148342][T12145] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.163549][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.170678][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.180219][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.187346][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.274736][T12283] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.288598][T12232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.293099][T12283] vhci_hcd: invalid port number 96 [ 258.300909][T12283] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 258.310777][T12232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.331947][T12232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.353826][T12232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.406314][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.487317][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.502865][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.515940][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.523099][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.541738][T12232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.552186][T12232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.570781][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.577965][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.626272][T12306] xt_CT: No such helper "pptp" [ 258.702574][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.926696][ T1598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.964905][T12145] veth0_vlan: entered promiscuous mode [ 258.973341][T12145] veth1_vlan: entered promiscuous mode [ 258.986686][ T1598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.011356][T12145] veth0_macvtap: entered promiscuous mode [ 259.023803][T12145] veth1_macvtap: entered promiscuous mode [ 259.040943][T12145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.052826][T12145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.065717][ T1598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.090918][ T1903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.117334][ T1615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.126586][ T1615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.147105][ T1615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.156536][T12232] veth0_vlan: entered promiscuous mode [ 259.186683][T12232] veth1_vlan: entered promiscuous mode [ 259.232863][ T1598] bridge_slave_1: left allmulticast mode [ 259.238680][ T1598] bridge_slave_1: left promiscuous mode [ 259.244709][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.253895][ T1598] bridge_slave_0: left allmulticast mode [ 259.259592][ T1598] bridge_slave_0: left promiscuous mode [ 259.265420][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.276933][T12349] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 259.416158][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.431758][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.446626][ T1598] bond0 (unregistering): Released all slaves [ 259.470239][T12349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.500837][T12232] veth0_macvtap: entered promiscuous mode [ 259.515197][T12232] veth1_macvtap: entered promiscuous mode [ 259.531471][ T1598] hsr_slave_0: left promiscuous mode [ 259.538589][ T1598] hsr_slave_1: left promiscuous mode [ 259.547683][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.555121][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.581504][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.589062][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.615997][ T1598] veth1_macvtap: left promiscuous mode [ 259.621574][ T1598] veth0_macvtap: left promiscuous mode [ 259.627271][ T1598] veth1_vlan: left promiscuous mode [ 259.632664][ T1598] veth0_vlan: left promiscuous mode [ 259.721809][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 259.742558][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 259.798085][T12232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.821293][T12232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.852066][ T382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.876051][ T382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.902712][ T382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.918808][ T382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.997512][T12393] ALSA: seq fatal error: cannot create timer (-19) [ 260.007168][T12390] __nla_validate_parse: 2 callbacks suppressed [ 260.007182][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3158'. [ 260.112412][T12390] hsr_slave_1 (unregistering): left promiscuous mode [ 260.307862][T12397] xt_CT: No such helper "pptp" [ 260.504162][T12419] loop1: detected capacity change from 0 to 512 [ 260.521695][T12419] EXT4-fs: Ignoring removed oldalloc option [ 260.555436][T12419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.569435][T12419] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.586976][T12417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.726558][T12435] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 260.743371][T12435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.949755][T12452] block device autoloading is deprecated and will be removed. [ 261.307861][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 261.528533][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 261.776479][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3239'. [ 261.946696][T12541] xt_connbytes: Forcing CT accounting to be enabled [ 261.953751][T12541] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 261.963485][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 261.963503][ T29] audit: type=1326 audit(1765103027.591:12373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 261.997403][ T29] audit: type=1326 audit(1765103027.591:12374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.021269][ T29] audit: type=1326 audit(1765103027.591:12375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.045095][ T29] audit: type=1326 audit(1765103027.591:12376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.069060][ T29] audit: type=1326 audit(1765103027.631:12377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.092703][ T29] audit: type=1326 audit(1765103027.631:12378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.116387][ T29] audit: type=1326 audit(1765103027.631:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.140290][ T29] audit: type=1326 audit(1765103027.631:12380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.164218][ T29] audit: type=1326 audit(1765103027.631:12381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 262.188172][ T29] audit: type=1326 audit(1765103027.631:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.1.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e8552005 code=0x7ffc0000 [ 262.213341][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 262.295701][T12559] loop5: detected capacity change from 0 to 128 [ 262.729936][T12611] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.737832][T12611] vhci_hcd: invalid port number 96 [ 262.743048][T12611] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 262.837390][T12626] ALSA: seq fatal error: cannot create timer (-19) [ 262.972826][T12645] loop3: detected capacity change from 0 to 128 [ 263.064389][T12647] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.072192][T12647] vhci_hcd: invalid port number 96 [ 263.077609][T12647] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 263.132981][T12653] loop3: detected capacity change from 0 to 256 [ 263.181684][T12657] ALSA: seq fatal error: cannot create timer (-19) [ 263.238175][T12668] loop5: detected capacity change from 0 to 128 [ 263.239012][T12670] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.252269][T12670] vhci_hcd: invalid port number 96 [ 263.257494][T12670] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 263.303144][T12672] bridge_slave_0: left allmulticast mode [ 263.308900][T12672] bridge_slave_0: left promiscuous mode [ 263.314840][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.325218][T12672] bridge_slave_1: left allmulticast mode [ 263.331052][T12672] bridge_slave_1: left promiscuous mode [ 263.336968][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.347341][T12672] bond0: (slave bond_slave_0): Releasing backup interface [ 263.366901][T12672] bond0: (slave bond_slave_1): Releasing backup interface [ 263.392484][T12672] team0: Port device team_slave_0 removed [ 263.422879][T12672] team0: Port device team_slave_1 removed [ 263.440879][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.448365][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.457818][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.465351][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.475783][T12672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.540450][T12677] loop5: detected capacity change from 0 to 512 [ 263.581213][T12677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 263.650704][T12677] EXT4-fs (loop5): 1 truncate cleaned up [ 263.684840][T12677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.709718][T12699] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.717269][T12699] vhci_hcd: invalid port number 96 [ 263.722388][T12699] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 263.813675][T12703] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 264.227038][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.757392][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 264.836206][T12756] loop3: detected capacity change from 0 to 128 [ 265.183362][T12759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12759 comm=syz.5.3336 [ 265.681934][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 266.549664][T12821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3356'. [ 266.635580][T12821] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.3356'. [ 266.661285][T12821] netlink: zone id is out of range [ 266.666478][T12821] netlink: zone id is out of range [ 266.671824][T12821] netlink: zone id is out of range [ 266.676978][T12821] netlink: zone id is out of range [ 266.687579][T12830] loop5: detected capacity change from 0 to 128 [ 266.694541][T12821] netlink: zone id is out of range [ 266.728815][T12821] netlink: zone id is out of range [ 266.736014][T12821] netlink: zone id is out of range [ 266.741296][T12821] netlink: zone id is out of range [ 266.747098][T12821] netlink: zone id is out of range [ 266.824588][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3359'. [ 266.973078][ T29] kauditd_printk_skb: 3418 callbacks suppressed [ 266.973096][ T29] audit: type=1326 audit(1765103032.591:15801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.006374][ T29] audit: type=1326 audit(1765103032.631:15802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.030707][ T29] audit: type=1326 audit(1765103032.651:15803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.056735][ T29] audit: type=1326 audit(1765103032.681:15804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.081000][ T29] audit: type=1326 audit(1765103032.701:15805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.106627][ T29] audit: type=1326 audit(1765103032.731:15806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.130281][ T29] audit: type=1326 audit(1765103032.731:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.154255][ T29] audit: type=1326 audit(1765103032.781:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.181296][ T29] audit: type=1326 audit(1765103032.801:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.204927][ T29] audit: type=1326 audit(1765103032.801:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 267.496154][T12849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.525104][T12851] sctp: [Deprecated]: syz.2.3364 (pid 12851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.525104][T12851] Use struct sctp_sack_info instead [ 267.605543][T12849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.677123][T12849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.752283][T12851] IPv6: sit1: Disabled Multicast RS [ 267.783185][T12849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.890429][ T382] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.909206][ T382] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.933606][ T382] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.953058][ T382] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.042002][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 268.079730][T12875] loop5: detected capacity change from 0 to 128 [ 268.315830][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3376'. [ 268.437803][T12887] xt_CT: No such helper "pptp" [ 268.486532][T12886] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 268.930745][T12898] loop5: detected capacity change from 0 to 512 [ 268.963293][T12898] EXT4-fs: Ignoring removed oldalloc option [ 268.989817][T12898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.013897][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3383'. [ 269.038789][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.060369][T12902] veth0: entered promiscuous mode [ 269.082227][T12911] loop5: detected capacity change from 0 to 128 [ 269.084307][T12901] veth0: left promiscuous mode [ 269.137190][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3385'. [ 269.404113][T12937] loop5: detected capacity change from 0 to 512 [ 269.417160][T12937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.724466][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3399'. [ 269.954128][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.177033][T12958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3401'. [ 270.200791][T12961] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 270.285073][T12965] ALSA: seq fatal error: cannot create timer (-19) [ 270.318746][T12972] netlink: 'syz.2.3407': attribute type 1 has an invalid length. [ 270.362960][T12975] loop3: detected capacity change from 0 to 128 [ 270.521952][T12983] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 270.652022][T12991] x_tables: ip_tables: osf match: only valid for protocol 6 [ 270.792376][T12998] loop3: detected capacity change from 0 to 128 [ 271.779294][T13045] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 271.827543][T13047] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 271.884413][T13053] loop5: detected capacity change from 0 to 512 [ 271.894295][T13053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.976298][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 271.985338][ T29] kauditd_printk_skb: 2681 callbacks suppressed [ 271.985422][ T29] audit: type=1326 audit(1765103037.601:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.015229][ T29] audit: type=1326 audit(1765103037.601:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.038891][ T29] audit: type=1326 audit(1765103037.601:18494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.062523][ T29] audit: type=1326 audit(1765103037.601:18495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.086294][ T29] audit: type=1326 audit(1765103037.601:18496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.109975][ T29] audit: type=1326 audit(1765103037.611:18497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.133595][ T29] audit: type=1326 audit(1765103037.611:18498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.158954][ T29] audit: type=1326 audit(1765103037.611:18499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.182563][ T29] audit: type=1326 audit(1765103037.611:18500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.206177][ T29] audit: type=1326 audit(1765103037.611:18501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd95b732005 code=0x7ffc0000 [ 272.423131][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.725047][T13080] loop3: detected capacity change from 0 to 128 [ 272.776629][T13087] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 272.824698][T13092] loop3: detected capacity change from 0 to 512 [ 272.826687][T13094] netlink: 'syz.0.3453': attribute type 1 has an invalid length. [ 272.837799][T13092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.455390][T11259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.329552][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3468'. [ 274.342082][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3456'. [ 274.488696][T13139] netlink: 464 bytes leftover after parsing attributes in process `syz.5.3469'. [ 275.172008][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 275.229068][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 275.309806][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3486'. [ 276.777803][T13217] loop5: detected capacity change from 0 to 512 [ 276.857474][T13217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.870247][T13217] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.425235][T13235] netlink: 'syz.0.3501': attribute type 1 has an invalid length. [ 277.444280][T13238] tipc: Started in network mode [ 277.449255][T13238] tipc: Node identity ac14140f, cluster identity 4711 [ 277.458435][T13211] xt_CT: No such helper "pptp" [ 277.486634][T13238] tipc: New replicast peer: 255.255.255.255 [ 277.492844][T13238] tipc: Enabled bearer , priority 10 [ 277.979758][T13255] loop3: detected capacity change from 0 to 512 [ 277.993949][T13255] EXT4-fs: Ignoring removed oldalloc option [ 278.015029][T13255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.027882][T13255] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.040450][T13254] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.177821][T13264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3514'. [ 278.300713][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.309816][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 278.309834][ T29] audit: type=1326 audit(1765103043.921:19146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 278.339794][ T29] audit: type=1326 audit(1765103043.921:19147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 278.364589][ T29] audit: type=1326 audit(1765103043.941:19148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f122bb1e1ff code=0x7ffc0000 [ 278.388176][ T29] audit: type=1326 audit(1765103043.941:19149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 278.411996][ T29] audit: type=1326 audit(1765103043.941:19150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 278.435664][ T29] audit: type=1326 audit(1765103043.941:19151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f122bb1f783 code=0x7ffc0000 [ 278.459078][ T29] audit: type=1326 audit(1765103043.941:19152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f122bb1e1ff code=0x7ffc0000 [ 278.482581][ T29] audit: type=1326 audit(1765103043.941:19153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f122bb1f7d7 code=0x7ffc0000 [ 278.506493][ T29] audit: type=1326 audit(1765103043.941:19154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f122bb1df90 code=0x7ffc0000 [ 278.514868][T13279] tipc: New replicast peer: 255.255.255.255 [ 278.530096][ T29] audit: type=1326 audit(1765103043.941:19155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.2.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f122bb1e3aa code=0x7ffc0000 [ 278.536255][T13279] tipc: Enabled bearer , priority 10 [ 278.592541][T13284] loop5: detected capacity change from 0 to 128 [ 278.613059][ T3488] tipc: Node number set to 2886997007 [ 278.632158][T13288] netlink: 'syz.0.3524': attribute type 1 has an invalid length. [ 278.726837][T13291] ALSA: seq fatal error: cannot create timer (-19) [ 278.864783][T13298] xt_CT: No such helper "pptp" [ 279.061318][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3538'. [ 279.653092][ T3489] tipc: Node number set to 2886997007 [ 279.695488][T13360] ALSA: seq fatal error: cannot create timer (-19) [ 279.800456][T13374] netlink: 464 bytes leftover after parsing attributes in process `syz.3.3560'. [ 279.904284][T13383] tipc: Started in network mode [ 279.909221][T13383] tipc: Node identity ac14140f, cluster identity 4711 [ 279.917178][T13380] xt_CT: No such helper "pptp" [ 279.917529][T13383] tipc: New replicast peer: 255.255.255.255 [ 279.928158][T13383] tipc: Enabled bearer , priority 10 [ 279.952437][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 279.961478][T13383] tipc: Disabling bearer [ 280.663945][T13410] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3573'. [ 280.739651][T13419] tipc: Enabling of bearer rejected, already enabled [ 280.818965][T13421] tipc: Enabling of bearer rejected, already enabled [ 280.827770][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'. [ 280.836789][T13421] tipc: Disabling bearer [ 280.959160][T13437] netlink: 'syz.3.3583': attribute type 1 has an invalid length. [ 280.977302][T13437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.147020][T13453] tipc: Started in network mode [ 281.151998][T13453] tipc: Node identity ac14140f, cluster identity 4711 [ 281.159732][T13453] tipc: New replicast peer: 255.255.255.255 [ 281.165956][T13453] tipc: Enabled bearer , priority 10 [ 281.177410][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 281.186406][T13453] tipc: Disabling bearer [ 281.282349][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 281.632295][T13471] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 281.657615][T13471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.852620][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'. [ 281.869949][T13477] netlink: 'syz.2.3597': attribute type 1 has an invalid length. [ 282.068341][T13481] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 282.515117][T13499] netlink: 'syz.5.3606': attribute type 1 has an invalid length. [ 282.531600][T13499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.616213][T13506] loop5: detected capacity change from 0 to 512 [ 282.624463][T13506] EXT4-fs (loop5): orphan cleanup on readonly fs [ 282.631255][T13506] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3610: bg 0: block 127: padding at end of block bitmap is not set [ 282.653437][T13506] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 282.677700][T13506] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.3610: corrupted inode contents [ 282.705215][T13506] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 282.716483][T13511] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 282.740154][T13506] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.3610: corrupted inode contents [ 282.775167][T13506] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.3610: mark_inode_dirty error [ 282.812746][T13506] EXT4-fs (loop5): 1 orphan inode deleted [ 282.829880][T13506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 282.861863][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3610'. [ 282.874192][T13506] netlink: 'syz.5.3610': attribute type 1 has an invalid length. [ 282.954591][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.972481][T13525] netlink: 'syz.5.3618': attribute type 1 has an invalid length. [ 282.987747][T13525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.254315][T13539] netlink: 'syz.2.3623': attribute type 1 has an invalid length. [ 283.313933][ T29] kauditd_printk_skb: 2992 callbacks suppressed [ 283.313951][ T29] audit: type=1326 audit(1765103048.941:22148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.352338][ T29] audit: type=1326 audit(1765103048.971:22149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.376206][ T29] audit: type=1326 audit(1765103048.971:22150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.399826][ T29] audit: type=1326 audit(1765103048.971:22151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.423714][ T29] audit: type=1326 audit(1765103048.971:22152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.447476][ T29] audit: type=1326 audit(1765103048.971:22153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.458303][T13547] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 283.479175][ T29] audit: type=1326 audit(1765103049.111:22154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.505406][ T29] audit: type=1326 audit(1765103049.111:22155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.529182][ T29] audit: type=1326 audit(1765103049.111:22156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.552891][ T29] audit: type=1326 audit(1765103049.111:22157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13534 comm="syz.5.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31d06c2005 code=0x7ffc0000 [ 283.655611][T13551] tipc: New replicast peer: 255.255.255.255 [ 283.661763][T13551] tipc: Enabled bearer , priority 10 [ 283.680025][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 283.689467][T13551] tipc: Disabling bearer [ 284.090575][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3635'. [ 284.378658][T13599] netlink: 'syz.5.3643': attribute type 1 has an invalid length. [ 284.399604][T13600] tipc: New replicast peer: 255.255.255.255 [ 284.405831][T13600] tipc: Enabled bearer , priority 10 [ 284.412460][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 284.421449][T13600] tipc: Disabling bearer [ 284.619696][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 284.856388][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'. [ 284.865376][T13622] netlink: 'syz.2.3649': attribute type 20 has an invalid length. [ 284.873296][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'. [ 285.136079][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3652'. [ 285.318913][T13633] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 285.385253][T13637] loop5: detected capacity change from 0 to 128 [ 285.925815][T13671] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 286.187885][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3669'. [ 286.678343][T13707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.781064][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3683'. [ 286.881175][T13725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 287.163873][T13748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.401358][T13773] loop5: detected capacity change from 0 to 512 [ 287.412736][T13773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.458544][T13781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.487525][T13781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.494876][T13781] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.506655][T13781] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 287.663271][T13798] validate_nla: 3 callbacks suppressed [ 287.663292][T13798] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 287.688585][T13804] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 287.955749][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.042483][T13828] loop5: detected capacity change from 0 to 512 [ 288.075338][T13828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.094721][T13828] tap0: tun_chr_ioctl cmd 35111 [ 288.174743][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.209620][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.219685][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.323956][ T29] kauditd_printk_skb: 1343 callbacks suppressed [ 288.323970][ T29] audit: type=1326 audit(1765103053.951:23501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.358604][ T29] audit: type=1326 audit(1765103053.981:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.382692][ T29] audit: type=1326 audit(1765103053.981:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.406452][ T29] audit: type=1326 audit(1765103053.981:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.430132][ T29] audit: type=1326 audit(1765103053.981:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.454793][ T29] audit: type=1326 audit(1765103054.091:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.479299][ T29] audit: type=1326 audit(1765103054.111:23507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.503730][ T29] audit: type=1326 audit(1765103054.131:23508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.527459][ T29] audit: type=1326 audit(1765103054.131:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.551225][ T29] audit: type=1326 audit(1765103054.131:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3407f32005 code=0x7ffc0000 [ 288.735940][T13848] xt_CT: No such helper "pptp" [ 288.914167][T13867] netlink: 'syz.1.3737': attribute type 1 has an invalid length. [ 289.442887][T13898] __nla_validate_parse: 6 callbacks suppressed [ 289.442906][T13898] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 289.680057][T13908] xt_CT: No such helper "pptp" [ 289.884578][T13935] netlink: 'syz.5.3765': attribute type 1 has an invalid length. [ 290.480551][T13944] xt_CT: No such helper "pptp" [ 290.764653][T13970] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 291.027012][T13979] xt_CT: No such helper "pptp" [ 291.161613][T13996] netlink: 'syz.5.3787': attribute type 1 has an invalid length. [ 291.356469][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3792'. [ 291.378867][T14014] hsr_slave_1 (unregistering): left promiscuous mode [ 291.573332][T14033] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3801'. [ 291.685494][T14038] xt_CT: No such helper "pptp" [ 292.046976][T14046] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 292.079544][T14048] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.087922][T14048] futex_wake_op: syz.3.3806 tries to shift op by 36; fix this program [ 292.213963][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3804'. [ 292.223065][T14052] netlink: 'syz.5.3804': attribute type 20 has an invalid length. [ 292.231329][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3804'. [ 292.515113][T14053] loop5: detected capacity change from 0 to 256 [ 292.613046][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3807'. [ 292.893634][T14063] xt_SECMARK: invalid mode: 2 [ 292.913615][T14059] dummy0: entered promiscuous mode [ 292.933172][T14059] macsec1: entered promiscuous mode [ 292.950525][T14059] macsec1: entered allmulticast mode [ 292.966141][T14059] dummy0: entered allmulticast mode [ 292.971831][T14071] netlink: 'syz.2.3814': attribute type 1 has an invalid length. [ 292.991069][T14059] dummy0: left allmulticast mode [ 293.000206][T14059] dummy0: left promiscuous mode [ 293.121234][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3815'. [ 293.335297][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 293.335386][ T29] audit: type=1326 audit(1765103058.961:23947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.395441][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3817'. [ 293.445290][ T29] audit: type=1326 audit(1765103058.991:23948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.469405][ T29] audit: type=1326 audit(1765103058.991:23949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.493101][ T29] audit: type=1326 audit(1765103058.991:23950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.516734][ T29] audit: type=1326 audit(1765103058.991:23951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.540462][ T29] audit: type=1326 audit(1765103058.991:23952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.564112][ T29] audit: type=1326 audit(1765103058.991:23953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.587882][ T29] audit: type=1326 audit(1765103058.991:23954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.611638][ T29] audit: type=1326 audit(1765103058.991:23955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.635287][ T29] audit: type=1326 audit(1765103058.991:23956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 293.692222][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'. [ 293.721227][T14096] netlink: 'syz.5.3820': attribute type 1 has an invalid length. [ 294.144673][T14122] xt_CT: No such helper "pptp" [ 294.210741][T14125] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 294.430563][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 294.439692][T14129] netlink: 'syz.3.3831': attribute type 20 has an invalid length. [ 294.447645][T14129] netlink: 'syz.3.3831': attribute type 21 has an invalid length. [ 294.561836][T14131] netlink: 'syz.0.3832': attribute type 1 has an invalid length. [ 295.263180][T14154] netlink: 'syz.0.3834': attribute type 1 has an invalid length. [ 295.526563][T14161] netlink: 'syz.1.3843': attribute type 1 has an invalid length. [ 295.789768][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'. [ 295.974875][T14185] xt_CT: No such helper "pptp" [ 296.024758][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3852'. [ 296.071179][T14198] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 296.332095][T14217] tipc: New replicast peer: 255.255.255.255 [ 296.338254][T14217] tipc: Enabled bearer , priority 10 [ 296.346479][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 296.355574][T14217] tipc: Disabling bearer [ 296.456379][T14236] netlink: 'syz.2.3868': attribute type 1 has an invalid length. [ 296.580103][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3875'. [ 296.584230][T14251] netlink: 'syz.0.3874': attribute type 1 has an invalid length. [ 297.047693][T14282] netlink: 464 bytes leftover after parsing attributes in process `syz.2.3885'. [ 297.100244][T14286] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3888'. [ 297.168539][T14288] xt_CT: No such helper "pptp" [ 297.331828][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 297.506353][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 297.620077][T14324] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3901'. [ 297.717773][T14338] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3908'. [ 297.846865][T14348] loop5: detected capacity change from 0 to 512 [ 297.862153][T14348] EXT4-fs: Ignoring removed oldalloc option [ 297.880635][T14348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.914730][T12232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.957387][T14360] FAULT_INJECTION: forcing a failure. [ 297.957387][T14360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.971349][T14360] CPU: 0 UID: 0 PID: 14360 Comm: syz.5.3915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.971384][T14360] Tainted: [W]=WARN [ 297.971391][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.971403][T14360] Call Trace: [ 297.971409][T14360] [ 297.971415][T14360] __dump_stack+0x1d/0x30 [ 297.971439][T14360] dump_stack_lvl+0xe8/0x140 [ 297.971511][T14360] dump_stack+0x15/0x1b [ 297.971537][T14360] should_fail_ex+0x265/0x280 [ 297.971561][T14360] should_fail+0xb/0x20 [ 297.971662][T14360] should_fail_usercopy+0x1a/0x20 [ 297.971692][T14360] _copy_from_user+0x1c/0xb0 [ 297.971724][T14360] ___sys_sendmsg+0xc1/0x1d0 [ 297.971761][T14360] __x64_sys_sendmsg+0xd4/0x160 [ 297.971834][T14360] x64_sys_call+0x17ba/0x3000 [ 297.971866][T14360] do_syscall_64+0xd8/0x2a0 [ 297.971902][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.971986][T14360] RIP: 0033:0x7f31d068f749 [ 297.972003][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.972022][T14360] RSP: 002b:00007f31cf0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.972043][T14360] RAX: ffffffffffffffda RBX: 00007f31d08e5fa0 RCX: 00007f31d068f749 [ 297.972057][T14360] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 297.972113][T14360] RBP: 00007f31cf0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 297.972124][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.972137][T14360] R13: 00007f31d08e6038 R14: 00007f31d08e5fa0 R15: 00007ffde3578148 [ 297.972185][T14360] [ 298.183507][T14369] validate_nla: 4 callbacks suppressed [ 298.183526][T14369] netlink: 'syz.2.3919': attribute type 1 has an invalid length. [ 298.403470][T14385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 298.507947][T14389] netlink: 'syz.3.3926': attribute type 1 has an invalid length. [ 298.527186][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 298.527217][ T29] audit: type=1326 audit(1765103064.151:24598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 298.557140][ T29] audit: type=1326 audit(1765103064.151:24599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 298.580771][ T29] audit: type=1326 audit(1765103064.151:24600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 298.625472][T14391] xt_CT: No such helper "pptp" [ 298.643768][T14389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.677719][T14394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.709663][ T29] audit: type=1326 audit(1765103064.311:24601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 298.733370][ T29] audit: type=1326 audit(1765103064.311:24602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 298.760696][T14394] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 298.778190][T14394] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 298.799454][ T29] audit: type=1326 audit(1765103064.421:24603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 298.823612][ T29] audit: type=1326 audit(1765103064.421:24604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 298.847351][ T29] audit: type=1326 audit(1765103064.421:24605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 298.871523][ T29] audit: type=1326 audit(1765103064.421:24606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 298.895165][ T29] audit: type=1326 audit(1765103064.421:24607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd95b6ff749 code=0x7ffc0000 [ 299.028170][T14366] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.094315][T14403] netlink: 'syz.5.3930': attribute type 1 has an invalid length. [ 299.133674][T14406] netlink: 'syz.0.3931': attribute type 1 has an invalid length. [ 299.273755][T14427] tipc: New replicast peer: 255.255.255.255 [ 299.279980][T14427] tipc: Enabled bearer , priority 10 [ 299.289445][T14427] tipc: Disabling bearer [ 299.303739][T14418] loop5: detected capacity change from 0 to 8192 [ 299.312896][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.320769][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.328529][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.336212][ T1036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.343586][ T1036] rtc rtc0: __rtc_set_alarm: err=-22 [ 299.697172][T14460] xt_CT: No such helper "pptp" [ 300.101958][T14473] tipc: Started in network mode [ 300.106899][T14473] tipc: Node identity ac14140f, cluster identity 4711 [ 300.113865][T14473] tipc: New replicast peer: 255.255.255.255 [ 300.119917][T14473] tipc: Enabled bearer , priority 10 [ 300.126604][T14473] tipc: Disabling bearer [ 300.351318][T14487] netlink: 'syz.5.3961': attribute type 1 has an invalid length. [ 300.434117][T14499] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 301.093985][T14529] xt_CT: No such helper "pptp" [ 301.261960][T14540] netlink: 'syz.5.3980': attribute type 1 has an invalid length. [ 301.320945][T14542] __nla_validate_parse: 11 callbacks suppressed [ 301.320967][T14542] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3981'. [ 301.388547][T14555] loop5: detected capacity change from 0 to 128 [ 301.394017][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 301.407640][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 301.421218][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 301.466933][T14559] netlink: 'syz.5.3988': attribute type 1 has an invalid length. [ 301.573798][T14565] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 301.822832][T14577] vlan2: entered allmulticast mode [ 301.851059][T14578] vlan2: entered allmulticast mode [ 301.982425][T14590] netlink: 464 bytes leftover after parsing attributes in process `syz.0.4000'. [ 302.027310][T14594] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 302.069176][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'. [ 302.276066][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4006'. [ 302.320195][T14612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4008'. [ 302.339618][T14610] xt_CT: No such helper "pptp" [ 302.376557][T14619] unsupported nla_type 52263 [ 302.479647][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'. [ 302.483684][T14631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.489375][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'. [ 302.518634][T14631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.526148][T14631] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 302.538446][T14631] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 303.489439][T14683] validate_nla: 6 callbacks suppressed [ 303.489467][T14683] netlink: 'syz.5.4036': attribute type 1 has an invalid length. [ 303.534138][ T29] kauditd_printk_skb: 2270 callbacks suppressed [ 303.534158][ T29] audit: type=1326 audit(1765103069.161:26879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 303.564289][ T29] audit: type=1326 audit(1765103069.161:26880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f76e851f749 code=0x7ffc0000 [ 303.588416][ T29] audit: type=1326 audit(1765103069.161:26881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.589099][T14691] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 303.612165][ T29] audit: type=1326 audit(1765103069.161:26882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.643552][ T29] audit: type=1326 audit(1765103069.151:26878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.655560][T14692] xt_CT: No such helper "pptp" [ 303.667307][ T29] audit: type=1326 audit(1765103069.161:26883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.695763][ T29] audit: type=1326 audit(1765103069.161:26884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.719275][ T29] audit: type=1326 audit(1765103069.161:26885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.743131][ T29] audit: type=1326 audit(1765103069.161:26886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 303.766882][ T29] audit: type=1326 audit(1765103069.161:26887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 304.618752][T14760] loop5: detected capacity change from 0 to 128 [ 304.675100][T14760] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.687595][T14760] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.743282][T12232] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.763844][T14772] netlink: 'syz.5.4067': attribute type 1 has an invalid length. [ 304.929837][T14776] IPVS: Unknown mcast interface: vcan0 [ 305.134888][T14796] IPVS: Unknown mcast interface: vcan0 [ 305.256762][T14808] netlink: 'syz.5.4080': attribute type 1 has an invalid length. [ 306.092738][T14842] netlink: 'syz.0.4092': attribute type 1 has an invalid length. [ 306.119795][T14844] netlink: 'syz.0.4093': attribute type 1 has an invalid length. [ 306.199566][T14852] netlink: 'syz.1.4096': attribute type 1 has an invalid length. [ 306.222875][T14852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.240719][T14852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.252743][T14852] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address [ 306.264826][T14852] bond4: (slave vxcan7): Error -95 calling set_mac_address [ 306.310553][T14854] IPVS: Unknown mcast interface: vcan0 [ 306.324604][T14858] ALSA: seq fatal error: cannot create timer (-19) [ 306.349813][T14865] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 306.361317][T14867] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 306.377916][T14867] loop5: detected capacity change from 0 to 512 [ 306.385002][T14867] EXT4-fs: Invalid want_extra_isize 9 [ 306.419781][T14869] __nla_validate_parse: 14 callbacks suppressed [ 306.419799][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4101'. [ 306.435783][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4101'. [ 306.444365][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4102'. [ 306.454775][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4102'. [ 307.277134][T14893] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 307.291273][T14893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.309418][T14893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.316598][T14893] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 307.328452][T14893] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 307.341151][T14896] tipc: New replicast peer: 255.255.255.255 [ 307.347524][T14896] tipc: Enabled bearer , priority 10 [ 307.354383][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4110'. [ 307.363421][T14896] tipc: Disabling bearer [ 307.439132][T14903] loop5: detected capacity change from 0 to 512 [ 307.445817][T14903] EXT4-fs: Ignoring removed oldalloc option [ 307.465013][T14903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.476193][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4114'. [ 307.483593][T14903] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.517474][T14902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.567704][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 307.578838][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 307.594002][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 308.170900][T14928] tipc: New replicast peer: 255.255.255.255 [ 308.177046][T14928] tipc: Enabled bearer , priority 10 [ 308.184288][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4121'. [ 308.193329][T14928] tipc: Disabling bearer [ 308.550029][ T29] kauditd_printk_skb: 2578 callbacks suppressed [ 308.550103][ T29] audit: type=1326 audit(1765103074.171:29466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.685370][ T29] audit: type=1326 audit(1765103074.211:29467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.709107][ T29] audit: type=1326 audit(1765103074.211:29468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.732741][ T29] audit: type=1326 audit(1765103074.211:29469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.756757][ T29] audit: type=1326 audit(1765103074.211:29470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.780509][ T29] audit: type=1326 audit(1765103074.211:29471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.804599][ T29] audit: type=1326 audit(1765103074.211:29472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.828435][ T29] audit: type=1326 audit(1765103074.211:29473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.852650][ T29] audit: type=1326 audit(1765103074.211:29474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.876546][ T29] audit: type=1326 audit(1765103074.211:29475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14946 comm="syz.5.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d068f749 code=0x7ffc0000 [ 308.977843][T14969] validate_nla: 2 callbacks suppressed [ 308.977909][T14969] netlink: 'syz.5.4137': attribute type 1 has an invalid length. [ 309.810801][T15002] netlink: 'syz.1.4145': attribute type 20 has an invalid length. [ 309.818827][T15002] netlink: 'syz.1.4145': attribute type 21 has an invalid length. [ 310.311875][T15031] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 310.667034][T15049] tipc: New replicast peer: 255.255.255.255 [ 310.673149][T15049] tipc: Enabled bearer , priority 10 [ 310.767104][T15053] tipc: Disabling bearer [ 311.393294][T15088] tipc: New replicast peer: 255.255.255.255 [ 311.399448][T15088] tipc: Enabled bearer , priority 10 [ 311.420305][T15088] tipc: Disabling bearer [ 311.479823][T15091] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 311.609098][T15097] netlink: 'syz.0.4177': attribute type 1 has an invalid length. [ 311.711726][T15099] __nla_validate_parse: 10 callbacks suppressed [ 311.711746][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 312.284011][T15126] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 312.453893][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 312.820569][T15159] netlink: 'syz.3.4200': attribute type 1 has an invalid length. [ 312.889729][T15165] netlink: 'syz.1.4201': attribute type 1 has an invalid length. [ 313.002284][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'. [ 313.312265][T15190] netlink: 'syz.0.4210': attribute type 1 has an invalid length. [ 313.391785][T15204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.579258][ T29] kauditd_printk_skb: 2584 callbacks suppressed [ 313.579272][ T29] audit: type=1326 audit(1765103079.201:32060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.609603][ T29] audit: type=1326 audit(1765103079.201:32061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.633437][ T29] audit: type=1326 audit(1765103079.201:32062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.657253][ T29] audit: type=1326 audit(1765103079.201:32063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.681018][ T29] audit: type=1326 audit(1765103079.201:32064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.705118][ T29] audit: type=1326 audit(1765103079.201:32065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122bb1f749 code=0x7ffc0000 [ 313.728820][ T29] audit: type=1326 audit(1765103079.201:32066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 313.752429][ T29] audit: type=1326 audit(1765103079.201:32067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 313.776094][ T29] audit: type=1326 audit(1765103079.201:32068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 313.799693][ T29] audit: type=1326 audit(1765103079.201:32069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.2.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f122bb52005 code=0x7ffc0000 [ 313.884784][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4225'. [ 313.893951][T15229] IPVS: Unknown mcast interface: vcan0 [ 314.272456][T15244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3697 sclass=netlink_route_socket pid=15244 comm=syz.1.4230 [ 314.303961][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4231'. [ 314.371337][T15250] validate_nla: 2 callbacks suppressed [ 314.371353][T15250] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 314.382080][T15252] tipc: New replicast peer: 255.255.255.255 [ 314.391076][T15252] tipc: Enabled bearer , priority 10 [ 314.398884][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4234'. [ 314.408023][T15252] tipc: Disabling bearer [ 314.421955][T15254] netlink: 'syz.2.4235': attribute type 1 has an invalid length. [ 314.881392][T15274] xt_CT: No such helper "pptp" [ 315.132905][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4243'. [ 315.253997][T15285] netlink: 'syz.1.4246': attribute type 1 has an invalid length. [ 315.294653][T15287] tipc: New replicast peer: 255.255.255.255 [ 315.300816][T15287] tipc: Enabled bearer , priority 10 [ 315.323817][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4247'. [ 315.332828][T15287] tipc: Disabling bearer [ 315.634631][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4251'. [ 315.700783][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4254'. [ 316.513827][T15321] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 316.637472][T15336] tipc: New replicast peer: 255.255.255.255 [ 316.643603][T15336] tipc: Enabled bearer , priority 10 [ 316.650318][T15336] tipc: Disabling bearer [ 316.901454][T15360] __nla_validate_parse: 3 callbacks suppressed [ 316.901483][T15360] netlink: 130448 bytes leftover after parsing attributes in process `syz.0.4272'. [ 316.917489][T15360] net_ratelimit: 4 callbacks suppressed [ 316.917509][T15360] netlink: zone id is out of range [ 316.928424][T15360] netlink: zone id is out of range [ 316.935723][T15360] netlink: zone id is out of range [ 316.941870][T15360] netlink: zone id is out of range [ 316.953139][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4272'. [ 316.955760][T15360] netlink: zone id is out of range [ 316.967291][T15360] netlink: zone id is out of range [ 316.972426][T15360] netlink: zone id is out of range [ 316.977805][T15360] netlink: zone id is out of range [ 316.982961][T15360] netlink: zone id is out of range [ 316.988241][T15360] netlink: zone id is out of range [ 316.998712][T15361] team0: Port device team_slave_0 removed [ 317.401797][T15377] xt_CT: No such helper "pptp" [ 317.494601][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 317.539336][T15391] netlink: 'syz.5.4279': attribute type 1 has an invalid length. [ 317.689401][T15402] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.742527][T15407] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=15407 comm=syz.5.4288 [ 317.925008][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4293'. [ 318.054238][T15431] ================================================================== [ 318.062372][T15431] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 318.069701][T15431] [ 318.072036][T15431] write to 0xffff88811ac8fc00 of 8 bytes by task 15429 on cpu 1: [ 318.079769][T15431] mas_wmb_replace+0x208/0xfa0 [ 318.084564][T15431] mas_wr_store_entry+0x13e3/0x2750 [ 318.089782][T15431] mas_store_prealloc+0x760/0xa90 [ 318.094830][T15431] vma_iter_store_new+0x1c5/0x200 [ 318.099861][T15431] vma_complete+0x125/0x580 [ 318.104397][T15431] __split_vma+0x5e3/0x660 [ 318.108831][T15431] vma_modify+0xbee/0xd50 [ 318.113277][T15431] vma_modify_flags+0x10c/0x190 [ 318.118150][T15431] mprotect_fixup+0x30f/0x5e0 [ 318.122849][T15431] do_mprotect_pkey+0x6d6/0x980 [ 318.127706][T15431] __x64_sys_mprotect+0x48/0x60 [ 318.132579][T15431] x64_sys_call+0x2c3b/0x3000 [ 318.137267][T15431] do_syscall_64+0xd8/0x2a0 [ 318.141782][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.147694][T15431] [ 318.150025][T15431] read to 0xffff88811ac8fc00 of 8 bytes by task 15431 on cpu 0: [ 318.157656][T15431] mas_state_walk+0x485/0x650 [ 318.162347][T15431] mas_walk+0x60/0x150 [ 318.166422][T15431] lock_vma_under_rcu+0x95/0x1b0 [ 318.171367][T15431] do_user_addr_fault+0x233/0x1080 [ 318.176491][T15431] exc_page_fault+0x62/0xa0 [ 318.181004][T15431] asm_exc_page_fault+0x26/0x30 [ 318.185910][T15431] [ 318.188232][T15431] value changed: 0xffff888100058dc1 -> 0xffff88811ac8fc00 [ 318.195335][T15431] [ 318.197660][T15431] Reported by Kernel Concurrency Sanitizer on: [ 318.203815][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.2.4297 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 318.215193][T15431] Tainted: [W]=WARN [ 318.218997][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.229053][T15431] ==================================================================